Author: atomo64-guest
Date: 2017-09-07 16:40:00 +0000 (Thu, 07 Sep 2017)
New Revision: 55544
Modified:
data/CVE/list
Log:
NFUs
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2017-09-07 16:34:42 UTC (rev 55543)
+++ data/CVE/list 2017-09-07 16:40:00 UTC (rev 55544)
@@ -75170,7 +75170,7 @@
CVE-2015-7242 (Cross-site scripting (XSS) vulnerability in the
Push-Service-Mails ...)
NOT-FOR-US: AVM
CVE-2015-7241 (XML External Entity (XXE) vulnerability in SAP Netweaver before
7.01. ...)
- TODO: check
+ NOT-FOR-US: SAP Netweaver
CVE-2015-7240
RESERVED
CVE-2015-7239 (SQL injection vulnerability in the BP_FIND_JOBS_WITH_PROGRAM
function ...)
@@ -78522,9 +78522,9 @@
NOTE:
https://git.videolan.org/?p=vlc/vlc-2.2.git;a=commitdiff;h=ce91452460a75d7424b165c4dc8db98114c3cbd9;hp=9e12195d3e4316278af1fa4bcb6a705ff27456fd
NOTE: http://www.ocert.org/advisories/ocert-2015-009.html
CVE-2015-5948 (Race condition in SuiteCRM before 7.2.3 allows remote attackers
to ...)
- TODO: check
+ NOT-FOR-US: SuiteCRM
CVE-2015-5947 (SuiteCRM before 7.2.3 allows remote attackers to execute
arbitrary ...)
- TODO: check
+ NOT-FOR-US: SuiteCRM
CVE-2015-5946 (Incomplete blacklist vulnerability in SuiteCRM 7.2.2 allows
remote ...)
NOT-FOR-US: SugarCRM
CVE-2015-5945 (The Sandbox subsystem in Apple OS X before 10.11.1 allows local
users ...)
@@ -87307,7 +87307,7 @@
CVE-2015-2944 (Multiple cross-site scripting (XSS) vulnerabilities in Apache
Sling ...)
NOT-FOR-US: Apache Sling
CVE-2015-2943 (Honda Moto LINC 1.6.1 does not verify SSL certificates. ...)
- TODO: check
+ NOT-FOR-US: Honda Moto LINC
CVE-2015-3026 (Icecast before 2.4.2, when a stream_auth handler is defined for
URL ...)
{DSA-3239-1}
- icecast2 2.4.2-1 (bug #782120)
@@ -89727,7 +89727,7 @@
[wheezy] - tcllib 1.14-dfsg-3+deb7u1
[squeeze] - tcllib <no-dsa> (Minor issue)
CVE-2015-2210 (The help window in Epicor CRS Retail Store before 3.2.03.01.008
allows ...)
- TODO: check
+ NOT-FOR-US: Epicor CRS Retail Store
CVE-2015-2209 (DLGuard 4.5 allows remote attackers to obtain the installation
path ...)
NOT-FOR-US: DLGuard
CVE-2015-2208 (The saveObject function in moadmin.php in phpMoAdmin 1.1.2
allows ...)
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
