Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
cfdc3766 by Salvatore Bonaccorso at 2018-08-04T09:04:51Z
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -3688,7 +3688,7 @@ CVE-2018-13418
CVE-2018-13417
RESERVED
CVE-2018-13416 (In Universal Media Server (UMS) 7.1.0, the XML parsing engine
for ...)
- TODO: check
+ NOT-FOR-US: Universal Media Server
CVE-2018-13415
RESERVED
CVE-2018-13414
@@ -4618,7 +4618,7 @@ CVE-2018-12991
CVE-2018-12990 (phpwcms 1.8.9 allows remote attackers to discover the
installation path ...)
NOT-FOR-US: phpwcms
CVE-2018-12989 (The report-viewing feature in Pearson VUE Certiport Console 8
and ...)
- TODO: check
+ NOT-FOR-US: Pearson VUE Certiport Console 8 and IQSystem 7
CVE-2018-12988 (GreenCMS 2.3.0603 has an arbitrary file download vulnerability
via an ...)
NOT-FOR-US: GreenCMS
CVE-2018-12987
@@ -12882,7 +12882,7 @@ CVE-2018-9868
CVE-2018-9867
RESERVED
CVE-2018-9866 (A vulnerability in lack of validation of user-supplied
parameters pass ...)
- TODO: check
+ NOT-FOR-US: SonicWall
CVE-2018-9865
RESERVED
CVE-2018-9864 (The WP Live Chat Support plugin before 8.0.06 for WordPress has
stored ...)
@@ -21871,7 +21871,7 @@ CVE-2018-6592 (Unisys Stealth 3.3 Windows endpoints
before 3.3.016.1 allow local
CVE-2018-6591 (Converse.js and Inverse.js through 3.3 allow remote attackers
to obtain ...)
NOT-FOR-US: Converse.js
CVE-2018-6590 (CA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1,
has an ...)
- TODO: check
+ NOT-FOR-US: CA API Developer Portal
CVE-2018-6589 (CA Spectrum 10.1 prior to 10.01.02.PTF_10.1.239 and 10.2.x
prior to ...)
NOT-FOR-US: CA Spectrum
CVE-2018-6588 (CA API Developer Portal 3.5 up to and including 3.5 CR5 has a
...)
@@ -25569,9 +25569,9 @@ CVE-2018-5492
CVE-2018-5491
RESERVED
CVE-2018-5490 (Read-Only export policy rules are not correctly enforced in
Clustered ...)
- TODO: check
+ NOT-FOR-US: NetApp Data ONTAP
CVE-2018-5489 (NetApp 7-Mode Transition Tool allows users with valid
credentials to ...)
- TODO: check
+ NOT-FOR-US: NetApp
CVE-2018-5488 (NetApp SANtricity Web Services Proxy versions 1.10.x000.0002
through ...)
NOT-FOR-US: NetApp SANtricity Web Services Proxy
CVE-2018-5487 (NetApp OnCommand Unified Manager for Linux versions 7.2 through
7.3 ...)
@@ -29480,7 +29480,7 @@ CVE-2018-3883
CVE-2018-3882
RESERVED
CVE-2018-3881 (An exploitable unauthenticated XML external injection
vulnerability ...)
- TODO: check
+ NOT-FOR-US: FocalScope
CVE-2018-3880
RESERVED
CVE-2018-3879
@@ -29632,7 +29632,7 @@ CVE-2018-3836 (An exploitable command injection
vulnerability exists in the ...)
CVE-2018-3835 (An exploitable out of bounds write vulnerability exists in
version 2.2 ...)
NOT-FOR-US: Per Face Texture (PTEX)
CVE-2018-3834 (An exploitable permanent denial of service vulnerability exists
in ...)
- TODO: check
+ NOT-FOR-US: Insteon Hub
CVE-2018-3833
RESERVED
CVE-2018-3832
@@ -32275,9 +32275,9 @@ CVE-2018-3111
CVE-2018-3110
RESERVED
CVE-2018-3109 (Vulnerability in the Oracle Fusion Middleware MapViewer
component of ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2018-3108 (Vulnerability in the Oracle Fusion Middleware component of
Oracle ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2018-3107
RESERVED
CVE-2018-3106
@@ -32661,7 +32661,7 @@ CVE-2018-2935 (Vulnerability in the Oracle WebLogic
Server component of Oracle F
CVE-2018-2934 (Vulnerability in the Oracle Application Object Library
component of ...)
NOT-FOR-US: Oracle
CVE-2018-2933 (Vulnerability in the Oracle WebLogic Server component of Oracle
Fusion ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2018-2932 (Vulnerability in the Oracle SuperCluster Specific Software
component ...)
