From 1c5290904df1bc301a6a7e29d1bbedb013300530 Mon Sep 17 00:00:00 2001 From: Moritz Muehlenhoff Date: Mon, 19 Oct 2020 16:34:25 +0200 Subject: NFUs --- data/CVE/list.2019 | 10 +++++----- data/CVE/list.2020 | 2 +- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/data/CVE/list.2019 b/data/CVE/list.2019 index da99914283..0bc99445f7 100644 --- a/data/CVE/list.2019 +++ b/data/CVE/list.2019 @@ -2684,7 +2684,7 @@ CVE-2019-19886 (Trustwave ModSecurity 3.0.0 through 3.0.3 allows an attacker to NOTE: https://github.com/SpiderLabs/ModSecurity/pull/2202 NOTE: https://github.com/SpiderLabs/ModSecurity/commit/7ba77631f9a37e0680d23ee57c455c6a35c65cb9 CVE-2019-19885 (In Bender COMTRAXX, user authorization is validated for most, but not ...) - TODO: check + NOT-FOR-US: Bender COMTRAXX CVE-2019-19884 RESERVED CVE-2019-19883 @@ -3763,7 +3763,7 @@ CVE-2019-19515 (Ayision Ays-WR01 v28K.RPT.20161224 devices allow stored XSS in w CVE-2019-19514 (Ayision Ays-WR01 v28K.RPT.20161224 devices allow stored XSS in basic r ...) NOT-FOR-US: Ayision CVE-2019-19513 (The BASSMIDI plugin 2.4.12.1 for Un4seen BASS Audio Library on Windows ...) - TODO: check + NOT-FOR-US: BASS Audio Library CVE-2019-19512 RESERVED CVE-2019-19511 @@ -5702,11 +5702,11 @@ CVE-2019-18797 (LibSass 3.6.1 has uncontrolled recursion in Sass::Eval::operator [stretch] - libsass (Minor issue) NOTE: https://github.com/sass/libsass/issues/3000 CVE-2019-18796 (The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamC ...) - TODO: check + NOT-FOR-US: BASS Audio Library CVE-2019-18795 (The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamC ...) - TODO: check + NOT-FOR-US: BASS Audio Library CVE-2019-18794 (The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamC ...) - TODO: check + NOT-FOR-US: BASS Audio Library CVE-2019-18793 (Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR/help/inde ...) NOT-FOR-US: Parallels Plesk Panel CVE-2019-18792 (An issue was discovered in Suricata 5.0.0. It is possible to bypass/ev ...) diff --git a/data/CVE/list.2020 b/data/CVE/list.2020 index 0e0c6cfd20..81d7b0aa06 100644 --- a/data/CVE/list.2020 +++ b/data/CVE/list.2020 @@ -43395,7 +43395,7 @@ CVE-2020-7746 CVE-2020-7745 RESERVED CVE-2020-7744 (This affects all versions of package com.mintegral.msdk:alphab. The An ...) - TODO: check + NOT-FOR-US: com.mintegral.msdk:alphab CVE-2020-7743 (The package mathjs before 7.5.1 are vulnerable to Prototype Pollution ...) NOT-FOR-US: Node mathjs CVE-2020-7742 (This affects the package simpl-schema before 1.10.2. ...) -- cgit v1.2.3