Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0f5ccdba by Moritz Muehlenhoff at 2018-03-15T12:10:04+01:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -2357,9 +2357,9 @@ CVE-2018-7680
CVE-2018-7679
RESERVED
CVE-2018-7678 (A cross site scripting vulnerability exist in the
Administration ...)
- TODO: check
+ NOT-FOR-US: NetIQ Access Manager
CVE-2018-7677 (A CSRF exposure exists in NetIQ Access Manager (NAM) 4.4
Identity ...)
- TODO: check
+ NOT-FOR-US: NetIQ Access Manager
CVE-2018-7676
RESERVED
CVE-2018-7675 (In NetIQ Sentinel before 8.1.x, a Sentinel user is logged into
the ...)
@@ -2641,7 +2641,6 @@ CVE-2018-7587 (An issue was discovered in CImg v.220. DoS
occurs when loading a
[stretch] - cimg <no-dsa> (Minor issue)
[jessie] - cimg <no-dsa> (Minor issue)
[wheezy] - cimg <no-dsa> (Minor issue)
- TODO: check, not reported upstream
CVE-2018-7586 (In the nextgen-gallery plugin before 2.2.50 for WordPress,
gallery ...)
NOT-FOR-US: nextgen-gallery plugin for WordPress
CVE-2017-18212 (An issue was discovered in JerryScript 1.0. There is a
heap-based ...)
@@ -2890,15 +2889,15 @@ CVE-2018-7535
CVE-2018-7534
RESERVED
CVE-2018-7533 (An Incorrect Default Permissions issue was discovered in
OSIsoft PI ...)
- TODO: check
+ NOT-FOR-US: OSIsoft PI
CVE-2018-7532
RESERVED
CVE-2018-7531 (An Improper Input Validation issue was discovered in OSIsoft PI
Data ...)
- TODO: check
+ NOT-FOR-US: OSIsoft PI
CVE-2018-7530
RESERVED
CVE-2018-7529 (A Deserialization of Untrusted Data issue was discovered in
OSIsoft PI ...)
- TODO: check
+ NOT-FOR-US: OSIsoft PI
CVE-2018-7528
RESERVED
CVE-2018-7527
@@ -2940,7 +2939,7 @@ CVE-2018-7510
CVE-2018-7509
RESERVED
CVE-2018-7508 (A Cross-site Scripting issue was discovered in OSIsoft PI Web
API ...)
- TODO: check
+ NOT-FOR-US: OSIsoft PI
CVE-2018-7507
RESERVED
CVE-2018-7506
@@ -2948,7 +2947,7 @@ CVE-2018-7506
CVE-2018-7505
RESERVED
CVE-2018-7504 (A Protection Mechanism Failure issue was discovered in OSIsoft
PI ...)
- TODO: check
+ NOT-FOR-US: OSIsoft PI
CVE-2018-7503
RESERVED
CVE-2018-7502
@@ -2956,7 +2955,7 @@ CVE-2018-7502
CVE-2018-7501
RESERVED
CVE-2018-7500 (A Permissions, Privileges, and Access Controls issue was
discovered in ...)
- TODO: check
+ NOT-FOR-US: OSIsoft PI
CVE-2018-7499
RESERVED
CVE-2018-7498
@@ -2964,7 +2963,7 @@ CVE-2018-7498
CVE-2018-7497
RESERVED
CVE-2018-7496 (An Information Exposure issue was discovered in OSIsoft PI
Vision ...)
- TODO: check
+ NOT-FOR-US: OSIsoft PI
CVE-2018-7495
RESERVED
CVE-2018-7494
@@ -3062,7 +3061,7 @@ CVE-2018-7476 (controllers/admin/Linkage.php in dayrui
FineCms 5.3.0 has Cross S
CVE-2018-7475
RESERVED
CVE-2018-7474 (An issue was discovered in Textpattern CMS 4.6.2 and earlier.
It is ...)
- TODO: check
+ - textpattern <removed>
CVE-2018-7473 (Open redirect vulnerability in the SO Connect SO WIFI hotspot
web ...)
