[Git][security-tracker-team/security-tracker][master] NFUs

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5a0661ce by Moritz Muehlenhoff at 2019-06-06T11:41:25Z
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5839,25 +5839,25 @@ CVE-2019-10332
 CVE-2019-10331
 	RESERVED
 CVE-2019-10330 (Jenkins Gitea Plugin 1.1.1 and earlier did not implement trusted revis ...)
-	TODO: check
+	NOT-FOR-US: Jenkins plugin
 CVE-2019-10329 (Jenkins InfluxDB Plugin 1.21 and earlier stored credentials unencrypte ...)
-	TODO: check
+	NOT-FOR-US: Jenkins plugin
 CVE-2019-10328 (Jenkins Pipeline Remote Loader Plugin 1.4 and earlier provided a custo ...)
-	TODO: check
+	NOT-FOR-US: Jenkins plugin
 CVE-2019-10327 (An XML external entities (XXE) vulnerability in Jenkins Pipeline Maven ...)
-	TODO: check
+	NOT-FOR-US: Jenkins plugin
 CVE-2019-10326 (A cross-site request forgery vulnerability in Jenkins Warnings NG Plug ...)
-	TODO: check
+	NOT-FOR-US: Jenkins plugin
 CVE-2019-10325 (A cross-site scripting vulnerability in Jenkins Warnings NG Plugin 5.0 ...)
-	TODO: check
+	NOT-FOR-US: Jenkins plugin
 CVE-2019-10324 (A cross-site request forgery vulnerability in Jenkins Artifactory Plug ...)
-	TODO: check
+	NOT-FOR-US: Jenkins plugin
 CVE-2019-10323 (A missing permission check in Jenkins Artifactory Plugin 3.2.2 and ear ...)
-	TODO: check
+	NOT-FOR-US: Jenkins plugin
 CVE-2019-10322 (A missing permission check in Jenkins Artifactory Plugin 3.2.2 and ear ...)
-	TODO: check
+	NOT-FOR-US: Jenkins plugin
 CVE-2019-10321 (A cross-site request forgery vulnerability in Jenkins Artifactory Plug ...)
-	TODO: check
+	NOT-FOR-US: Jenkins plugin
 CVE-2019-10320 (Jenkins Credentials Plugin 2.1.18 and earlier allowed users with permi ...)
 	NOT-FOR-US: Jenkins plugin
 CVE-2019-10319 (A missing permission check in Jenkins PAM Authentication Plugin 1.5 an ...)
@@ -6718,7 +6718,7 @@ CVE-2019-10011 (ICS/StaticPages/AddTestUsers.aspx in Jenzabar JICS (aka Internet
 CVE-2019-10010 (Cross-site scripting (XSS) vulnerability in the PHP League CommonMark  ...)
 	NOT-FOR-US: PHP League CommonMark library
 CVE-2019-10009 (A Directory Traversal issue was discovered in the Web GUI in Titan FTP ...)
-	TODO: check
+	NOT-FOR-US: Titan FTP
 CVE-2019-10008 (Zoho ManageEngine ServiceDesk 9.3 allows session hijacking and privile ...)
 	NOT-FOR-US: Zoho ManageEngine ServiceDesk
 CVE-2019-10007
@@ -7639,9 +7639,9 @@ CVE-2019-9885
 CVE-2019-9884
 	RESERVED
 CVE-2019-9883 (Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerabi ...)
-	TODO: check
+	NOT-FOR-US: MailSherlock
 CVE-2019-9882 (Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerabi ...)
-	TODO: check
+	NOT-FOR-US: MailSherlock
 CVE-2019-9881
 	RESERVED
 CVE-2019-9880
@@ -94157,6 +94157,7 @@ CVE-2017-15124 (VNC server implementation in Quick Emulator (QEMU) 2.11.0 and ol
 	NOTE: http://www.openwall.com/lists/oss-security/2017/12/19/4
 CVE-2017-15123
 	RESERVED
+	NOT-FOR-US: CloudForms
 CVE-2017-15122
 	RESERVED
 CVE-2017-15121 (A non-privileged user is able to mount a fuse filesystem on RHEL 6 or  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/5a0661ce878df6fd5b87a405c582ea5644a0394f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/5a0661ce878df6fd5b87a405c582ea5644a0394f
You're receiving this email because of your account on salsa.debian.org.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190606/068d7803/attachment.html>