NOT-FOR-US: Oracle
CVE-2018-2931
@@ -35907,7 +35907,7 @@ CVE-2018-1526
CVE-2018-1525
RESERVED
CVE-2018-1524 (IBM Maximo Asset Management 7.6 through 7.6.3 installs with a
default ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2018-1523 (IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through
6.0.5 ...)
NOT-FOR-US: IBM
CVE-2018-1522
@@ -40457,21 +40457,21 @@ CVE-2018-0415
CVE-2018-0414
RESERVED
CVE-2018-0413 (A vulnerability in the web-based management interface of Cisco
Identity ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2018-0412
RESERVED
CVE-2018-0411 (A vulnerability in the web-based management interface of Cisco
Unified ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2018-0410
RESERVED
CVE-2018-0409
RESERVED
CVE-2018-0408 (A vulnerability in the web-based management interface of Cisco
Small ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2018-0407 (A vulnerability in the web-based management interface of Cisco
Small ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2018-0406 (A vulnerability in the web-based management interface of Cisco
Web ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2018-0405
RESERVED
CVE-2018-0404
@@ -40489,7 +40489,7 @@ CVE-2018-0399 (Multiple vulnerabilities in the
web-based management interface of
CVE-2018-0398 (Multiple vulnerabilities in the web-based management interface
of Cisco ...)
NOT-FOR-US: Cisco
CVE-2018-0397 (A vulnerability in Cisco AMP for Endpoints Mac Connector
Software ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2018-0396 (A vulnerability in the web framework of the Cisco Unified ...)
NOT-FOR-US: Cisco
CVE-2018-0395
@@ -40501,7 +40501,7 @@ CVE-2018-0393 (A Read-Only User Effect Change
vulnerability in the Policy Builde
CVE-2018-0392 (A vulnerability in the CLI of Cisco Policy Suite could allow an
...)
NOT-FOR-US: Cisco
CVE-2018-0391 (A vulnerability in the password change function of Cisco Prime
...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2018-0390 (A vulnerability in the web framework of Cisco Webex could allow
an ...)
NOT-FOR-US: Cisco
CVE-2018-0389
@@ -43415,25 +43415,25 @@ CVE-2017-16349 (An exploitable XML external entity
vulnerability exists in the .
CVE-2017-16348
RESERVED
CVE-2017-16347 (An attacker could send an authenticated HTTP request to
trigger this ...)
- TODO: check
+ NOT-FOR-US: Insteon Hub
CVE-2017-16346 (An attacker could send an authenticated HTTP request to
trigger this ...)
- TODO: check
+ NOT-FOR-US: Insteon Hub
CVE-2017-16345 (An attacker could send an authenticated HTTP request to
trigger this ...)
- TODO: check
+ NOT-FOR-US: Insteon Hub
CVE-2017-16344 (An attacker could send an authenticated HTTP request to
trigger this ...)
- TODO: check
+ NOT-FOR-US: Insteon Hub
CVE-2017-16343 (An attacker could send an authenticated HTTP request to
trigger this ...)
- TODO: check
+ NOT-FOR-US: Insteon Hub
CVE-2017-16342 (An attacker could send an authenticated HTTP request to
trigger this ...)
- TODO: check
+ NOT-FOR-US: Insteon Hub
CVE-2017-16341 (An attacker could send an authenticated HTTP request to
trigger this ...)
- TODO: check
+ NOT-FOR-US: Insteon Hub
CVE-2017-16340 (An attacker could send an authenticated HTTP request to
trigger this ...)
- TODO: check
+ NOT-FOR-US: Insteon Hub
CVE-2017-16339 (An attacker could send an authenticated HTTP request to
trigger this ...)
- TODO: check
+ NOT-FOR-US: Insteon Hub
CVE-2017-16338 (An attacker could send an authenticated HTTP request to
trigger this ...)
- TODO: check
+ NOT-FOR-US: Insteon Hub
CVE-2017-16337
RESERVED
CVE-2017-16336
@@ -49354,11 +49354,11 @@ CVE-2017-14448 (An exploitable code execution
vulnerability exists in the XCF im
CVE-2017-14447
RESERVED
CVE-2017-14446 (An exploitable stack-based buffer overflow vulnerability
exists in ...)
- TODO: check
+ NOT-FOR-US: Insteon Hub
CVE-2017-14445 (An exploitable buffer overflow vulnerability exists in Insteon
Hub ...)
- TODO: check
+ NOT-FOR-US: Insteon Hub
CVE-2017-14444 (An exploitable buffer overflow vulnerability exists in Insteon
Hub ...)
- TODO: check
+ NOT-FOR-US: Insteon Hub
CVE-2017-14443
RESERVED
CVE-2017-14442 (An exploitable code execution vulnerability exists in the BMP
image ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/cfdc37660343e9d05b30befd4a89f682960e512b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/cfdc37660343e9d05b30befd4a89f682960e512b
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
