[Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
carnil at debian.org
Wed Jul 17 21:49:23 BST 2019
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
ce0fbfc8 by Salvatore Bonaccorso at 2019-07-17T20:47:42Z
Process NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -45,9 +45,9 @@ CVE-2019-13615 (VideoLAN VLC media player 3.0.7.1 has a heap-based buffer over-r
- vlc <unfixed> (bug #932241)
NOTE: https://trac.videolan.org/vlc/ticket/22474
CVE-2019-13614 (CMD_SET_CONFIG_COUNTRY in the TP-Link Device Debug protocol in TP-Link ...)
- TODO: check
+ NOT-FOR-US: TP-Link
CVE-2019-13613 (CMD_FTEST_CONFIG in the TP-Link Device Debug protocol in TP-Link Wirel ...)
- TODO: check
+ NOT-FOR-US: TP-Link
CVE-2019-13612 (MDaemon Email Server 19 skips SpamAssassin checks by default for e-mai ...)
NOT-FOR-US: MDaemon Email Server
CVE-2019-13611 (An issue was discovered in python-engineio through 3.8.2. There is a C ...)
@@ -1095,9 +1095,9 @@ CVE-2019-13587
CVE-2019-13586
RESERVED
CVE-2019-13585 (The remote admin webserver on FANUC Robotics Virtual Robot Controller ...)
- TODO: check
+ NOT-FOR-US: FANUC Robotics Virtual Robot Controller
CVE-2019-13584 (The remote admin webserver on FANUC Robotics Virtual Robot Controller ...)
- TODO: check
+ NOT-FOR-US: FANUC Robotics Virtual Robot Controller
CVE-2019-13583
RESERVED
CVE-2019-13582
@@ -1490,7 +1490,7 @@ CVE-2019-13405
CVE-2019-13404 (** DISPUTED ** The MSI installer for Python through 2.7.16 on Windows ...)
NOT-FOR-US: Disputed issue for Windows installer for Python
CVE-2019-13403 (Temenos CWX version 8.9 has an Broken Access Control vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Temenos CWX
CVE-2019-13402 (/usr/sbin/default.sh and /usr/apache/htdocs/cgi-bin/admin/hardfactoryd ...)
NOT-FOR-US: Dynacolor
CVE-2019-13401 (Dynacolor FCM-MB40 v1.2.0.0 devices have CSRF in all scripts under cgi ...)
@@ -1613,7 +1613,7 @@ CVE-2019-13348
CVE-2019-13347
RESERVED
CVE-2019-13346 (In MyT 1.5.1, the User[username] parameter has XSS. ...)
- TODO: check
+ NOT-FOR-US: MyT
CVE-2019-13345 (The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_ ...)
{DLA-1847-1}
- squid <unfixed> (bug #931478)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/ce0fbfc80075dcb8df5028ff3a824a5c8b4e0d66
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/ce0fbfc80075dcb8df5028ff3a824a5c8b4e0d66
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190717/4b6bf960/attachment-0001.html>
More information about the debian-security-tracker-commits
mailing list