[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b35b316f by Salvatore Bonaccorso at 2019-05-24T20:41:17Z
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -13,7 +13,7 @@ CVE-2019-12316
 CVE-2019-12315 (Samsung SCX-824 printers allow a reflected Cross-Site-Scripting (XSS)  ...)
 	TODO: check
 CVE-2019-12314 (Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute pa ...)
-	TODO: check
+	NOT-FOR-US: Deltek Maconomy
 CVE-2019-12313 (XSS exists in Shave before 2.5.3 because output encoding is mishandled ...)
 	TODO: check
 CVE-2019-12312 (In Libreswan before 3.28, an assertion failure can lead to a pluto IKE ...)
@@ -23,7 +23,7 @@ CVE-2017-18375 (Ampache 3.8.3 allows PHP Object Instantiation via democratic.aja
 CVE-2016-10759 (The Xinha plugin in Precurio 2.1 allows Directory Traversal, with resu ...)
 	TODO: check
 CVE-2016-10758 (PHPKIT 1.6.6 allows arbitrary File Upload, as demonstrated by a .php f ...)
-	TODO: check
+	NOT-FOR-US: PHPKIT
 CVE-2016-10757 (In Redaxo 5.2.0, the cron management of the admin panel suffers from C ...)
 	TODO: check
 CVE-2016-10756 (Kliqqi 3.0.0.5 allows CSRF with resultant Arbitrary File Upload becaus ...)
@@ -31,9 +31,9 @@ CVE-2016-10756 (Kliqqi 3.0.0.5 allows CSRF with resultant Arbitrary File Upload
 CVE-2016-10755 (AbanteCart 1.2.8 allows SQL Injection via the source_language paramete ...)
 	TODO: check
 CVE-2016-10754 (modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection ...)
-	TODO: check
+	NOT-FOR-US: Vtiger CRM
 CVE-2016-10753 (e107 2.1.2 allows PHP Object Injection with resultant SQL injection, b ...)
-	TODO: check
+	NOT-FOR-US: e107
 CVE-2016-10752 (serendipity_moveMediaDirectory in Serendipity 2.0.3 allows remote atta ...)
 	TODO: check
 CVE-2016-10751 (osClass 3.6.1 allows oc-admin/plugins.php Directory Traversal via the  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/b35b316f5ac05d05f2394c29e976b143b520f215

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/b35b316f5ac05d05f2394c29e976b143b520f215
You're receiving this email because of your account on salsa.debian.org.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190524/7736a022/attachment.html>