[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff jmm at debian.org
Mon Sep 16 10:53:08 BST 2019



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4edd7587 by Moritz Muehlenhoff at 2019-09-16T09:52:52Z
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -15,11 +15,11 @@ CVE-2019-16336
 CVE-2019-16335 (A Polymorphic Typing issue was discovered in FasterXML jackson-databin ...)
 	TODO: check
 CVE-2019-16334 (In Bludit v3.9.2, there is a persistent XSS vulnerability in the Categ ...)
-	TODO: check
+	NOT-FOR-US: Bludit
 CVE-2019-16333 (GetSimple CMS v3.3.15 has Persistent Cross-Site Scripting (XSS) in adm ...)
-	TODO: check
+	NOT-FOR-US: GetSimple CMS
 CVE-2019-16332 (In the api-bearer-auth plugin before 20190907 for WordPress, the serve ...)
-	TODO: check
+	NOT-FOR-US: Wordpress plugin
 CVE-2019-XXXX [Remotely exploitable null pointer dereference bug]
 	- libapreq2 2.13-6 (bug #939937)
 	NOTE: http://svn.apache.org/r1866760
@@ -44,9 +44,9 @@ CVE-2019-16323
 CVE-2019-16322
 	RESERVED
 CVE-2019-16321 (ScadaBR 1.0CE, and 1.1.x through 1.1.0-RC, has XSS via a request for a ...)
-	TODO: check
+	NOT-FOR-US: ScadaBR
 CVE-2019-16320 (Cobham Sea Tel v170 224521 through v194 225444 devices allow attackers ...)
-	TODO: check
+	NOT-FOR-US: Cobham Sea Tel
 CVE-2019-16318 (In Pimcore before 5.7.1, an attacker with limited privileges can bypas ...)
 	NOT-FOR-US: Pimcore
 CVE-2019-16317 (In Pimcore before 5.7.1, an attacker with limited privileges can trigg ...)
@@ -70,15 +70,15 @@ CVE-2019-16309 (FlameCMS 3.3.5 has SQL injection in account/login.php via accoun
 CVE-2019-16308
 	RESERVED
 CVE-2019-16307 (A Reflected Cross-Site Scripting (XSS) vulnerability in the webEx modu ...)
-	TODO: check
+	NOT-FOR-US: Fuji
 CVE-2019-16306
 	RESERVED
 CVE-2019-16305 (In MobaXterm 11.1 and 12.1, the protocol handler is vulnerable to comm ...)
-	TODO: check
+	NOT-FOR-US: MobaXterm
 CVE-2019-16304
 	RESERVED
 CVE-2019-16303 (A class generated by the Generator in JHipster before 6.3.0 and JHipst ...)
-	TODO: check
+	NOT-FOR-US: JHipster
 CVE-2019-16302
 	RESERVED
 CVE-2019-16301
@@ -96,7 +96,7 @@ CVE-2019-16296
 CVE-2019-16295
 	RESERVED
 CVE-2019-16294 (SciLexer.dll in Scintilla in Notepad++ (x64) before 7.7 allows remote  ...)
-	TODO: check
+	NOT-FOR-US: Notepad++
 CVE-2019-16293 (The Create Discoveries feature of Open-AudIT before 3.2.0 allows an au ...)
 	NOT-FOR-US: Open-AudIT
 CVE-2019-16292



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/4edd7587888da8c6197fab302584a995e2985aa9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/4edd7587888da8c6197fab302584a995e2985aa9
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190916/f60c9dc7/attachment.html>


More information about the debian-security-tracker-commits mailing list