[Git][security-tracker-team/security-tracker][master] Process NFUs

Salvatore Bonaccorso carnil at debian.org
Thu Feb 20 08:16:12 GMT 2020 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0126f3f1 by Salvatore Bonaccorso at 2020-02-20T09:15:43+01:00
Process NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5193,7 +5193,7 @@ CVE-2020-6972
 CVE-2020-6971
 	RESERVED
 CVE-2020-6970 (A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA ...)
-	TODO: check
+	NOT-FOR-US: Emerson OpenEnterprise SCADA Server
 CVE-2020-6969 (It is possible to unmask credentials and other sensitive information o ...)
 	NOT-FOR-US: AutomationDirect
 CVE-2020-6968
@@ -12033,11 +12033,11 @@ CVE-2020-3947
 CVE-2020-3946
 	RESERVED
 CVE-2020-3945 (vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6. ...)
-	TODO: check
+	NOT-FOR-US: VMware
 CVE-2020-3944 (vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6. ...)
-	TODO: check
+	NOT-FOR-US: VMware
 CVE-2020-3943 (vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6. ...)
-	TODO: check
+	NOT-FOR-US: VMware
 CVE-2020-3942
 	RESERVED
 CVE-2020-3941 (The repair operation of VMware Tools for Windows 10.x.y has a race con ...)
@@ -14687,27 +14687,27 @@ CVE-2020-3165
 CVE-2020-3164
 	RESERVED
 CVE-2020-3163 (A vulnerability in the Live Data server of Cisco Unified Contact Cente ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3162
 	RESERVED
 CVE-2020-3161
 	RESERVED
 CVE-2020-3160 (A vulnerability in the Extensible Messaging and Presence Protocol (XMP ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3159 (A vulnerability in the web-based management interface of Cisco Finesse ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3158 (A vulnerability in the High Availability (HA) service of Cisco Smart S ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3157
 	RESERVED
 CVE-2020-3156 (A vulnerability in the logging component of Cisco Identity Services En ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3155
 	RESERVED
 CVE-2020-3154 (A vulnerability in the web UI of Cisco Cloud Web Security (CWS) could  ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3153 (A vulnerability in the installer component of Cisco AnyConnect Secure  ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3152
 	RESERVED
 CVE-2020-3151
@@ -14737,7 +14737,7 @@ CVE-2020-3140
 CVE-2020-3139 (A vulnerability in the out of band (OOB) management interface IP table ...)
 	NOT-FOR-US: Cisco
 CVE-2020-3138 (A vulnerability in the upgrade component of Cisco Enterprise NFV Infra ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3137
 	RESERVED
 CVE-2020-3136 (A vulnerability in the web-based management interface of Cisco Jabber  ...)
@@ -14749,7 +14749,7 @@ CVE-2020-3134 (A vulnerability in the zip decompression engine of Cisco AsyncOS
 CVE-2020-3133
 	RESERVED
 CVE-2020-3132 (A vulnerability in the email message scanning feature of Cisco AsyncOS ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3131 (A vulnerability in the Cisco Webex Teams client for Windows could allo ...)
 	NOT-FOR-US: Cisco
 CVE-2020-3130
@@ -14789,11 +14789,11 @@ CVE-2020-3116
 CVE-2020-3115 (A vulnerability in the CLI of the Cisco SD-WAN Solution vManage softwa ...)
 	NOT-FOR-US: Cisco
 CVE-2020-3114 (A vulnerability in the web-based management interface of Cisco Data Ce ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3113 (A vulnerability in the web-based management interface of Cisco Data Ce ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3112 (A vulnerability in the REST API endpoint of Cisco Data Center Network  ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3111 (A vulnerability in the Cisco Discovery Protocol implementation for the ...)
 	NOT-FOR-US: Cisco
 CVE-2020-3110 (A vulnerability in the Cisco Discovery Protocol implementation for the ...)
@@ -27410,7 +27410,7 @@ CVE-2019-17335 (The Data access layer component of TIBCO Software Inc.'s TIBCO S
 CVE-2019-17334 (The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire A ...)
