Author: gilbert-guest
Date: 2010-05-26 01:35:31 +0000 (Wed, 26 May 2010)
New Revision: 14756
Modified:
data/CVE/list
Log:
NFUs
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2010-05-26 01:22:56 UTC (rev 14755)
+++ data/CVE/list 2010-05-26 01:35:31 UTC (rev 14756)
@@ -1,15 +1,15 @@
CVE-2010-2032 (Multiple cross-site scripting (XSS) vulnerabilities in ...)
- TODO: check
+ NOT-FOR-US: Caucho Technology Resin Professional
CVE-2010-2031 (KAVSafe.sys 2010.4.14.609 and earlier, as used in Kingsoft
Webshield ...)
- TODO: check
+ NOT-FOR-US: Kingsoft Webshield
CVE-2010-2030 (Cross-site scripting (XSS) vulnerability in the External Link
Page ...)
- TODO: check
+ NOT-FOR-US: External Link Page module for Drupal
CVE-2010-2029 (Cybozu Office 7 Ktai and Dotsales do not properly restrict
access to ...)
- TODO: check
+ NOT-FOR-US: Cybozu Office and Dotsales
CVE-2010-2028 (Buffer overflow in k23productions TFTPUtil GUI (aka TFTPGUI)
1.4.5 ...)
- TODO: check
+ NOT-FOR-US: k23productions TFTPGUI
CVE-2010-2027 (Mathematica 7, when running on Linux, allows local users to
overwrite ...)
- TODO: check
+ NOT-FOR-US: Mathematica
CVE-2010-2026
RESERVED
CVE-2010-2025
@@ -25,23 +25,23 @@
CVE-2010-2020
RESERVED
CVE-2010-2019 (SQL injection vulnerability in downlot.php in Lokomedia CMS
1.4.1, ...)
- TODO: check
+ NOT-FOR-US: Lokomedia CMS
CVE-2010-2018 (Directory traversal vulnerability in downlot.php in Lokomedia
CMS ...)
- TODO: check
+ NOT-FOR-US: Lokomedia CMS
CVE-2010-2017 (Cross-site scripting (XSS) vulnerability in
hasil-pencarian.html in ...)
- TODO: check
+ NOT-FOR-US: Lokomedia CMS
CVE-2010-2016 (SQL injection vulnerability in details.php in Iceberg CMS
allows ...)
- TODO: check
+ NOT-FOR-US: Iceberg CMS
CVE-2010-2015 (Multiple SQL injection vulnerabilities in LiSK CMS 4.4 allow
remote ...)
- TODO: check
+ NOT-FOR-US: LiSK CMS
CVE-2010-2014 (Cross-site scripting (XSS) vulnerability in cp/list_content.php
in ...)
- TODO: check
+ NOT-FOR-US: LiSK CMS
CVE-2010-2013 (Cross-site scripting (XSS) vulnerability in cp/edit_email.php
in LiSK ...)
- TODO: check
+ NOT-FOR-US: LiSK CMS
CVE-2010-2012 (SQL injection vulnerability in function.php in MigasCMS 1.1,
when ...)
- TODO: check
+ NOT-FOR-US: MigasCMS
CVE-2006-7239 (The _gnutls_x509_oid2mac_algorithm function in
lib/gnutls_algorithms.c ...)
- TODO: check
+ - gnutls26 <not-affected> (fix is present in lenny/sid; fixed
originally in upstream 1.4.2, which precedes 26)
CVE-2010-2011 (Microsoft Dynamics GP uses a substitution cipher to encrypt the
system ...)
NOT-FOR-US: Microsoft Dynamics GP
CVE-2010-2010 (Multiple cross-site scripting (XSS) vulnerabilities in the
Chaos Tool ...)
@@ -805,7 +805,7 @@
CVE-2010-1689 (The DNS implementation in smtpsvc.dll before 6.0.2600.5949 in
...)
NOT-FOR-US: Microsoft Windows
CVE-2010-1688 (Stack-based buffer overflow in 2BrightSparks SyncBack Freeware
...)
- TODO: check
+ NOT-FOR-US: 2BrightSparks SyncBack Freeware
CVE-2010-1687 (Stack-based buffer overflow in lpd.exe in Mocha W32 LPD 1.9
allows ...)
NOT-FOR-US: Mocha W32 LPD
CVE-2010-1686 (Stack-based buffer overflow in (1) Urgent Backup 3.20, and (2)
ABC ...)
_______________________________________________
Secure-testing-commits mailing list
[email protected]
http://lists.alioth.debian.org/mailman/listinfo/secure-testing-commits
