Commit a7d09849 authored by Salvatore Bonaccorso's avatar Salvatore Bonaccorso
Browse files

Process some NFUs

parent c9b43c7a

data/CVE/list

+10 −10
Original line number Diff line number Diff line
@@ -18103,7 +18103,7 @@ CVE-2018-7749 (The SSH server implementation of AsyncSSH before 1.12.1 does not 
	- python-asyncssh 1.12.1-1 (bug #892787)

	NOTE: https://github.com/ronf/asyncssh/commit/16e6ebfa893167c7d9d3f6dc7a2c0d197e47f43a

CVE-2018-7748 (report_viewer.do in ServiceNow Release Jakarta Patch 8 and earlier ...)

	TODO: check

	NOT-FOR-US: ServiceNow

CVE-2018-7747 (Multiple cross-site scripting (XSS) vulnerabilities in the Caldera ...)

	NOT-FOR-US: Caldera Forms plugin for WordPress

CVE-2018-7746 (An issue was discovered in Western Bridge Cobub Razor 0.7.2. ...)
@@ -29397,7 +29397,7 @@ CVE-2018-3926 
CVE-2018-3925

	RESERVED

CVE-2018-3924 (An exploitable use-after-free vulnerability exists in the JavaScript ...)

	TODO: check

	NOT-FOR-US: Foxit PDF Reader

CVE-2018-3923 (A memory corruption vulnerability exists in the PCX-parsing ...)

	NOT-FOR-US: Computerinsel Photoline

CVE-2018-3922 (A memory corruption vulnerability exists in the ANI-parsing ...)
@@ -30022,7 +30022,7 @@ CVE-2018-3779 
CVE-2018-3778

	RESERVED

CVE-2018-3777 (Insufficient URI encoding in restforce before 3.0.0 allows attacker to ...)

	TODO: check

	NOT-FOR-US: restforce

CVE-2018-3776

	RESERVED

CVE-2018-3775
@@ -30030,7 +30030,7 @@ CVE-2018-3775 
CVE-2018-3774

	RESERVED

CVE-2018-3773 (There is a stored Cross-Site Scripting vulnerability in Open Graph ...)

	TODO: check

	NOT-FOR-US: metascrape nodejs module

CVE-2018-3772 (Concatenating unsanitized user input in the `whereis` npm module < ...)

	NOT-FOR-US: whereis nodejs module

CVE-2018-3771 (An XSS in statics-server <= 0.0.9 can be used via injected iframe in ...)
@@ -37561,9 +37561,9 @@ CVE-2018-1157 
CVE-2018-1156

	RESERVED

CVE-2018-1155 (In SecurityCenter versions prior to 5.7.0, a cross-site scripting ...)

	TODO: check

	NOT-FOR-US: SecurityCenter

CVE-2018-1154 (In SecurityCenter versions prior to 5.7.0, a username enumeration ...)

	TODO: check

	NOT-FOR-US: SecurityCenter

CVE-2018-1153 (Burp Suite Community Edition 1.7.32 and 1.7.33 fail to validate the ...)

	NOT-FOR-US: Burp Suite (different from src:burp)

CVE-2018-1152 (libjpeg-turbo 1.5.90 is vulnerable to a denial of service ...)
@@ -46363,7 +46363,7 @@ CVE-2017-15360 (PRTG Network Monitor version 17.3.33.2830 is vulnerable to store 
CVE-2017-15359 (In the 3CX Phone System 15.5.3554.1, the Management Console typically ...)

	NOT-FOR-US: 3CX Phone System

CVE-2017-15358 (Race condition in the Charles Proxy Settings suid binary in Charles ...)

	TODO: check

	NOT-FOR-US: Charles Proxy

CVE-2017-15357 (The setpermissions function in the auto-updater in Arq before 5.9.7 ...)

	NOT-FOR-US: Arq

CVE-2017-15356 (Huawei DP300, V500R002C00, RP200, V600R006C00, TE30, V100R001C10, ...)
@@ -74678,9 +74678,9 @@ CVE-2017-6217 
CVE-2017-6216

	RESERVED

CVE-2017-6215 (paypal/permissions-sdk-php is vulnerable to reflected XSS in the ...)

	TODO: check

	NOT-FOR-US: PayPal permissions-sdk-php

CVE-2017-6213 (paypal/invoice-sdk-php is vulnerable to reflected XSS in ...)

	TODO: check

	NOT-FOR-US: PayPal invoice-sdk-php

CVE-2017-6212

	REJECTED

CVE-2017-6211 (In Android for MSM, Firefox OS for MSM, QRD Android, with all Android ...)
@@ -76120,7 +76120,7 @@ CVE-2017-5694 (Data corruption vulnerability in firmware in Intel Solid-State Dr 
CVE-2017-5693 (Firmware in the Intel Puma 5, 6, and 7 Series might experience ...)

	NOT-FOR-US: Intel Puma

CVE-2017-5692 (Out-of-bounds read condition in older versions of some Intel Graphics ...)

	TODO: check

	NOT-FOR-US: Intel Graphics Driver for Windows

CVE-2017-5691 (Incorrect check in Intel processors from 6th and 7th Generation Intel ...)

	NOT-FOR-US: Intel CPUs

CVE-2017-5690