Author: fgeek-guest
Date: 2014-06-23 10:59:31 +0000 (Mon, 23 Jun 2014)
New Revision: 27405
Modified:
data/CVE/list
Log:
NFUs
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2014-06-23 10:41:39 UTC (rev 27404)
+++ data/CVE/list 2014-06-23 10:59:31 UTC (rev 27405)
@@ -397,15 +397,15 @@
CVE-2014-4308 (Multiple cross-site scripting (XSS) vulnerabilities in NICE
Recording ...)
TODO: check
CVE-2014-4307 (SQL injection vulnerability in categories-x.php in WebTitan
before ...)
- TODO: check
+ NOT-FOR-US: WebTitan
CVE-2014-4306 (Directory traversal vulnerability in logs-x.php in WebTitan
before ...)
- TODO: check
+ NOT-FOR-US: WebTitan
CVE-2014-4305 (Multiple SQL injection vulnerabilities in NICE Recording
eXpress (aka ...)
TODO: check
CVE-2014-4304 (Cross-site scripting (XSS) vulnerability in browse.php in SQL
Buddy ...)
- TODO: check
+ NOT-FOR-US: SQL Buddy
CVE-2014-4303 (Multiple cross-site scripting (XSS) vulnerabilities in the
Touch theme ...)
- TODO: check
+ NOT-FOR-US: Drupal Touch theme
CVE-2014-4302 (Cross-site scripting (XSS) vulnerability in rating/rating.php
in HAM3D ...)
TODO: check
CVE-2014-4301 (Multiple cross-site scripting (XSS) vulnerabilities in the ...)
@@ -689,7 +689,7 @@
CVE-2014-4164 (Cross-site scripting (XSS) vulnerability in AlgoSec FireFlow
6.3-b230 ...)
NOT-FOR-US: AlogoSec FireFlow
CVE-2014-4163 (Multiple cross-site request forgery (CSRF) vulnerabilities in
the ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin Featured Comments
CVE-2014-4162 (Multiple cross-site request forgery (CSRF) vulnerabilities in
the ...)
NOT-FOR-US: Zyxel P-660HW-T1 wireless
CVE-2014-4161 (Cross-site scripting (XSS) vulnerability in la/umTestSSO.jsp in
SAP ...)
@@ -703,7 +703,7 @@
CVE-2014-4156
RESERVED
CVE-2014-4155 (Cross-site request forgery (CSRF) vulnerability in the ZTE
ZXV10 W300 ...)
- TODO: check
+ NOT-FOR-US: ZTE router
CVE-2014-4154
RESERVED
CVE-2014-4153 (The av-centerd SOAP service in AlienVault OSSIM before 4.8.0
allows ...)
@@ -2674,7 +2674,7 @@
CVE-2014-3279 (The Administration GUI in the web framework in VOSS in Cisco
Unified ...)
NOT-FOR-US: Cisco Unified Communications Domain Manager
CVE-2014-3278 (The web framework in VOSS in Cisco Unified Communications
Domain ...)
- TODO: check
+ NOT-FOR-US: Cisco Unified Communications
CVE-2014-3277 (The Administration GUI in the web framework in VOSS in Cisco
Unified ...)
NOT-FOR-US: Cisco Unified Communications Domain Manager
CVE-2014-3276 (Cisco Identity Services Engine (ISE) 1.2(.1 patch 2) and
earlier does ...)
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