 	NOT-FOR-US: TIBCO
 CVE-2019-17333 (The Web server component of TIBCO Software Inc.'s TIBCO EBX contains a ...)
-	TODO: check
+	NOT-FOR-US: TIBCO EBX
 CVE-2019-17332 (The Digital Asset Manager Web Interface component of TIBCO Software In ...)
 	NOT-FOR-US: TIBCO
 CVE-2019-17331 (The Data Exchange Web Interface component of TIBCO Software Inc.'s TIB ...)
@@ -38056,7 +38056,7 @@ CVE-2019-13948 (SyGuestBook A5 Version 1.2 allows stored XSS because the isValid
 CVE-2019-13947 (A vulnerability has been identified in SiNVR 3 Central Control Server  ...)
 	NOT-FOR-US: Siemens
 CVE-2019-13946 (A vulnerability has been identified in Development/Evaluation Kits for ...)
-	TODO: check
+	NOT-FOR-US: Siemens
 CVE-2019-13945 (A vulnerability has been identified in SIMATIC S7-1200 CPU family (inc ...)
 	NOT-FOR-US: Siemens
 CVE-2019-13944 (A vulnerability has been identified in EN100 Ethernet module DNP3 vari ...)
@@ -38066,9 +38066,9 @@ CVE-2019-13943 (A vulnerability has been identified in EN100 Ethernet module DNP
 CVE-2019-13942 (A vulnerability has been identified in EN100 Ethernet module DNP3 vari ...)
 	NOT-FOR-US: Siemens
 CVE-2019-13941 (A vulnerability has been identified in OZW672 (All versions < V10.0 ...)
-	TODO: check
+	NOT-FOR-US: Siemens
 CVE-2019-13940 (A vulnerability has been identified in SIMATIC S7-1200 CPU family (inc ...)
-	TODO: check
+	NOT-FOR-US: Siemens
 CVE-2019-13939 (A vulnerability has been identified in Nucleus NET (All versions), Nuc ...)
 	NOT-FOR-US: Nucleus
 CVE-2019-13938
@@ -38096,11 +38096,11 @@ CVE-2019-13928
 CVE-2019-13927 (A vulnerability has been identified in Desigo PX automation controller ...)
 	NOT-FOR-US: Siemens
 CVE-2019-13926 (A vulnerability has been identified in SCALANCE S602 (All versions &gt ...)
-	TODO: check
+	NOT-FOR-US: Siemens
 CVE-2019-13925 (A vulnerability has been identified in SCALANCE S602 (All versions &gt ...)
-	TODO: check
+	NOT-FOR-US: Siemens
 CVE-2019-13924 (A vulnerability has been identified in SCALANCE X-200 switch family (i ...)
-	TODO: check
+	NOT-FOR-US: Siemens
 CVE-2019-13923 (A vulnerability has been identified in IE/WSN-PA Link WirelessHART Gat ...)
 	NOT-FOR-US: Siemens
 CVE-2019-13922 (A vulnerability has been identified in SINEMA Remote Connect Server (A ...)
@@ -237081,13 +237081,13 @@ CVE-2014-9611 (Netsweeper before 4.0.5 allows remote attackers to bypass authent
 CVE-2014-9610 (Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 a ...)
 	NOT-FOR-US: Netsweeper
 CVE-2014-9609 (Directory traversal vulnerability in webadmin/reporter/view_server_log ...)
-	TODO: check
+	NOT-FOR-US: Netsweeper
 CVE-2014-9608 (Cross-site scripting (XSS) vulnerability in webadmin/policy/group_tabl ...)
-	TODO: check
+	NOT-FOR-US: Netsweeper
 CVE-2014-9607 (Cross-site scripting (XSS) vulnerability in remotereporter/load_logfil ...)
-	TODO: check
+	NOT-FOR-US: Netsweeper
 CVE-2014-9606 (Multiple cross-site scripting (XSS) vulnerabilities in Netsweeper befo ...)
-	TODO: check
+	NOT-FOR-US: Netsweeper
 CVE-2014-9605 (WebUpgrade in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x  ...)
 	NOT-FOR-US: Netsweeper
 CVE-2014-9604 (libavcodec/utvideodec.c in FFmpeg before 2.5.2 does not check for a ze ...)
@@ -238275,7 +238275,7 @@ CVE-2015-0751 (Cisco IP Phone 7861, when firmware from Cisco Unified Communicati
 CVE-2015-0750 (The administrative web interface in Cisco Hosted Collaboration Solutio ...)
 	NOT-FOR-US: Cisco
 CVE-2015-0749 (A vulnerability in Cisco Unified Communications Manager could allow an ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2015-0748
 	RESERVED
 CVE-2015-0747 (Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release al ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0126f3f1a9b36934ddc8d86869bf11d01da25949

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0126f3f1a9b36934ddc8d86869bf11d01da25949
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200220/abaeaa56/attachment.html>

More information about the debian-security-tracker-commits mailing list