[Git][security-tracker-team/security-tracker][master] NFUs

Thu Apr 3 09:26:11 BST 2025


Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ccdd41a3 by Moritz Muehlenhoff at 2025-04-03T10:25:54+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,25 +1,25 @@
 CVE-2025-3154 (Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an in ...)
 	TODO: check
 CVE-2025-3153 (Concrete CMS version 9 below 9.4.0RC2 and versions below 8.5.20 are vu ...)
-	TODO: check
+	NOT-FOR-US: Concrete CMS
 CVE-2025-3152 (A vulnerability classified as problematic has been found in caipeichao ...)
 	TODO: check
 CVE-2025-3151 (A vulnerability was found in SourceCodester Gym Management System 1.0. ...)
 	NOT-FOR-US: SourceCodester
 CVE-2025-3150 (A vulnerability was found in itning Student Homework Management System ...)
-	TODO: check
+	NOT-FOR-US: itning Student Homework Management System
 CVE-2025-3149 (A vulnerability was found in itning Student Homework Management System ...)
-	TODO: check
+	NOT-FOR-US: itning Student Homework Management System
 CVE-2025-3148 (A vulnerability was found in codeprojects Product Management System 1. ...)
-	TODO: check
+	NOT-FOR-US: codeprojects Product Management System
 CVE-2025-3147 (A vulnerability has been found in PHPGurukul Boat Booking System 1.0 a ...)
 	NOT-FOR-US: PHPGurukul
 CVE-2025-3146 (A vulnerability, which was classified as critical, was found in PHPGur ...)
 	NOT-FOR-US: PHPGurukul
 CVE-2025-3145 (A vulnerability, which was classified as problematic, has been found i ...)
-	TODO: check
+	NOT-FOR-US: MindSpore
 CVE-2025-3144 (A vulnerability classified as problematic was found in MindSpore 2.5.0 ...)
-	TODO: check
+	NOT-FOR-US: MindSpore
 CVE-2025-3143 (A vulnerability classified as critical has been found in SourceCodeste ...)
 	NOT-FOR-US: SourceCodester
 CVE-2025-3142 (A vulnerability was found in SourceCodester Apartment Visitor Manageme ...)
@@ -37,7 +37,7 @@ CVE-2025-3137 (A vulnerability, which was classified as critical, was found in P
 CVE-2025-3136 (A vulnerability, which was classified as problematic, has been found i ...)
 	TODO: check
 CVE-2025-3135 (A vulnerability classified as critical was found in fcba_zzm ics-park  ...)
-	TODO: check
+	NOT-FOR-US: Smart Park Management System
 CVE-2025-3134 (A vulnerability classified as critical has been found in code-projects ...)
 	NOT-FOR-US: code-projects
 CVE-2025-3130 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
@@ -57,9 +57,9 @@ CVE-2025-3119 (A vulnerability was found in SourceCodester Online Tutor Portal 1
 CVE-2025-3118 (A vulnerability was found in SourceCodester Online Tutor Portal 1.0. I ...)
 	NOT-FOR-US: SourceCodester
 CVE-2025-31484 (conda-forge infrastructure holds common configurations and settings fo ...)
-	TODO: check
+	NOT-FOR-US: conda-forge
 CVE-2025-31479 (canonical/get-workflow-version-action is a GitHub composite action to  ...)
-	TODO: check
+	NOT-FOR-US: canonical/get-workflow-version-action GitHub action
 CVE-2025-31477 (The Tauri shell plugin allows access to the system shell. Prior to 2.2 ...)
 	TODO: check
 CVE-2025-31334 (Issue that bypasses the "Mark of the Web" security warning function fo ...)
@@ -77,23 +77,23 @@ CVE-2025-2784 (A flaw was found in libsoup. The package is vulnerable to a heap
 CVE-2025-2055 (The MapPress Maps for WordPress plugin before 2.94.9 does not sanitise ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2025-29991 (Yubico YubiKey 5.4.1 through 5.7.3 before 5.7.4 has an incorrect FIDO  ...)
-	TODO: check
+	NOT-FOR-US: Yubico
 CVE-2025-29719 (SourceCodester (rems) Employee Management System 1.0 is vulnerable to  ...)
 	NOT-FOR-US: SourceCodester
 CVE-2025-29085 (SQL injection vulnerability in vipshop Saturn v.3.5.1 and before allow ...)
-	TODO: check
+	NOT-FOR-US: vipshop Saturn
 CVE-2025-29063 (An issue in BL-AC2100 V1.0.4 and before allows a remote attacker to ex ...)
-	TODO: check
+	NOT-FOR-US: BL-AC2100
 CVE-2025-29062 (An issue in BL-AC2100 <=V1.0.4 allows a remote attacker to execute arb ...)
-	TODO: check
+	NOT-FOR-US: BL-AC2100
 CVE-2025-27608 (Arduino IDE 2.x is an IDE based on the Theia IDE framework and built w ...)
-	TODO: check
+	NOT-FOR-US: Arduino IDE
 CVE-2025-22925 (OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection v ...)
-	TODO: check
+	NOT-FOR-US: OS4ED openSIS
 CVE-2025-22924 (OS4ED openSIS v7.0 through v9.1 contains a SQL injection vulnerability ...)
-	TODO: check
+	NOT-FOR-US: OS4ED openSIS
 CVE-2025-22923 (An issue in OS4ED openSIS v8.0 through v9.1 allows attackers to execut ...)
-	TODO: check
+	NOT-FOR-US: OS4ED openSIS
 CVE-2025-22007 (In the Linux kernel, the following vulnerability has been resolved:  B ...)
 	TODO: check
 CVE-2025-22006 (In the Linux kernel, the following vulnerability has been resolved:  n ...)
@@ -125,9 +125,9 @@ CVE-2025-1663 (The Unlimited Elements For Elementor plugin for WordPress is vuln
 CVE-2025-0257 (HCL DevOps Deploy / HCL Launch could allow unauthorized access to othe ...)
 	NOT-FOR-US: HCL
 CVE-2024-38392 (Pexip Infinity Connect before 1.13.0 lacks sufficient authenticity che ...)
-	TODO: check
+	NOT-FOR-US: Pexip Infinity
 CVE-2024-37917 (Pexip Infinity before 35.0 has improper input validation that allows r ...)
-	TODO: check
+	NOT-FOR-US: Pexip Infinity
 CVE-2024-13673 (The Big Boom Directory plugin for WordPress is vulnerable to Stored Cr ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2024-53868



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ccdd41a31aa281c7f0e0726d8cd6f904323a8421

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ccdd41a31aa281c7f0e0726d8cd6f904323a8421
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250403/5e4dff86/attachment.htm>
