[Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso
carnil at debian.org
Thu May 3 21:20:38 BST 2018
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
86ee7ada by Salvatore Bonaccorso at 2018-05-03T22:20:09+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -7,13 +7,13 @@ CVE-2018-10718 (Stack-based buffer overflow in Activision Infinity Ward Call of
CVE-2018-10717 (The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 does not ...)
TODO: check
CVE-2018-10716 (An issue was discovered in Shanghai 2345 Security Guard 3.7.0. ...)
- TODO: check
+ NOT-FOR-US: Shanghai 2345 Security Guard
CVE-2018-10715
RESERVED
CVE-2018-10714
RESERVED
CVE-2018-10713 (An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2018-10712
RESERVED
CVE-2018-10711
@@ -308,9 +308,9 @@ CVE-2018-10580
CVE-2018-10579
RESERVED
CVE-2018-10578 (An issue was discovered on WatchGuard AP100, AP102, and AP200 devices ...)
- TODO: check
+ NOT-FOR-US: WatchGuard AP100, AP102, and AP200 devices
CVE-2018-10577 (An issue was discovered on WatchGuard AP100, AP102, and AP200 devices ...)
- TODO: check
+ NOT-FOR-US: WatchGuard AP100, AP102, and AP200 devices
CVE-2018-10576 (An issue was discovered on WatchGuard AP100, AP102, and AP200 devices ...)
NOT-FOR-US: WatchGuard devices
CVE-2018-10575 (An issue was discovered on WatchGuard AP100, AP102, and AP200 devices ...)
@@ -330,17 +330,17 @@ CVE-2018-10570 (Frog CMS 0.9.5 has XSS in /install/index.php via the ...)
CVE-2018-10569
RESERVED
CVE-2018-10568 (XSS exists in Flexense DiskSorter Enterprise from v9.5.12 to v10.7. ...)
- TODO: check
+ NOT-FOR-US: Flexense DiskSorter Enterprise
CVE-2018-10567 (XSS exists in Flexense VX Search Enterprise from v10.1.12 to v10.7. ...)
- TODO: check
+ NOT-FOR-US: Flexense VX Search Enterprise
CVE-2018-10566 (XSS exists in Flexense DupScout Enterprise from v10.0.18 to v10.7. ...)
- TODO: check
+ NOT-FOR-US: Flexense DupScout Enterprise
CVE-2018-10565 (XSS exists in Flexense DiskSavvy Enterprise from v10.4 to v10.7. ...)
- TODO: check
+ NOT-FOR-US: Flexense DiskSavvy Enterprise
CVE-2018-10564 (XSS exists in Flexense DiskPulse Enterprise from v10.4 to v10.7. ...)
- TODO: check
+ NOT-FOR-US: Flexense DiskPulse Enterprise
CVE-2018-10563 (An XSS in Flexense SyncBreeze affects all versions (tested from ...)
- TODO: check
+ NOT-FOR-US: Flexense SyncBreeze
CVE-2018-10562
RESERVED
CVE-2018-10561
@@ -1003,7 +1003,7 @@ CVE-2018-10296 (MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title param
CVE-2018-10295 (ChemCMS v1.0.6 has CSRF by using public/admin/user/addpost.html to add ...)
NOT-FOR-US: ChemCMS
CVE-2018-10294 (Flexense DiskBoss Enterprise v7.4.28 to v9.1.16 has XSS. ...)
- TODO: check
+ NOT-FOR-US: Flexense DiskBoss Enterprise
CVE-2018-10293
RESERVED
CVE-2018-10292
@@ -1337,15 +1337,15 @@ CVE-2018-10170 (NordVPN 6.12.7.0 for Windows suffers from a SYSTEM privilege esc
CVE-2018-10169 (ProtonVPN 1.3.3 for Windows suffers from a SYSTEM privilege escalation ...)
NOT-FOR-US: ProtonVPN for Windows
CVE-2018-10168 (TP-Link EAP Controller and Omada Controller versions ...)
- TODO: check
+ NOT-FOR-US: TP-Link
CVE-2018-10167 (The web application backup file in the TP-Link EAP Controller and Omada ...)
- TODO: check
+ NOT-FOR-US: TP-Link
CVE-2018-10166 (The web management interface in the TP-Link EAP Controller and Omada ...)
- TODO: check
+ NOT-FOR-US: TP-Link
CVE-2018-10165 (Stored Cross-site scripting (XSS) vulnerability in the TP-Link EAP ...)
- TODO: check
+ NOT-FOR-US: TP-Link
CVE-2018-10164 (Stored Cross-site scripting (XSS) vulnerability in the TP-Link EAP ...)
- TODO: check
+ NOT-FOR-US: TP-Link
CVE-2018-10163
RESERVED
CVE-2018-10162
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/86ee7ada9a7e4d622a12950d08032cef2d88426c
---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/86ee7ada9a7e4d622a12950d08032cef2d88426c
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180503/23a3ccb5/attachment.html>
More information about the debian-security-tracker-commits
mailing list