[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso carnil at debian.org
Sat Nov 24 08:33:38 GMT 2018


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fffa3fb4 by Salvatore Bonaccorso at 2018-11-24T08:33:14Z
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -36,7 +36,7 @@ CVE-2018-19501
 CVE-2018-19500
 	RESERVED
 CVE-2018-19499 (Vanilla before 2.5.5 and 2.6.x before 2.6.2 allows Remote Code ...)
-	TODO: check
+	NOT-FOR-US: Vanilla
 CVE-2018-19498
 	RESERVED
 CVE-2018-19497
@@ -98,9 +98,9 @@ CVE-2018-19471
 CVE-2018-19470
 	RESERVED
 CVE-2018-19469 (ArticleCMS through 2017-02-19 has XSS via the ...)
-	TODO: check
+	NOT-FOR-US: ArticleCMS
 CVE-2018-19468 (HuCart 5.7.4 has SQL injection in get_ip() in ...)
-	TODO: check
+	NOT-FOR-US: HuCart
 CVE-2018-19467
 	RESERVED
 CVE-2018-19466
@@ -108,9 +108,9 @@ CVE-2018-19466
 CVE-2018-19465
 	RESERVED
 CVE-2018-19464 (Discuz! X3.4 allows XSS via admin.php because ...)
-	TODO: check
+	NOT-FOR-US: Discuz!
 CVE-2018-19463 (zb_system/function/lib/upload.php in Z-BlogPHP through 1.5.1 allows ...)
-	TODO: check
+	NOT-FOR-US: Z-BlogPHP
 CVE-2018-19462
 	RESERVED
 CVE-2018-19461
@@ -118,11 +118,11 @@ CVE-2018-19461
 CVE-2018-19460
 	RESERVED
 CVE-2018-19459 (Adult Filter 1.0 has a Buffer Overflow via a crafted Black Domain List ...)
-	TODO: check
+	NOT-FOR-US: Adult Filter
 CVE-2018-19458 (In PHP Proxy 3.0.3, any user can read files from the server without ...)
-	TODO: check
+	NOT-FOR-US: PHP Proxy
 CVE-2018-19457 (Logicspice FAQ Script 2.9.7 allows uploading arbitrary files, which ...)
-	TODO: check
+	NOT-FOR-US: Logicspice FAQ Script
 CVE-2018-19456
 	RESERVED
 CVE-2018-19455



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/fffa3fb461974ab8479c55dbabe544c99c338e70

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/fffa3fb461974ab8479c55dbabe544c99c338e70
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181124/e18a3a2b/attachment-0001.html>


More information about the debian-security-tracker-commits mailing list