[Git][security-tracker-team/security-tracker][master] NFUs

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0b43cc62 by Moritz Muehlenhoff at 2019-10-30T08:18:06Z
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -25,9 +25,9 @@ CVE-2019-18614
 CVE-2019-18613
 	RESERVED
 CVE-2019-18612 (An issue was discovered in the AbuseFilter extension through 1.34 for  ...)
-	TODO: check
+	NOT-FOR-US: AbuseFilter MediaWiki extension
 CVE-2019-18611 (An issue was discovered in the CheckUser extension through 1.34 for Me ...)
-	TODO: check
+	NOT-FOR-US: CheckUser MediaWiki extension
 CVE-2019-18610
 	RESERVED
 CVE-2019-18609
@@ -23809,7 +23809,7 @@ CVE-2019-10751 (All versions of the HTTPie package prior to version 1.0.3 are vu
 CVE-2019-10750 (deeply is vulnerable to Prototype Pollution in versions before 3.1.0.  ...)
 	NOT-FOR-US: deeply
 CVE-2019-10749 (sequelize before version 3.35.1 allows attackers to perform a SQL Inje ...)
-	TODO: check
+	NOT-FOR-US: sequelize
 CVE-2019-10748 (Sequelize all versions prior to 3.35.1, 4.44.3, and 5.8.11 are vulnera ...)
 	NOT-FOR-US: sequelize
 CVE-2019-10747 (set-value is vulnerable to Prototype Pollution in versions lower than  ...)
@@ -31697,7 +31697,7 @@ CVE-2019-8237 (Adobe Acrobat and Reader versions 2019.012.20034 and earlier; 201
 CVE-2019-8236 (Creative Cloud Desktop Application version 4.6.1 and earlier versions  ...)
 	NOT-FOR-US: Adobe
 CVE-2019-8235 (An insecure direct object reference (IDOR) vulnerability exists in Mag ...)
-	TODO: check
+	NOT-FOR-US: Magento
 CVE-2019-8234 (Adobe Experience Manager versions 6.4, 6.3 and 6.2 have a cross-site r ...)
 	NOT-FOR-US: Adobe
 CVE-2019-8233
@@ -54903,7 +54903,7 @@ CVE-2018-19153
 CVE-2018-19152
 	RESERVED
 CVE-2018-19151 (qtum through 0.16 (a chain-based proof-of-stake cryptocurrency) allows ...)
-	TODO: check
+	NOT-FOR-US: qtum
 CVE-2018-19150 (Memory corruption in PDMODELProvidePDModelHFT in pdmodel.dll in pdffor ...)
 	NOT-FOR-US: pdfforge PDF Architect
 CVE-2018-19149 (Poppler before 0.70.0 has a NULL pointer dereference in _poppler_attac ...)
@@ -77509,7 +77509,7 @@ CVE-2018-10729 (All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products
 CVE-2018-10728 (All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products runnin ...)
 	NOT-FOR-US: Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products
 CVE-2018-10727 (Reflected Cross-Site Scripting (XSS) vulnerability in the fabrik_refer ...)
-	TODO: check
+	NOT-FOR-US: Joomla extension
 CVE-2018-10726 (** DISPUTED ** A stored XSS vulnerability was found in Datenstrom Yell ...)
 	NOT-FOR-US: Datenstrom Yellow
 CVE-2018-10725
@@ -176614,7 +176614,7 @@ CVE-2016-4291 (When opening a Hangul HShow Document (.hpt) and processing a stru
 CVE-2016-4290 (When opening a Hangul HShow Document (.hpt) and processing a structure ...)
 	NOT-FOR-US: Hancom Office
 CVE-2016-4289 (A stack based buffer overflow vulnerability exists in the method recei ...)
-	TODO: check
+	NOT-FOR-US: GMER
 CVE-2016-4288 (A local privilege escalation vulnerability exists in BlueStacks App Pl ...)
 	NOT-FOR-US: BlueStacks
 CVE-2016-4287 (Integer overflow in Adobe Flash Player before 18.0.0.375 and 19.x thro ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0b43cc625235a8f3d5b9160cf9b0e79871a98904

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0b43cc625235a8f3d5b9160cf9b0e79871a98904
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191030/3605005a/attachment-0001.html>