Process NFUs

3 files changed, 48 insertions, 48 deletions

diff --git a/data/CVE/2012.list b/data/CVE/2012.list
index 6e40ac454b..21749206b1 100644
--- a/data/CVE/2012.list
+++ b/data/CVE/2012.list
@@ -4660,7 +4660,7 @@ CVE-2012-4820 (Unspecified vulnerability in the JRE component in IBM Java 7 SR2
 CVE-2012-4819 (Cross-site scripting (XSS) vulnerability in InfoSphere Business Glossa ...)
 	NOT-FOR-US: IBM InfoSphere
 CVE-2012-4818 (IBM InfoSphere Information Server 8.1, 8.5, and 8,7 could allow a remo ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2012-4817 (The NFSv4 client implementation in IBM AIX 5.3, 6.1, and 7.1, and VIOS ...)
 	NOT-FOR-US: IBM AIX, VIOS
 CVE-2012-4816 (IBM Rational Automation Framework (RAF) 3.x through 3.0.0.5 allows rem ...)
diff --git a/data/CVE/2019.list b/data/CVE/2019.list
index b4c33b1b27..937f8f9436 100644
--- a/data/CVE/2019.list
+++ b/data/CVE/2019.list
@@ -5456,7 +5456,7 @@ CVE-2019-18848 (The json-jwt gem before 1.11.0 for Ruby lacks an element count d
 	- ruby-json-jwt 1.11.0-1 (bug #944850)
 	NOTE: https://github.com/nov/json-jwt/commit/ada16e772906efdd035e3df49cb2ae372f0f948a
 CVE-2019-18847 (Enterprise Access Client Auto-Updater allows for Remote Code Execution ...)
-	TODO: check
+	NOT-FOR-US: Akamai / Enterprise Access Client Auto-Updater
 CVE-2019-18846 (OX App Suite through 7.10.2 allows SSRF. ...)
 	NOT-FOR-US: OX App Suite
 CVE-2019-18845 (The MsIo64.sys and MsIo32.sys drivers in Patriot Viper RGB before 1.1  ...)
diff --git a/data/CVE/2020.list b/data/CVE/2020.list
index 0dc7d65304..cc00781d3e 100644
--- a/data/CVE/2020.list
+++ b/data/CVE/2020.list
@@ -20280,7 +20280,7 @@ CVE-2020-15161
 CVE-2020-15160
 	RESERVED
 CVE-2020-15159 (baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) a ...)
-	TODO: check
+	NOT-FOR-US: baserCMS
 CVE-2020-15158 (In libIEC61850 before version 1.4.3, when a message with COTP message  ...)
 	NOT-FOR-US: libIEC61850
 CVE-2020-15157
@@ -20288,9 +20288,9 @@ CVE-2020-15157
 CVE-2020-15156 (In nodebb-plugin-blog-comments before version 0.7.0, a logged in user  ...)
 	NOT-FOR-US: nodebb-plugin-blog-comments
 CVE-2020-15155 (baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) v ...)
-	TODO: check
+	NOT-FOR-US: baserCMS
 CVE-2020-15154 (baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) v ...)
-	TODO: check
+	NOT-FOR-US: baserCMS
 CVE-2020-15153
 	RESERVED
 CVE-2020-15152 (ftp-srv versions 1.0.0 through 4.3.3 are vulnerable to Server-Side Req ...)
@@ -22921,7 +22921,7 @@ CVE-2020-14044 (** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Server-Side Request
 CVE-2020-14043 (** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Side Request Forgery ...)
 	NOT-FOR-US: Codiad
 CVE-2020-14042 (** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Site Scripting (XSS) ...)
-	TODO: check
+	NOT-FOR-US: Codiad
 CVE-2020-14041
 	RESERVED
 CVE-2020-14040 (The x/text package before 0.3.3 for Go has a vulnerability in encoding ...)