NOT-FOR-US: SO Connect SO WIFI
CVE-2018-7472 (INVT Studio 1.2 allows remote attackers to cause a denial of
service ...)
@@ -3666,13 +3665,13 @@ CVE-2018-7281 (CactusVPN 5.3.6 for macOS contains a
root privilege escalation ..
CVE-2018-7280 (The Ninja Forms plugin before 3.2.14 for WordPress has XSS. ...)
NOT-FOR-US: Ninja Forms plugin for WordPress
CVE-2018-1000093 (CryptoNote version version 0.8.9 and possibly later contain
a local ...)
- TODO: check
+ NOT-FOR-US: CryptoNote
CVE-2018-1000092 (CMS Made Simple version versions 2.2.5 contains a Cross ite
Request ...)
NOT-FOR-US: CMS Made Simple
CVE-2018-1000091 (KadNode version version 2.2.0 contains a Buffer Overflow
vulnerability ...)
- TODO: check
+ NOT-FOR-US: KadNode
CVE-2018-1000090 (textpattern version version 4.6.2 contains a XML Injection
...)
- TODO: check
+ - textpattern <removed>
CVE-2018-1000089 (Anymail django-anymail version version 0.2 through 1.3
contains a ...)
- django-anymail 1.4-1 (bug #890097)
[stretch] - django-anymail <no-dsa> (Minor issue; non-free/contrib not
security supported)
@@ -3684,7 +3683,7 @@ CVE-2018-1000088 (Doorkeeper version 2.1.0 through 4.2.5
contains a Cross Site S
CVE-2018-1000087 (WolfCMS version version 0.8.3.1 contains a Reflected Cross
Site ...)
NOT-FOR-US: WolfCMS
CVE-2018-1000086 (NPR Visuals Team Pym.js version versions 0.4.2 up to 1.3.1
contains a ...)
- TODO: check
+ NOT-FOR-US: pym.js
CVE-2018-1000085 (ClamAV version version 0.99.3 contains a Out of bounds heap
memory ...)
- clamav 0.99.3~beta1+dfsg-1
[stretch] - clamav 0.99.4+dfsg-1+deb9u1
@@ -3775,11 +3774,11 @@ CVE-2018-1000071 (roundcube version 1.3.4 and earlier
contains an Insecure Permi
NOTE:
https://www.legacysecuritygroup.com/cve/references/02122018-roundcube-enigma.txt
NOTE: Can be mitigated by moving home folder outside the scope of the
webserver
CVE-2018-1000070 (Bitmessage PyBitmessage version v0.6.2 (and introduced in or
after ...)
- TODO: check
+ NOT-FOR-US: PyBitmessage
CVE-2018-1000069 (FreePlane version 1.5.9 and earlier contains a XML External
Entity ...)
TODO: check
CVE-2018-7279 (A remote code execution issue was discovered in AlienVault USM
and ...)
- TODO: check
+ NOT-FOR-US: AlienVault
CVE-2018-7278 (An issue was discovered on RLE Protocol Converter FDS-PC /
FDS-PC-DP ...)
NOT-FOR-US: RLE Protocol Converter FDS-PC / FDS-PC-DP devices
CVE-2018-7277 (An issue was discovered on RLE Wi-MGR/FDS-Wi 6.2 devices.
Persistent ...)
@@ -4849,7 +4848,7 @@ CVE-2018-6877
CVE-2018-6876 (The OLEProperty class in ole/oleprop.cpp in libfpx 1.3.1-10, as
used in ...)
NOT-FOR-US: libfpx
CVE-2018-6875 (Format String vulnerability in KeepKey version 4.0.0 allows
attackers ...)
- TODO: check
+ NOT-FOR-US: KeepKey
CVE-2018-6874
RESERVED
CVE-2018-6873
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/0f5ccdbab6e34afb0e47f35d693b645f8670a615
---
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/0f5ccdbab6e34afb0e47f35d693b645f8670a615
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
