[Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
carnil at debian.org
Tue Oct 30 08:31:15 GMT 2018
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
6c60715c by Salvatore Bonaccorso at 2018-10-30T08:30:43Z
Process NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -11,11 +11,11 @@ CVE-2018-18844
CVE-2018-18843
RESERVED
CVE-2018-18842 (CSRF exists in zb_users/plugin/AppCentre/theme.js.php in Z-BlogPHP ...)
- TODO: check
+ NOT-FOR-US: Z-BlogPHP
CVE-2018-18841 (XSS was discovered in SEMCMS PHP V3.4 via the ...)
- TODO: check
+ NOT-FOR-US: SEMCMS PHP
CVE-2018-18840 (XSS was discovered in SEMCMS PHP V3.4 via the ...)
- TODO: check
+ NOT-FOR-US: SEMCMS PHP
CVE-2018-18839
RESERVED
CVE-2018-18838
@@ -25,17 +25,17 @@ CVE-2018-18837
CVE-2018-18836
RESERVED
CVE-2018-18835 (upload_template() in system/changeskin.php in DocCms 2016.5.12 allows ...)
- TODO: check
+ NOT-FOR-US: DocCms
CVE-2018-18834 (An issue has been found in libIEC61850 v1.3. It is a heap-based buffer ...)
TODO: check
CVE-2018-18833
RESERVED
CVE-2018-18832 (admin/check.asp in DKCMS 9.4 allows SQL Injection via an ASPSESSIONID ...)
- TODO: check
+ NOT-FOR-US: DKCMS
CVE-2018-18831 (An issue was discovered in com\mingsoft\cms\action\GeneraterAction.java ...)
- TODO: check
+ NOT-FOR-US: MCMS
CVE-2018-18830 (An issue was discovered in ...)
- TODO: check
+ NOT-FOR-US: MCMS
CVE-2018-18829 (There exists a NULL pointer dereference in ...)
TODO: check
CVE-2018-18828 (There exists a heap-based buffer overflow in vc1_decode_i_block_adv in ...)
@@ -45,13 +45,13 @@ CVE-2018-18827 (There exists a heap-based buffer over-read in ff_vc1_pred_dc in
CVE-2018-18826 (There exists a heap-based buffer overflow in vc1_decode_p_mb_intfi in ...)
TODO: check
CVE-2018-18825 (Pagoda Linux panel V6.0 has XSS via the verification code associated ...)
- TODO: check
+ NOT-FOR-US: Pagoda Linux panel
CVE-2018-18824
RESERVED
CVE-2018-18823
RESERVED
CVE-2018-18822 (Grapixel New Media v2.0 allows SQL Injection via the pages.aspx pageref ...)
- TODO: check
+ NOT-FOR-US: Grapixel New Media
CVE-2018-18821
RESERVED
CVE-2018-18820
@@ -61,7 +61,7 @@ CVE-2018-18819
CVE-2018-18818
RESERVED
CVE-2018-18817 (The Leostream Agent before Build 7.0.1.0 when used with Leostream ...)
- TODO: check
+ NOT-FOR-US: Leostream Agent
CVE-2018-18816
RESERVED
CVE-2018-18815
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6c60715cf34417eb2f7fadab67b5e35d4ed816c3
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6c60715cf34417eb2f7fadab67b5e35d4ed816c3
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181030/9591ee63/attachment.html>
More information about the debian-security-tracker-commits
mailing list