From ee93670f4aeb0936668636bda0bdcff8978bea82 Mon Sep 17 00:00:00 2001
From: Salvatore Bonaccorso <carnil@debian.org>
Date: Tue, 23 Feb 2021 09:17:47 +0100
Subject: Process some NFUs

---
 data/CVE/2020.list | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

(limited to 'data/CVE/2020.list')

diff --git a/data/CVE/2020.list b/data/CVE/2020.list
index d2c45d4d78..805f3f6e5e 100644
--- a/data/CVE/2020.list
+++ b/data/CVE/2020.list
@@ -51,7 +51,7 @@ CVE-2020-36234 (Affected versions of Atlassian Jira Server and Data Center allow
 CVE-2020-36233 (The Microsoft Windows Installer for Atlassian Bitbucket Server and Dat ...)
 	NOT-FOR-US: Atlassian
 CVE-2020-36232 (The MessageBundleWhiteList class of atlassian-gadgets before version 4 ...)
-	TODO: check
+	NOT-FOR-US: Atlassian
 CVE-2020-36231 (Affected versions of Atlassian Jira Server and Data Center allow remot ...)
 	NOT-FOR-US: Atlassian
 CVE-2020-36230 (A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertio ...)
@@ -958,7 +958,7 @@ CVE-2020-35854 (Textpattern 4.8.4 is affected by cross-site scripting (XSS) in t
 CVE-2020-35853 (4images Image Gallery Management System 1.7.11 is affected by cross-si ...)
 	NOT-FOR-US: 4images Image Gallery Management System
 CVE-2020-35852 (Chatbox is affected by cross-site scripting (XSS). An attacker has to  ...)
-	TODO: check
+	NOT-FOR-US: Chatbox
 CVE-2020-35851 (HGiga MailSherlock does not validate specific parameters properly. Att ...)
 	NOT-FOR-US: HGiga MailSherlock
 CVE-2020-35850 (** DISPUTED ** An SSRF issue was discovered in cockpit-project.org Coc ...)
@@ -4151,7 +4151,7 @@ CVE-2020-29077
 CVE-2020-29076
 	RESERVED
 CVE-2020-29075 (Acrobat Reader DC versions 2020.013.20066 (and earlier), 2020.001.3001 ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2020-29074 (scan.c in x11vnc 0.9.16 uses IPC_CREAT|0777 in shmget calls, which all ...)
 	{DSA-4799-1 DLA-2490-1}
 	- x11vnc 0.9.16-5 (bug #975875)
@@ -18929,7 +18929,7 @@ CVE-2020-22476
 CVE-2020-22475 ("Tasks" application version before 9.7.3 is affected by insecure permi ...)
 	TODO: check
 CVE-2020-22474 (In webERP 4.15, the ManualContents.php file allows users to specify th ...)
-	TODO: check
+	NOT-FOR-US: webERP
 CVE-2020-22473
 	RESERVED
 CVE-2020-22472
@@ -21434,7 +21434,7 @@ CVE-2020-21226
 CVE-2020-21225
 	RESERVED
 CVE-2020-21224 (A Remote Code Execution vulnerability has been found in Inspur Cluster ...)
-	TODO: check
+	NOT-FOR-US: Inspur ClusterEngine
 CVE-2020-21223
 	RESERVED
 CVE-2020-21222
@@ -24366,7 +24366,7 @@ CVE-2020-19764
 CVE-2020-19763
 	RESERVED
 CVE-2020-19762 (Automated Logic Corporation (ALC) WebCTRL System 6.5 and prior allows  ...)
-	TODO: check
+	NOT-FOR-US: Automated Logic Corporation (ALC) WebCTRL System
 CVE-2020-19761
 	RESERVED
 CVE-2020-19760
-- 
cgit v1.2.3