[Git][security-tracker-team/security-tracker][master] NFUs

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f9997465 by Moritz Muehlenhoff at 2025-04-03T11:57:59+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -8,7 +8,7 @@ CVE-2025-3154 (Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by
 CVE-2025-3153 (Concrete CMS version 9 below 9.4.0RC2 and versions below 8.5.20 are vu ...)
 	NOT-FOR-US: Concrete CMS
 CVE-2025-3152 (A vulnerability classified as problematic has been found in caipeichao ...)
-	TODO: check
+	NOT-FOR-US: ThinkOX
 CVE-2025-3151 (A vulnerability was found in SourceCodester Gym Management System 1.0. ...)
 	NOT-FOR-US: SourceCodester
 CVE-2025-3150 (A vulnerability was found in itning Student Homework Management System ...)
@@ -50,7 +50,7 @@ CVE-2025-3130 (Improper Neutralization of Input During Web Page Generation ('Cro
 CVE-2025-3129 (Improper Restriction of Excessive Authentication Attempts vulnerabilit ...)
 	NOT-FOR-US: Drupal core and addons
 CVE-2025-3123 (A vulnerability, which was classified as critical, has been found in W ...)
-	TODO: check
+	NOT-FOR-US: WonderCMS
 CVE-2025-3122 (A vulnerability classified as problematic was found in WebAssembly wab ...)
 	TODO: check
 CVE-2025-3121 (A vulnerability classified as problematic has been found in PyTorch 2. ...)
@@ -66,15 +66,15 @@ CVE-2025-31484 (conda-forge infrastructure holds common configurations and setti
 CVE-2025-31479 (canonical/get-workflow-version-action is a GitHub composite action to  ...)
 	NOT-FOR-US: canonical/get-workflow-version-action GitHub action
 CVE-2025-31477 (The Tauri shell plugin allows access to the system shell. Prior to 2.2 ...)
-	TODO: check
+	NOT-FOR-US: Tauri plugin
 CVE-2025-31334 (Issue that bypasses the "Mark of the Web" security warning function fo ...)
 	TODO: check
 CVE-2025-30485 (UNIX symbolic link (Symlink) following issue exists in FutureNet NXR s ...)
-	TODO: check
+	NOT-FOR-US: FutureNet devices
 CVE-2025-30218 (Next.js is a React framework for building full-stack web applications. ...)
-	TODO: check
+	NOT-FOR-US: Next.js
 CVE-2025-30080 (Signalling in Pexip Infinity 29 through 36.2 before 37.0 has improper  ...)
-	TODO: check
+	NOT-FOR-US: Pexip Infinity
 CVE-2025-2874 (The User Submitted Posts \u2013 Enable Users to Submit Posts from the  ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2025-2784 (A flaw was found in libsoup. The package is vulnerable to a heap buffe ...)
@@ -199,7 +199,7 @@ CVE-2025-20120 (A vulnerability in the web-based management interface of Cisco E
 CVE-2025-0154 (IBM TXSeries for Multiplatforms 9.1 and 11.1 could disclose sensitive  ...)
 	NOT-FOR-US: IBM
 CVE-2025-0014 (Incorrect default permissions on the AMD Ryzen(TM) AI installation fol ...)
-	TODO: check
+	NOT-FOR-US: AMD
 CVE-2024-56476 (IBM TXSeries for Multiplatforms 9.1 and 11.1 could allow an attacker t ...)
 	NOT-FOR-US: IBM
 CVE-2024-56475 (IBM TXSeries for Multiplatforms 9.1 and 11.1is vulnerable to cross-sit ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f9997465b33da6e9717906b08d8d801c268049a5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f9997465b33da6e9717906b08d8d801c268049a5
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250403/bc981472/attachment.htm>