Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f5f515f5 by Moritz Muehlenhoff at 2018-07-16T22:52:47+02:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -46487,9 +46487,9 @@ CVE-2017-14712 (In EPESI 1.8.2 rev20170830, there is
Stored XSS in the Tasks Pho
CVE-2017-14711 (The Kickbase GmbH "Kickbase Bundesliga Manager" app
before 2.2.1 -- aka ...)
NOT-FOR-US: Kickbase GmbH "Kickbase Bundesliga Manager"
CVE-2017-14710 (The Shein Group Ltd. "SHEIN - Fashion Shopping" app
-- aka shein ...)
- TODO: check
+ NOT-FOR-US: Fashion Shopping app
CVE-2017-14709 (The komoot GmbH "Komoot - Cycling & Hiking Maps"
app before 9.3.2 -- ...)
- TODO: check
+ NOT-FOR-US: Cycling & Hiking Maps app
CVE-2017-14708
RESERVED
CVE-2017-14707
@@ -46797,7 +46797,7 @@ CVE-2017-14614 (Directory traversal vulnerability in
the Visor GUI Console in Gr
CVE-2017-14613
RESERVED
CVE-2017-14612 ("Shpock Boot Sale & Classifieds" app before
3.17.0 -- aka ...)
- TODO: check
+ NOT-FOR-US: Book sale app
CVE-2017-14611 (SSRF (Server Side Request Forgery) in Cockpit 0.13.0 allows
remote ...)
NOT-FOR-US: Cockpit CMS (different from src:cockpit)
CVE-2017-14610 (bareos-dir, bareos-fd, and bareos-sd in bareos-core in Bareos
16.2.6 ...)
@@ -50863,19 +50863,19 @@ CVE-2017-13098 (BouncyCastle TLS prior to version
1.0.3, when configured to use
NOTE: Fixed in 1.59 beta 9
NOTE: https://robotattack.org/
CVE-2017-13097 (The P1735 IEEE standard describes flawed methods for
encrypting ...)
- TODO: check
+ NOT-FOR-US: P1735 IEEE standard
CVE-2017-13096 (The P1735 IEEE standard describes flawed methods for
encrypting ...)
- TODO: check
+ NOT-FOR-US: P1735 IEEE standard
CVE-2017-13095 (The P1735 IEEE standard describes flawed methods for
encrypting ...)
- TODO: check
+ NOT-FOR-US: P1735 IEEE standard
CVE-2017-13094 (The P1735 IEEE standard describes flawed methods for
encrypting ...)
- TODO: check
+ NOT-FOR-US: P1735 IEEE standard
CVE-2017-13093 (The P1735 IEEE standard describes flawed methods for
encrypting ...)
- TODO: check
+ NOT-FOR-US: P1735 IEEE standard
CVE-2017-13092 (The P1735 IEEE standard describes flawed methods for
encrypting ...)
- TODO: check
+ NOT-FOR-US: P1735 IEEE standard
CVE-2017-13091 (The P1735 IEEE standard describes flawed methods for
encrypting ...)
- TODO: check
+ NOT-FOR-US: P1735 IEEE standard
CVE-2017-13090 (The retr.c:fd_read_body() function is called when processing
OK ...)
{DSA-4008-1 DLA-1149-1}
- wget 1.19.2-1 (bug #879957)
@@ -57549,7 +57549,7 @@ CVE-2017-11090 (In android for MSM, Firefox OS for MSM,
QRD Android, with all An
CVE-2017-11089 (In android for MSM, Firefox OS for MSM, QRD Android, with all
Android ...)
NOT-FOR-US: Qualcomm components for Android
CVE-2017-11088 (Improper Input Validation in Linux io-prefetch in Snapdragon
Mobile ...)
- TODO: check
+ NOT-FOR-US: Snapdragon
CVE-2017-11087 (libOmxVenc in Android for MSM, Firefox OS for MSM, and QRD
Android ...)
NOT-FOR-US: Qualcomm component for Android
CVE-2017-11086
@@ -74068,7 +74068,7 @@ CVE-2017-5706 (Multiple buffer overflows in kernel in
Intel Server Platform Serv
CVE-2017-5705 (Multiple buffer overflows in kernel in Intel Manageability
Engine ...)
NOT-FOR-US: Intel
CVE-2017-5704 (Platform sample code firmware included with 4th Gen Intel Core
...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2017-5703 (Configuration of SPI Flash in platforms based on multiple Intel
...)
NOT-FOR-US: Intel
CVE-2017-5702
@@ -81908,9 +81908,9 @@ CVE-2017-3200 (The Java implementation of AMF3
deserializers used in GraniteDS,
CVE-2017-3199 (The Java implementation of GraniteDS, version 3.1.1.GA, AMF3
...)
NOT-FOR-US: AMF3 deserialisers
CVE-2017-3198 (GIGABYTE BRIX UEFI firmware does not cryptographically validate
images ...)
- TODO: check
+ NOT-FOR-US: GIGABYTE
CVE-2017-3197 (GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 (version F6)
and ...)
