[Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso
carnil at debian.org
Thu Sep 19 21:14:48 BST 2019
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
17ec9cb9 by Salvatore Bonaccorso at 2019-09-19T20:14:16Z
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,5 +1,5 @@
CVE-2019-16525 (An XSS issue was discovered in the checklist plugin before 1.1.9 for W ...)
- TODO: check
+ NOT-FOR-US: checklist plugin for WordPress
CVE-2019-16524
RESERVED
CVE-2019-16523
@@ -296,9 +296,9 @@ CVE-2019-16380
CVE-2019-16379
RESERVED
CVE-2016-10995 (The Tevolution plugin before 2.3.0 for WordPress has arbitrary file up ...)
- TODO: check
+ NOT-FOR-US: Tevolution plugin for WordPress
CVE-2016-10994 (The Truemag theme 2016 Q2 for WordPress has XSS via the s parameter. ...)
- TODO: check
+ NOT-FOR-US: Truemag theme for WordPress
CVE-2016-10993 (The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s p ...)
TODO: check
CVE-2016-10992 (The music-store plugin before 1.0.43 for WordPress has XSS via the wp- ...)
@@ -14780,13 +14780,13 @@ CVE-2019-11666 (Insecure deserialization of untrusted data in Micro Focus Servic
CVE-2019-11665 (Data exposure in Micro Focus Service Manager product versions 9.30, 9. ...)
NOT-FOR-US: Micro Focus
CVE-2019-11664 (Clear text password in browser in Micro Focus Service Manager product ...)
- TODO: check
+ NOT-FOR-US: Micro Focus
CVE-2019-11663 (Clear text credentials are used to access managers app in Tomcat in Mi ...)
- TODO: check
+ NOT-FOR-US: Micro Focus
CVE-2019-11662 (Class and method names in error message in Micro Focus Service Manager ...)
- TODO: check
+ NOT-FOR-US: Micro Focus
CVE-2019-11661 (Allow changes to some table by non-SysAdmin in Micro Focus Service Man ...)
- TODO: check
+ NOT-FOR-US: Micro Focus
CVE-2019-11660 (Privileges manipulation in Micro Focus Data Protector, versions 10.00, ...)
NOT-FOR-US: Micro Focus
CVE-2019-11659
@@ -95602,7 +95602,7 @@ CVE-2018-1849
CVE-2018-1848 (IBM Business Automation Workflow 18.0.0.0 and 18.0.0.1 is vulnerable t ...)
NOT-FOR-US: IBM
CVE-2018-1847 (IBM Financial Transaction Manager (FTM) for Multi-Platform (MP) v2.0.0 ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2018-1846 (IBM Rational Engineering Lifecycle Manager 5.0 through 5.0.2 and 6.0 t ...)
NOT-FOR-US: IBM
CVE-2018-1845 (IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable t ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/17ec9cb90c5b3058e1c20e245e79b3c57cf03622
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/17ec9cb90c5b3058e1c20e245e79b3c57cf03622
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190919/631655bb/attachment.html>
More information about the debian-security-tracker-commits
mailing list