@@ -31880,9 +31880,9 @@ CVE-2020-10520
 CVE-2020-10519
 	RESERVED
 CVE-2020-10518 (A remote code execution vulnerability was identified in GitHub Enterpr ...)
-	TODO: check
+	NOT-FOR-US: GitHub Enterprise Server
 CVE-2020-10517 (An improper access control vulnerability was identified in GitHub Ente ...)
-	TODO: check
+	NOT-FOR-US: GitHub Enterprise Server
 CVE-2020-10516 (An improper access control vulnerability was identified in the GitHub  ...)
 	NOT-FOR-US: GitHub Enterprise Server API
 CVE-2020-10515 (STARFACE UCC Client before 6.7.1.204 on WIndows allows binary planting ...)
@@ -34665,7 +34665,7 @@ CVE-2020-9300
 CVE-2020-9299
 	RESERVED
 CVE-2020-9298 (The Spinnaker template resolution functionality is vulnerable to Serve ...)
-	TODO: check
+	NOT-FOR-US: Spinnaker
 CVE-2020-9297 (Netflix Titus, all versions prior to version v0.1.1-rc.274, uses Java  ...)
 	NOT-FOR-US: Netflix Titus
 CVE-2020-9296 (Netflix Titus uses Java Bean Validation (JSR 380) custom constraint va ...)
@@ -38266,7 +38266,7 @@ CVE-2020-7707 (The package property-expr before 2.0.3 are vulnerable to Prototyp
 CVE-2020-7706 (The package connie-lang before 0.1.1 are vulnerable to Prototype Pollu ...)
 	NOT-FOR-US: Node connie-lang
 CVE-2020-7705 (This affects the package MintegralAdSDK from 0.0.0. The SDK distribute ...)
-	TODO: check
+	NOT-FOR-US: MintegralAdSDK
 CVE-2020-7704 (The package linux-cmdline before 1.0.1 are vulnerable to Prototype Pol ...)
 	NOT-FOR-US: Node linux-cmdline
 CVE-2020-7703 (All versions of package nis-utils are vulnerable to Prototype Pollutio ...)
@@ -38969,9 +38969,9 @@ CVE-2020-7379
 CVE-2020-7378
 	RESERVED
 CVE-2020-7377 (The Metasploit Framework module "auxiliary/admin/http/telpho10_credent ...)
-	TODO: check
+	NOT-FOR-US: Metasploit Framework module
 CVE-2020-7376 (The Metasploit Framework module "post/osx/gather/enum_osx module" is a ...)
-	TODO: check
+	NOT-FOR-US: Metasploit Framework module
 CVE-2020-7375
 	RESERVED
 CVE-2020-7374 (Documalis Free PDF Editor version 5.7.2.26 and Documalis Free PDF Scan ...)
@@ -39105,7 +39105,7 @@ CVE-2020-7311
 CVE-2020-7310 (Privilege Escalation vulnerability in the installer in McAfee McAfee T ...)
 	NOT-FOR-US: McAfee
 CVE-2020-7309 (Cross Site Scripting vulnerability in ePO extension in McAfee Applicat ...)
-	TODO: check
+	NOT-FOR-US: McAfee
 CVE-2020-7308
 	RESERVED
 CVE-2020-7307 (Unprotected Storage of Credentials vulnerability in McAfee Data Loss P ...)
@@ -40764,7 +40764,7 @@ CVE-2020-6639
 CVE-2020-6638 (Grin through 2.1.1 has Insufficient Validation. ...)
 	NOT-FOR-US: Grin
 CVE-2020-6637 (openSIS Community Edition version 7.3 is vulnerable to SQL injection v ...)
-	TODO: check
+	NOT-FOR-US: openSIS
 CVE-2020-6636
 	RESERVED
 CVE-2020-6635
@@ -43315,15 +43315,15 @@ CVE-2020-5627
 CVE-2020-5626
 	RESERVED
 CVE-2020-5625 (Cross-site scripting vulnerability in XooNIps 3.48 and earlier allows  ...)
