Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
60fcedf7 by Salvatore Bonaccorso at 2018-07-17T10:18:08+02:00
Process NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -8,7 +8,7 @@ CVE-2018-14335
CVE-2018-14334 (manager/editor/upload.php in joyplus-cms 1.6.0 allows
arbitrary file ...)
NOT-FOR-US: joyplus-cms
CVE-2018-14333 (TeamViewer through 13.1.1548 stores a password in Unicode
format within ...)
- TODO: check
+ NOT-FOR-US: TeamViewer
CVE-2018-14332
RESERVED
CVE-2018-14331 (An issue was discovered in XiaoCms X1 v20140305. There is a
CSRF ...)
@@ -1108,7 +1108,7 @@ CVE-2018-13834
CVE-2018-13833 (An issue was discovered in cmft through 2017-09-24. The ...)
NOT-FOR-US: cmft
CVE-2018-13832 (Multiple Persistent cross-site scripting (XSS) issues in the
...)
- TODO: check
+ NOT-FOR-US: Techotronic all-in-one-favicon (aka All In One Favicon)
plugin for WordPress
CVE-2018-13831
RESERVED
CVE-2018-13830
@@ -34642,7 +34642,7 @@ CVE-2017-17543 (Users' VPN authentication credentials
are unsafely encrypted in
CVE-2017-17542
RESERVED
CVE-2017-17541 (A Cross-site Scripting (XSS) vulnerability in Fortinet
FortiManager ...)
- TODO: check
+ NOT-FOR-US: Fortinet
CVE-2017-17540 (The presence of a hardcoded account in Fortinet FortiWLC 8.3.3
allows ...)
NOT-FOR-US: Fortinet FortiWLC
CVE-2017-17539 (The presence of a hardcoded account in Fortinet FortiWLC
7.0.11 and ...)
@@ -99350,25 +99350,25 @@ CVE-2016-6559 (Improper bounds checking of the obuf
variable in the link_ntoa()
CVE-2016-6558 (A command injection vulnerability exists in apply.cgi on the
ASUS ...)
TODO: check
CVE-2016-6557 (In ASUS RP-AC52 access points with firmware version 1.0.1.1s
and ...)
- TODO: check
+ NOT-FOR-US: ASUS RP-AC52 access points
CVE-2016-6556
RESERVED
CVE-2016-6555
RESERVED
CVE-2016-6554 (Synology NAS servers DS107, firmware version 3.1-1639 and
prior, and ...)
- TODO: check
+ NOT-FOR-US: Synology
CVE-2016-6553 (Nuuo NT-4040 Titan, firmware NT-4040_01.07.0000.0015_1120, uses
...)
- TODO: check
+ NOT-FOR-US: Nuuo NT-4040 Titan
CVE-2016-6552 (Green Packet DX-350 uses non-random default credentials of: ...)
- TODO: check
+ NOT-FOR-US: Green Packet DX-350
CVE-2016-6551 (Intellian Satellite TV antennas t-Series and v-Series, firmware
...)
TODO: check
CVE-2016-6550 (The U by BB&T app 1.5.4 and earlier for iOS does not
properly verify ...)
NOT-FOR-US: BB&T
CVE-2016-6549 (The Zizai Tech Nut device allows unauthenticated Bluetooth
pairing, ...)
- TODO: check
+ NOT-FOR-US: Zizai Tech Nut device
CVE-2016-6548 (The Zizai Tech Nut mobile app makes requests via HTTP instead
of ...)
- TODO: check
+ NOT-FOR-US: Zizai Tech Nut mobile app
CVE-2016-6547 (The Zizai Tech Nut mobile app stores the account password used
to ...)
TODO: check
CVE-2016-6546 (The iTrack Easy mobile application stores the account password
used to ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/60fcedf739aa55a4ac1a25db04462d2aac7b1294
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/60fcedf739aa55a4ac1a25db04462d2aac7b1294
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
