[Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso
carnil at debian.org
Sat Nov 24 08:33:38 GMT 2018
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
fffa3fb4 by Salvatore Bonaccorso at 2018-11-24T08:33:14Z
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -36,7 +36,7 @@ CVE-2018-19501
CVE-2018-19500
RESERVED
CVE-2018-19499 (Vanilla before 2.5.5 and 2.6.x before 2.6.2 allows Remote Code ...)
- TODO: check
+ NOT-FOR-US: Vanilla
CVE-2018-19498
RESERVED
CVE-2018-19497
@@ -98,9 +98,9 @@ CVE-2018-19471
CVE-2018-19470
RESERVED
CVE-2018-19469 (ArticleCMS through 2017-02-19 has XSS via the ...)
- TODO: check
+ NOT-FOR-US: ArticleCMS
CVE-2018-19468 (HuCart 5.7.4 has SQL injection in get_ip() in ...)
- TODO: check
+ NOT-FOR-US: HuCart
CVE-2018-19467
RESERVED
CVE-2018-19466
@@ -108,9 +108,9 @@ CVE-2018-19466
CVE-2018-19465
RESERVED
CVE-2018-19464 (Discuz! X3.4 allows XSS via admin.php because ...)
- TODO: check
+ NOT-FOR-US: Discuz!
CVE-2018-19463 (zb_system/function/lib/upload.php in Z-BlogPHP through 1.5.1 allows ...)
- TODO: check
+ NOT-FOR-US: Z-BlogPHP
CVE-2018-19462
RESERVED
CVE-2018-19461
@@ -118,11 +118,11 @@ CVE-2018-19461
CVE-2018-19460
RESERVED
CVE-2018-19459 (Adult Filter 1.0 has a Buffer Overflow via a crafted Black Domain List ...)
- TODO: check
+ NOT-FOR-US: Adult Filter
CVE-2018-19458 (In PHP Proxy 3.0.3, any user can read files from the server without ...)
- TODO: check
+ NOT-FOR-US: PHP Proxy
CVE-2018-19457 (Logicspice FAQ Script 2.9.7 allows uploading arbitrary files, which ...)
- TODO: check
+ NOT-FOR-US: Logicspice FAQ Script
CVE-2018-19456
RESERVED
CVE-2018-19455
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/fffa3fb461974ab8479c55dbabe544c99c338e70
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/fffa3fb461974ab8479c55dbabe544c99c338e70
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181124/e18a3a2b/attachment-0001.html>
More information about the debian-security-tracker-commits
mailing list