-	TODO: check
+	NOT-FOR-US: XooNIps
 CVE-2020-5624 (SQL injection vulnerability in the XooNIps 3.48 and earlier allows rem ...)
-	TODO: check
+	NOT-FOR-US: XooNIps
 CVE-2020-5623 (NITORI App for Android versions 6.0.4 and earlier and NITORI App for i ...)
-	TODO: check
+	NOT-FOR-US: NITORI App for Android and iOS
 CVE-2020-5622
 	RESERVED
 CVE-2020-5621 (Cross-site request forgery (CSRF) vulnerability in NETGEAR switching h ...)
-	TODO: check
+	NOT-FOR-US: Netgear
 CVE-2020-5620 (Cross-site scripting vulnerability in Exment prior to v3.6.0 allows re ...)
 	NOT-FOR-US: Exment
 CVE-2020-5619 (Cross-site scripting vulnerability in Exment prior to v3.6.0 allows re ...)
@@ -47814,19 +47814,19 @@ CVE-2020-3525
 CVE-2020-3524
 	RESERVED
 CVE-2020-3523 (A vulnerability in the web-based management interface of Cisco Data Ce ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3522 (A vulnerability in the web-based management interface of Cisco Data Ce ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3521 (A vulnerability in a specific REST API of Cisco Data Center Network Ma ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3520 (A vulnerability in Cisco Data Center Network Manager (DCNM) Software c ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3519 (A vulnerability in a specific REST API method of Cisco Data Center Net ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3518 (A vulnerability in the web-based management interface of Cisco Data Ce ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3517 (A vulnerability in the Cisco Fabric Services component of Cisco FXOS S ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3516
 	RESERVED
 CVE-2020-3515
@@ -47846,13 +47846,13 @@ CVE-2020-3509
 CVE-2020-3508
 	RESERVED
 CVE-2020-3507 (Multiple vulnerabilities in the Cisco Discovery Protocol implementatio ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3506 (Multiple vulnerabilities in the Cisco Discovery Protocol implementatio ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3505 (A vulnerability in the Cisco Discovery Protocol of Cisco Video Surveil ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3504 (A vulnerability in the local management (local-mgmt) CLI of Cisco UCS  ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3503
 	RESERVED
 CVE-2020-3502 (Multiple vulnerabilities in the user interface of Cisco Webex Meetings ...)
@@ -47868,7 +47868,7 @@ CVE-2020-3498
 CVE-2020-3497
 	RESERVED
 CVE-2020-3496 (A vulnerability in the IPv6 packet processing engine of Cisco Small Bu ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3495
 	RESERVED
 CVE-2020-3494
@@ -47878,9 +47878,9 @@ CVE-2020-3493
 CVE-2020-3492
 	RESERVED
 CVE-2020-3491 (A vulnerability in the web-based management interface of Cisco Vision  ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3490 (A vulnerability in the web-based management interface of Cisco Vision  ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3489
 	RESERVED
 CVE-2020-3488
@@ -47890,9 +47890,9 @@ CVE-2020-3487
 CVE-2020-3486
 	RESERVED
 CVE-2020-3485 (A vulnerability in the role-based access control (RBAC) functionality  ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3484 (A vulnerability in the web-based management interface of Cisco Vision  ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3483
 	RESERVED
 CVE-2020-3482
@@ -47931,7 +47931,7 @@ CVE-2020-3468 (A vulnerability in the web-based management interface of Cisco SD
 CVE-2020-3467
 	RESERVED
 CVE-2020-3466 (Multiple vulnerabilities in the web-based management interface of Cisc ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3465
 	RESERVED
 CVE-2020-3464 (A vulnerability in the web-based management interface of Cisco UCS Dir ...)
@@ -47955,7 +47955,7 @@ CVE-2020-3456
 CVE-2020-3455
 	RESERVED
 CVE-2020-3454 (A vulnerability in the Call Home feature of Cisco NX-OS Software could ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3453
 	RESERVED
 CVE-2020-3452 (A vulnerability in the web services interface of Cisco Adaptive Securi ...)
