[Git][security-tracker-team/security-tracker][master] NFUs

Wed Apr 2 09:46:03 BST 2025


Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8145f15a by Moritz Muehlenhoff at 2025-04-02T10:45:37+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -23,7 +23,7 @@ CVE-2025-31571 (Improper Neutralization of Input During Web Page Generation ('Cr
 CVE-2025-31568 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31564 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31563 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31561 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
@@ -49,7 +49,7 @@ CVE-2025-31531 (Improper Neutralization of Special Elements used in an SQL Comma
 CVE-2025-31525 (Missing Authorization vulnerability in WP Messiah WP Mobile Bottom Men ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31462 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31461 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31455 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
@@ -67,9 +67,9 @@ CVE-2025-31431 (Improper Neutralization of Input During Web Page Generation ('Cr
 CVE-2025-31135 (Go-Guerrilla SMTP Daemon is a lightweight SMTP server written in Go. P ...)
 	TODO: check
 CVE-2025-31097 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
-	TODO: check
+	NOT-FOR-US: ho3einie Material Dashboard
 CVE-2025-31089 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31086 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31085 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
@@ -105,11 +105,11 @@ CVE-2025-30807 (Improper Neutralization of Special Elements used in an SQL Comma
 CVE-2025-30778 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-30580 (Improper Control of Generation of Code ('Code Injection') vulnerabilit ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-30554 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-30356 (CryptoLib provides a software-only solution using the CCSDS Space Data ...)
-	TODO: check
+	NOT-FOR-US: NASA CryptoLib
 CVE-2025-2779 (The Insert Headers and Footers Code \u2013 HT Script plugin for WordPr ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2025-29982 (Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Ins ...)
@@ -121,9 +121,9 @@ CVE-2025-29070 (A heap buffer overflow vulnerability has been identified in thes
 CVE-2025-29049 (Cross Site Scripting vulnerability in arnog MathLive Versions v0.103.0 ...)
 	TODO: check
 CVE-2025-29036 (An issue in hackathon-starter v.8.1.0 allows a remote attacker to esca ...)
-	TODO: check
+	NOT-FOR-US: hackathon-starter
 CVE-2025-29033 (An issue in BambooHR Build v.25.0210.170831-83b08dd allows a remote at ...)
-	TODO: check
+	NOT-FOR-US: BambooHR
 CVE-2025-27694 (Dell Wyse Management Suite, versions prior to  WMS 5.1, contains an In ...)
 	NOT-FOR-US: Dell / EMC
 CVE-2025-27693 (Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Imp ...)
@@ -131,9 +131,9 @@ CVE-2025-27693 (Dell Wyse Management Suite, versions prior to WMS 5.1, contains
 CVE-2025-27692 (Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Unr ...)
 	NOT-FOR-US: Dell / EMC
 CVE-2025-27244 (AssetView and AssetView CLOUD contain an issue with acquiring sensitiv ...)
-	TODO: check
+	NOT-FOR-US: Hammock Corporation AssetView
 CVE-2025-25060 (Missing authentication for critical function vulnerability exists in A ...)
-	TODO: check
+	NOT-FOR-US: Hammock Corporation AssetView
 CVE-2025-0676 (This vulnerability involves command injection in tcpdump within Moxa p ...)
 	TODO: check
 CVE-2025-0415 (A remote attacker with web administrator privileges can exploit the de ...)
@@ -153,9 +153,9 @@ CVE-2024-36465 (A low privilege (regular) Zabbix user with API access can use SQ
 CVE-2024-13941 (A vulnerability was found in ouch-org ouch up to 0.3.1. It has been cl ...)
 	TODO: check
 CVE-2023-46988 (Directory Traversal vulnerability in ONLYOFFICE Document Server v.7.5. ...)
-	TODO: check
+	NOT-FOR-US: ONLYOFFICE
 CVE-2003-20001 (An issue was discovered on Mitel ICP VoIP 3100 devices. When a remote  ...)
-	TODO: check
+	NOT-FOR-US: Mitel
 CVE-2025-3074 (Inappropriate implementation in Downloads in Google Chrome prior to 13 ...)
 	- chromium <unfixed>
 	[bullseye] - chromium <end-of-life> (see #1061268)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8145f15a55984c3672dbbca4d1120568745ca0db

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8145f15a55984c3672dbbca4d1120568745ca0db
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250402/ae4cdc9d/attachment.htm>
