NFUs

doom commit refs

4 files changed, 13 insertions, 11 deletions

diff --git a/data/CVE/list.2017 b/data/CVE/list.2017
index a7a1e4ca62..7569142cab 100644
--- a/data/CVE/list.2017
+++ b/data/CVE/list.2017
@@ -48196,7 +48196,7 @@ CVE-2017-1714 (IBM Notes and Domino NSD 8.5 and 9.0 could allow an authenticated
 CVE-2017-1713 (IBM InfoSphere Streams 4.2.1 uses weaker than expected cryptographic a ...)
 	NOT-FOR-US: IBM
 CVE-2017-1712 ("A vulnerability in the TLS protocol implementation of the Domino serv ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2017-1711 (IBM iNotes 8.5 and 9.0 SUService can be misguided into running malicio ...)
 	NOT-FOR-US: IBM iNotes
 CVE-2017-1710 (A vulnerability in the Service Assistant GUI in IBM Storwize V7000 (20 ...)
diff --git a/data/CVE/list.2018 b/data/CVE/list.2018
index b73ab0b6d0..3d68c1cfac 100644
--- a/data/CVE/list.2018
+++ b/data/CVE/list.2018
@@ -39347,7 +39347,7 @@ CVE-2018-6448
 CVE-2018-6447
 	RESERVED
 CVE-2018-6446 (A vulnerability in Brocade Network Advisor Version Before 14.3.1 could ...)
-	TODO: check
+	NOT-FOR-US: Brocade
 CVE-2018-6445 (A Vulnerability in Brocade Network Advisor versions before 14.0.3 coul ...)
 	NOT-FOR-US: Brocade
 CVE-2018-6444 (A Vulnerability in Brocade Network Advisor versions before 14.1.0 coul ...)
diff --git a/data/CVE/list.2019 b/data/CVE/list.2019
index 5ea99c9151..87c372eeb5 100644
--- a/data/CVE/list.2019
+++ b/data/CVE/list.2019
@@ -34469,13 +34469,13 @@ CVE-2019-8254 (Adobe Photoshop CC versions before 20.0.8 and 21.0.x before 21.0.
 CVE-2019-8253 (Adobe Photoshop CC versions before 20.0.8 and 21.0.x before 21.0.2 hav ...)
 	NOT-FOR-US: Adobe
 CVE-2019-8252 (Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012 ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2019-8251 (Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012 ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2019-8250 (Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012 ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2019-8249 (Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012 ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2019-8248 (Adobe Illustrator CC versions 23.1 and earlier have a memory corruptio ...)
 	NOT-FOR-US: Adobe
 CVE-2019-8247 (Adobe Illustrator CC versions 23.1 and earlier have a memory corruptio ...)
@@ -34841,7 +34841,7 @@ CVE-2019-8068
 CVE-2019-8067
 	RESERVED
 CVE-2019-8066 (Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012 ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2019-8065
 	RESERVED
 CVE-2019-8064 (Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.0 ...)
@@ -43549,9 +43549,9 @@ CVE-2019-4326
 CVE-2019-4325
 	RESERVED
 CVE-2019-4324 ("HCL AppScan Enterprise is susceptible to Cross-Site Scripting while i ...)
-	TODO: check
+	NOT-FOR-US: HCL
 CVE-2019-4323 ("HCL AppScan Enterprise advisory API documentation is susceptible to c ...)
-	TODO: check
+	NOT-FOR-US: HCL
 CVE-2019-4322 (IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, ...)
 	NOT-FOR-US: IBM
 CVE-2019-4321 (IBM Intelligent Operations Center V5.1.0 - V5.2.0, IBM Intelligent Ope ...)
diff --git a/data/CVE/list.2020 b/data/CVE/list.2020
index acca257404..7e314b1480 100644
--- a/data/CVE/list.2020
+++ b/data/CVE/list.2020
@@ -1418,6 +1418,8 @@ CVE-2020-14983 (The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't
 	[stretch] - chocolate-doom <no-dsa> (Minor issue)
 	[jessie] - chocolate-doom <end-of-life> (games are not supported)
 	NOTE: https://github.com/chocolate-doom/chocolate-doom/issues/1293
+	NOTE: https://github.com/chocolate-doom/chocolate-doom/commit/8b6cfbfc6c934923b3c2c16e5e7e5a74d5d238e1
+	NOTE: https://github.com/fabiangreffrath/crispy-doom/commit/8b6cfbfc6c934923b3c2c16e5e7e5a74d5d238e1
 CVE-2020-14982
 	RESERVED
 CVE-2020-14981 (The ThreatTrack VIPRE Password Vault app through 1.100.1090 for iOS ha ...)
@@ -20024,7 +20026,7 @@ CVE-2020-7012 (Kibana versions 6.7.0 to 6.8.8 and 7.0.0 to 7.6.2 contain a proto
 CVE-2020-7011 (Elastic App Search versions before 7.7.0 contain a cross site scriptin ...)
 	- elasticsearch <removed>
 CVE-2020-7010 (Elastic Cloud on Kubernetes (ECK) versions prior to 1.1.0 generate pas ...)
-	TODO: check
+	NOT-FOR-US: Elastic Cloud
 CVE-2020-7009 (Elasticsearch versions from 6.7.0 before 6.8.8 and 7.0.0 before 7.6.2  ...)
 	- elasticsearch <removed>
 CVE-2020-7008 (VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may al ...)
@@ -20683,7 +20685,7 @@ CVE-2020-6754 (dotCMS before 5.2.4 is vulnerable to directory traversal, leading
 CVE-2020-6753 (The Login by Auth0 plugin before 4.0.0 for WordPress allows stored XSS ...)
 	NOT-FOR-US: Login by Auth0 plugin for WordPress
 CVE-2020-6752 (In OMERO before 5.6.1, group owners can access members' data in other  ...)
-	TODO: check
+	NOT-FOR-US: OMERO
 CVE-2020-6751
 	RESERVED
 CVE-2020-6750 (GSocketClient in GNOME GLib through 2.62.4 may occasionally connect di ...)