[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d31108b8 by Salvatore Bonaccorso at 2019-07-05T20:55:23Z
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -19465,9 +19465,9 @@ CVE-2019-5975
 CVE-2019-5974 (Cross-site request forgery (CSRF) vulnerability in Contest Gallery ver ...)
 	TODO: check
 CVE-2019-5973 (Cross-site request forgery (CSRF) vulnerability in Online Lesson Booki ...)
-	TODO: check
+	NOT-FOR-US: Online Lesson Booking
 CVE-2019-5972 (Cross-site scripting vulnerability in Online Lesson Booking 0.8.6 and  ...)
-	TODO: check
+	NOT-FOR-US: Online Lesson Booking
 CVE-2019-5971 (Cross-site request forgery (CSRF) vulnerability in Attendance Manager  ...)
 	TODO: check
 CVE-2019-5970 (Cross-site scripting vulnerability in Attendance Manager 0.5.6 and ear ...)
@@ -19477,19 +19477,19 @@ CVE-2019-5969 (Open redirect vulnerability in GROWI v3.4.6 and earlier allows re
 CVE-2019-5968 (Cross-site request forgery (CSRF) vulnerability in GROWI v3.4.6 and ea ...)
 	TODO: check
 CVE-2019-5967 (Cross-site scripting vulnerability in Joruri CMS 2017 Release2 and ear ...)
-	TODO: check
+	NOT-FOR-US: Joruri CMS
 CVE-2019-5966 (Joruri Mail 2.1.4 and earlier does not properly manage sessions, which ...)
-	TODO: check
+	NOT-FOR-US: Joruri Mail
 CVE-2019-5965 (Open redirect vulnerability in Joruri Mail 2.1.4 and earlier allows re ...)
-	TODO: check
+	NOT-FOR-US: Joruri Mail
 CVE-2019-5964 (iDoors Reader 2.10.17 and earlier allows an attacker on the same netwo ...)
 	TODO: check
 CVE-2019-5963 (Cross-site request forgery (CSRF) vulnerability in Zoho SalesIQ 1.0.8  ...)
-	TODO: check
+	NOT-FOR-US: Zoho SalesIQ
 CVE-2019-5962 (Cross-site scripting vulnerability in Zoho SalesIQ 1.0.8 and earlier a ...)
-	TODO: check
+	NOT-FOR-US: Zoho SalesIQ
 CVE-2019-5961 (The Android App 'Tootdon for Mastodon' version 3.4.1 and earlier does  ...)
-	TODO: check
+	NOT-FOR-US: Android App 'Tootdon for Mastodon'
 CVE-2019-5960 (Cross-site request forgery (CSRF) vulnerability in WP Open Graph 1.6.1 ...)
 	TODO: check
 CVE-2019-5959
@@ -50162,7 +50162,7 @@ CVE-2018-14028 (In WordPress 4.9.7, plugins uploaded via the admin area are not
 	NOTE: https://core.trac.wordpress.org/ticket/44710
 	NOTE: https://rastating.github.io/unrestricted-file-upload-via-plugin-uploader-in-wordpress/
 CVE-2018-14027 (Digisol Wireless Wifi Home Router HR-3300 allows XSS via the userid or ...)
-	TODO: check
+	NOT-FOR-US: Digisol Wireless Wifi Home Router HR-3300
 CVE-2018-14026
 	RESERVED
 CVE-2018-14025



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/d31108b85b67d108aac743d954c73703425115f5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/d31108b85b67d108aac743d954c73703425115f5
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190705/9415fe6e/attachment.html>