[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
339fc9fe by Salvatore Bonaccorso at 2020-05-18T22:25:50+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -17,9 +17,9 @@ CVE-2020-13138
 CVE-2020-13137
 	RESERVED
 CVE-2020-13136 (D-Link DSP-W215 1.26b03 devices send an obfuscated hash that can be re ...)
-	TODO: check
+	NOT-FOR-US: D-Link
 CVE-2020-13135 (D-Link DSP-W215 1.26b03 devices allow information disclosure by interc ...)
-	TODO: check
+	NOT-FOR-US: D-Link
 CVE-2020-13134
 	RESERVED
 CVE-2020-13133
@@ -2055,15 +2055,15 @@ CVE-2020-12261 (Open-AudIT 3.3.0 allows an XSS attack after login. ...)
 CVE-2020-12260
 	RESERVED
 CVE-2020-12259 (rConfig 3.9.4 is vulnerable to reflected XSS. The configDevice.php fil ...)
-	TODO: check
+	NOT-FOR-US: rConfig
 CVE-2020-12258 (rConfig 3.9.4 is vulnerable to session fixation because session expiry ...)
-	TODO: check
+	NOT-FOR-US: rConfig
 CVE-2020-12257 (rConfig 3.9.4 is vulnerable to cross-site request forgery (CSRF) becau ...)
-	TODO: check
+	NOT-FOR-US: rConfig
 CVE-2020-12256 (rConfig 3.9.4 is vulnerable to reflected XSS. The devicemgmnt.php file ...)
-	TODO: check
+	NOT-FOR-US: rConfig
 CVE-2020-12255 (rConfig 3.9.4 is vulnerable to remote code execution due to improper v ...)
-	TODO: check
+	NOT-FOR-US: rConfig
 CVE-2020-12254 (Avira Antivirus before 5.0.2003.1821 on Windows allows privilege escal ...)
 	NOT-FOR-US: Avira Antivirus
 CVE-2019-20789 (Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or a ...)
@@ -4916,11 +4916,11 @@ CVE-2020-11553 (An issue was discovered in Castle Rock SNMPc Online 12.10.10 bef
 CVE-2020-11552
 	RESERVED
 CVE-2020-11551 (An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on  ...)
-	TODO: check
+	NOT-FOR-US: Netgear
 CVE-2020-11550 (An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on  ...)
-	TODO: check
+	NOT-FOR-US: Netgear
 CVE-2020-11549 (An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on  ...)
-	TODO: check
+	NOT-FOR-US: Netgear
 CVE-2020-11548 (The Search Meter plugin through 2.13.2 for WordPress allows user input ...)
 	NOT-FOR-US: Search Meter plugin for WordPress
 CVE-2020-11547 (PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated ...)
@@ -9913,7 +9913,7 @@ CVE-2020-9526
 CVE-2020-9525
 	RESERVED
 CVE-2020-9524 (Cross Site scripting vulnerability on Micro Focus Enterprise Server an ...)
-	TODO: check
+	NOT-FOR-US: Micro Focus
 CVE-2020-9523 (Insufficiently protected credentials vulnerability on Micro Focus ente ...)
 	NOT-FOR-US: Micro Focus
 CVE-2020-9522



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/339fc9fe7aaab49f4d1b6ec9998483f8d8752b7c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/339fc9fe7aaab49f4d1b6ec9998483f8d8752b7c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200518/24485c3c/attachment.html>