data/CVE/list

@@ -20675,8 +20675,8 @@ CVE-2018-8037 (If an async request was completed by the application at the same
 	{DSA-4281-1}
 	- tomcat9 <itp> (bug #802312)
 	- tomcat8 8.5.32-1
-	- tomcat8.0 <not-affected> (Vulnerable code only present in 8.5.5 to 8.5.31 in 8.x series)
 	[jessie] - tomcat8 <not-affected> (vulnerable code only present in 8.5.5 to 8.5.31 in 8.x series)
+	- tomcat8.0 <not-affected> (Vulnerable code only present in 8.5.5 to 8.5.31 in 8.x series)
 	NOTE: https://svn.apache.org/r1833906 (9.0.x)
 	NOTE: https://svn.apache.org/r1833907 (8.5.x)
 CVE-2018-8036 (In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully ...)
@@ -226699,8 +226699,9 @@ CVE-2011-0707 (Multiple cross-site scripting (XSS) vulnerabilities in Cgi/confir
 CVE-2011-0706 (The JNLPClassLoader class in IcedTea-Web before 1.0.1, as used in ...)
 	{DSA-2224-1}
 	- openjdk-6 6b18-1.8.7-1
-CVE-2011-0705
+CVE-2011-0705 [path traversal in SimpleHTTPServer]
 	RESERVED
+	NOTE: Will be rejected
 CVE-2011-0704 (389 Directory Server 1.2.7.5, when built with mozldap, allows remote ...)
 	NOT-FOR-US: 389 Directory Server
 CVE-2011-0703