summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSalvatore Bonaccorso <carnil@debian.org>2020-02-17 21:27:30 +0100
committerSalvatore Bonaccorso <carnil@debian.org>2020-02-17 21:27:30 +0100
commit399f37a4dd791e590be314709d49ac0f27f76bd7 (patch)
tree92168079873d8a7b4a3b5292c8f47b71a7b56080
parent0d6f3a601b5fd83a6b9674e2d6c2e6831a2a930e (diff)
Process more NFUs
-rw-r--r--data/CVE/2012.list2
-rw-r--r--data/CVE/2019.list6
-rw-r--r--data/CVE/2020.list18
3 files changed, 13 insertions, 13 deletions
diff --git a/data/CVE/2012.list b/data/CVE/2012.list
index a3554bb45f..a17b872f5d 100644
--- a/data/CVE/2012.list
+++ b/data/CVE/2012.list
@@ -1,5 +1,5 @@
CVE-2012-6721 (Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) ...)
- TODO: check
+ NOT-FOR-US: SocialEngine
CVE-2012-6720 (Multiple cross-site scripting (XSS) vulnerabilities in SocialEngine be ...)
NOT-FOR-US: SocialEngine
CVE-2012-6719 (The sharebar plugin before 1.2.2 for WordPress has SQL injection. ...)
diff --git a/data/CVE/2019.list b/data/CVE/2019.list
index ab00729a0d..0dc1062438 100644
--- a/data/CVE/2019.list
+++ b/data/CVE/2019.list
@@ -1,5 +1,5 @@
CVE-2019-20474 (An issue was discovered in Zoho ManageEngine Remote Access Plus 10.0.4 ...)
- TODO: check
+ NOT-FOR-US: Zoho ManageEngine Remote Access Plus
CVE-2019-20473
RESERVED
CVE-2019-20472
@@ -3400,7 +3400,7 @@ CVE-2019-19197 (IOCTL Handling in the kyrld.sys driver in Kyrol Internet Securit
CVE-2019-19196 (The Bluetooth Low Energy Secure Manager Protocol (SMP) implementation ...)
TODO: check
CVE-2019-19195 (The Bluetooth Low Energy implementation on Microchip Technology BluSDK ...)
- TODO: check
+ NOT-FOR-US: Microchip
CVE-2019-19194 (The Bluetooth Low Energy Secure Manager Protocol (SMP) implementation ...)
TODO: check
CVE-2019-19193 (The Bluetooth Low Energy peripheral implementation on Texas Instrument ...)
@@ -3953,7 +3953,7 @@ CVE-2019-19000
CVE-2019-18999
RESERVED
CVE-2019-18998 (Insufficient access control in the web interface of ABB Asset Suite ve ...)
- TODO: check
+ NOT-FOR-US: ABB Asset Suite
CVE-2019-18997 (The HMISimulator component of ABB PB610 Panel Builder 600 uses the rea ...)
NOT-FOR-US: ABB PB610 Panel Builder
CVE-2019-18996 (Path settings in HMIStudio component of ABB PB610 Panel Builder 600 ve ...)
diff --git a/data/CVE/2020.list b/data/CVE/2020.list
index fc6d4d3d45..3bcf7dd4f9 100644
--- a/data/CVE/2020.list
+++ b/data/CVE/2020.list
@@ -9,7 +9,7 @@ CVE-2020-9040
CVE-2020-9039
RESERVED
CVE-2020-9038 (Joplin through 1.0.184 allows Arbitrary File Read via XSS. ...)
- TODO: check
+ NOT-FOR-US: Joplin
CVE-2020-9037
RESERVED
CVE-2020-9036
@@ -64,9 +64,9 @@ CVE-2020-9015
CVE-2020-9014
RESERVED
CVE-2020-9013 (Arvato Skillpipe 3.0 allows attackers to bypass intended print restric ...)
- TODO: check
+ NOT-FOR-US: Arvato Skillpipe
CVE-2020-9012 (A cross-site scripting (XSS) vulnerability in the Import People functi ...)
- TODO: check
+ NOT-FOR-US: Gluu Identity Configuration
CVE-2020-9011
RESERVED
CVE-2020-9010
@@ -80,7 +80,7 @@ CVE-2020-9007 (Codoforum 4.8.8 allows self-XSS via the title of a new topic. ...
CVE-2020-9006 (The Popup Builder plugin 2.2.8 through 2.6.7.6 for WordPress is vulner ...)
NOT-FOR-US: Popup Builder plugin for WordPress
CVE-2020-9005 (meshsystem.dll in Valve Dota 2 through 2020-02-17 allows remote attack ...)
- TODO: check
+ NOT-FOR-US: Dota 2
CVE-2020-9004
RESERVED
CVE-2020-9003
@@ -196,7 +196,7 @@ CVE-2020-8952
CVE-2020-8951
RESERVED
CVE-2020-8950 (The AUEPLauncher service in Radeon AMD User Experience Program Launche ...)
- TODO: check
+ NOT-FOR-US: Radeon AMD User Experience Program Launcher
CVE-2020-8949 (Gocloud S2A_WL 4.2.7.16471, S2A 4.2.7.17278, S2A 4.3.0.15815, S2A 4.3. ...)
NOT-FOR-US: Gocloud devices
CVE-2020-8948
@@ -1304,9 +1304,9 @@ CVE-2020-8431
CVE-2020-8430
RESERVED
CVE-2020-8429 (The Admin web application in Kinetica 7.0.9.2.20191118151947 does not ...)
- TODO: check
+ NOT-FOR-US: Kinetica
CVE-2020-8427 (Kaseya Traverse before 9.5.20 allows OS command injection attacks agai ...)
- TODO: check
+ NOT-FOR-US: Kaseya Traverse
CVE-2020-8426 (The Elementor plugin before 2.8.5 for WordPress suffers from a reflect ...)
NOT-FOR-US: Elementor plugin for WordPress
CVE-2020-8425 (Cups Easy (Purchase &amp; Inventory) 1.0 is vulnerable to CSRF that le ...)
@@ -3715,7 +3715,7 @@ CVE-2020-7254
CVE-2020-7253
RESERVED
CVE-2020-7252 (Unquoted service executable path in DXL Broker in McAfee Data eXchange ...)
- TODO: check
+ NOT-FOR-US: McAfee
CVE-2020-7251 (Improper access control vulnerability in Configuration Tool in McAfee ...)
NOT-FOR-US: McAfee
CVE-2020-7250
@@ -7379,7 +7379,7 @@ CVE-2020-5533
CVE-2020-5532 (ilbo App (ilbo App for Android prior to version 1.1.8 and ilbo App for ...)
NOT-FOR-US: ilbo App
CVE-2020-5531 (Mitsubishi Electric MELSEC C Controller Module and MELIPC Series MI500 ...)
- TODO: check
+ NOT-FOR-US: Mitsubishi
CVE-2020-5530
RESERVED
CVE-2020-5529 (HtmlUnit prior to 2.37.0 contains code execution vulnerabilities. Html ...)

© 2014-2024 Faster IT GmbH | imprint | privacy policy