@@ -47971,21 +47971,21 @@ CVE-2020-3448 (A vulnerability in an access control mechanism of Cisco Cyber Vis
 CVE-2020-3447 (A vulnerability in the CLI of Cisco AsyncOS for Cisco Email Security A ...)
 	NOT-FOR-US: Cisco
 CVE-2020-3446 (A vulnerability in Cisco Virtual Wide Area Application Services (vWAAS ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3445
 	RESERVED
 CVE-2020-3444
 	RESERVED
 CVE-2020-3443 (A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem)  ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3442 (The DuoConnect client enables users to establish SSH connections to ho ...)
 	NOT-FOR-US: DuoConnect
 CVE-2020-3441
 	RESERVED
 CVE-2020-3440 (A vulnerability in Cisco Webex Meetings Desktop App for Windows could  ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3439 (A vulnerability in the web-based management interface of Cisco Data Ce ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3438
 	RESERVED
 CVE-2020-3437 (A vulnerability in the web-based management interface of Cisco SD-WAN  ...)
@@ -48033,7 +48033,7 @@ CVE-2020-3417
 CVE-2020-3416
 	RESERVED
 CVE-2020-3415 (A vulnerability in the Data Management Engine (DME) of Cisco NX-OS Sof ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3414
 	RESERVED
 CVE-2020-3413 (A vulnerability in the scheduled meeting template feature of Cisco Web ...)
@@ -48067,15 +48067,15 @@ CVE-2020-3400
 CVE-2020-3399
 	RESERVED
 CVE-2020-3398 (A vulnerability in the Border Gateway Protocol (BGP) Multicast VPN (MV ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3397 (A vulnerability in the Border Gateway Protocol (BGP) Multicast VPN (MV ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3396
 	RESERVED
 CVE-2020-3395
 	RESERVED
 CVE-2020-3394 (A vulnerability in the Enable Secret feature of Cisco Nexus 3000 Serie ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3393
 	RESERVED
 CVE-2020-3392
@@ -48085,7 +48085,7 @@ CVE-2020-3391 (A vulnerability in Cisco Digital Network Architecture (DNA) Cente
 CVE-2020-3390
 	RESERVED
 CVE-2020-3389 (A vulnerability in the installation component of Cisco Hyperflex HX-Se ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3388 (A vulnerability in the CLI of Cisco SD-WAN vManage Software could allo ...)
 	NOT-FOR-US: Cisco
 CVE-2020-3387 (A vulnerability in Cisco SD-WAN vManage Software could allow an authen ...)
@@ -48194,7 +48194,7 @@ CVE-2020-3340 (Multiple vulnerabilities in the web-based management interface of
 CVE-2020-3339 (A vulnerability in the web-based management interface of Cisco Prime I ...)
 	NOT-FOR-US: Cisco
 CVE-2020-3338 (A vulnerability in the Protocol Independent Multicast (PIM) feature fo ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3337 (A vulnerability in the web server of Cisco Umbrella could allow an una ...)
 	NOT-FOR-US: Cisco
 CVE-2020-3336 (A vulnerability in the software upgrade process of Cisco TelePresence  ...)
@@ -48571,9 +48571,9 @@ CVE-2020-3154 (A vulnerability in the web UI of Cisco Cloud Web Security (CWS) c
 CVE-2020-3153 (A vulnerability in the installer component of Cisco AnyConnect Secure  ...)
 	NOT-FOR-US: Cisco
 CVE-2020-3152 (A vulnerability in Cisco Connected Mobile Experiences (CMX) could allo ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3151 (A vulnerability in the CLI of Cisco Connected Mobile Experiences (CMX) ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2020-3150 (A vulnerability in the web-based management interface of Cisco Small B ...)
 	NOT-FOR-US: Cisco
 CVE-2020-3149 (A vulnerability in the web-based management interface of Cisco Identit ...)