- TODO: check
+ NOT-FOR-US: GIGABYTE
CVE-2017-3196 (PCAUSA Rawether framework does not properly validate BPF data,
...)
NOT-FOR-US: PCAUSA Rawether
CVE-2017-3195 (Commvault Edge Communication Service (cvd) prior to version 11
SP7 or ...)
@@ -89461,43 +89461,43 @@ CVE-2016-9502
CVE-2016-9501
REJECTED
CVE-2016-9500 (Accellion FTP server prior to version FTA_9_12_220 uses the
Accusoft ...)
- TODO: check
+ NOT-FOR-US: Accellion
CVE-2016-9499 (Accellion FTP server prior to version FTA_9_12_220 only returns
the ...)
- TODO: check
+ NOT-FOR-US: Accellion
CVE-2016-9498 (ManageEngine Applications Manager 12 and 13, allows
unserialization of ...)
- TODO: check
+ NOT-FOR-US: ManageEngine
CVE-2016-9497 (Hughes high-performance broadband satellite modems, models
HN7740S ...)
- TODO: check
+ NOT-FOR-US: Hughes
CVE-2016-9496 (Hughes high-performance broadband satellite modems, models
HN7740S ...)
- TODO: check
+ NOT-FOR-US: Hughes
CVE-2016-9495 (Hughes high-performance broadband satellite modems, models
HN7740S ...)
- TODO: check
+ NOT-FOR-US: Hughes
CVE-2016-9494 (Hughes high-performance broadband satellite modems, models
HN7740S ...)
- TODO: check
+ NOT-FOR-US: Hughes
CVE-2016-9493 (The code generated by PHP FormMail Generator prior to 17
December 2016 ...)
- TODO: check
+ NOT-FOR-US: PHP FormMail Generator
CVE-2016-9492 (The code generated by PHP FormMail Generator prior to 17
December 2016 ...)
- TODO: check
+ NOT-FOR-US: PHP FormMail Generator
CVE-2016-9491 (ManageEngine Applications Manager 12 and 13 allows an
authenticated ...)
- TODO: check
+ NOT-FOR-US: ManageEngine
CVE-2016-9490 (ManageEngine Applications Manager versions 12 and 13 suffer
from a ...)
NOT-FOR-US: ManageEngine Applications Manager
CVE-2016-9489 (In ManageEngine Applications Manager 12 and 13, an
authenticated user ...)
- TODO: check
+ NOT-FOR-US: ManageEngine
CVE-2016-9488 (ManageEngine Applications Manager versions 12 and 13 suffer
from ...)
NOT-FOR-US: ManageEngine Applications Manager
CVE-2016-9487 (EpubCheck 4.0.1 does not properly restrict resolving external
entities ...)
- TODO: check
+ NOT-FOR-US: EpubCheck
CVE-2016-9486 (On Windows endpoints, the SecureConnector agent must run under
the ...)
- TODO: check
+ NOT-FOR-US: SecureConnector agent
CVE-2016-9485 (On Windows endpoints, the SecureConnector agent must run under
the ...)
- TODO: check
+ NOT-FOR-US: SecureConnector agent
CVE-2016-9484 (The generated PHP form code does not properly validate user
input ...)
- TODO: check
+ NOT-FOR-US: PHP FormMail Generator
CVE-2016-9483 (The PHP form code generated by PHP FormMail Generator
deserializes ...)
- TODO: check
+ NOT-FOR-US: PHP FormMail Generator
CVE-2016-9482 (Code generated by PHP FormMail Generator may allow a remote ...)
- TODO: check
+ NOT-FOR-US: PHP FormMail Generator
CVE-2014-9912 (The get_icu_disp_value_src_php function in ...)
- php5 5.6.0+dfsg-1
[wheezy] - php5 5.4.34-0+deb7u1
@@ -99281,7 +99281,7 @@ CVE-2016-6582 (The Doorkeeper gem before 4.2.0 for Ruby
might allow remote attac
CVE-2016-6579
REJECTED
CVE-2016-6578 (CodeLathe FileCloud, version 13.0.0.32841 and earlier, contains
a ...)
- TODO: check
+ NOT-FOR-US: CodeLathe FileCloud
CVE-2016-6577
RESERVED
CVE-2016-6576
@@ -99303,11 +99303,11 @@ CVE-2016-6569
CVE-2016-6568
RESERVED
CVE-2016-6567 (SHDesigns' Resident Download Manager provides firmware update
...)
- TODO: check
+ NOT-FOR-US: SHDesigns
CVE-2016-6566 (The valueAsString parameter inside the JSON payload contained
by the ...)
- TODO: check
+ NOT-FOR-US: Sungard
CVE-2016-6565 (The Imagely NextGen Gallery plugin for Wordpress prior to
version ...)
- TODO: check
+ NOT-FOR-US: Wordpress plugin
CVE-2016-6564 (Android devices with code from Ragentek contain a privileged
binary ...)
TODO: check
CVE-2016-6563 (Processing malformed SOAP messages when performing the HNAP
Login ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/f5f515f5c29785c9438c979d54a14f966b3fa9d5
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/f5f515f5c29785c9438c979d54a14f966b3fa9d5
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
