[Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue Aug 26 21:26:40 BST 2025
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
ac73cb1b by Salvatore Bonaccorso at 2025-08-26T22:26:17+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,5 +1,5 @@
CVE-2025-9491 (Microsoft Windows LNK File UI Misrepresentation Remote Code Execution ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2025-9483 (A flaw has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE700 ...)
NOT-FOR-US: Linksys
CVE-2025-9482 (A vulnerability was detected in Linksys RE6250, RE6300, RE6350, RE6500 ...)
@@ -10,11 +10,11 @@ CVE-2025-9478 (Use after free in ANGLE in Google Chrome prior to 139.0.7258.154
- chromium <unfixed>
[bullseye] - chromium <end-of-life> (see #1061268)
CVE-2025-9190 (The configuration of Cursor on macOS, specifically the "RunAsNode" fus ...)
- TODO: check
+ NOT-FOR-US: Cursor
CVE-2025-8700 (Invoice Ninja's configuration on macOS, specifically the presence of e ...)
- TODO: check
+ NOT-FOR-US: Invoice Ninja
CVE-2025-8597 (MacVim's configuration on macOS, specifically the presence of entitlem ...)
- TODO: check
+ NOT-FOR-US: MacVim
CVE-2025-8424 (Improper access control on the NetScaler Management Interface in NetSc ...)
NOT-FOR-US: Citrix
CVE-2025-7776 (Memory overflow vulnerability leading to unpredictable or erroneous be ...)
@@ -36,7 +36,7 @@ CVE-2025-57803 (ImageMagick is free and open-source software used for editing an
CVE-2025-57425 (A Stored Cross-Site Scripting (XSS) vulnerability in SourceCodester FA ...)
NOT-FOR-US: SourceCodester
CVE-2025-56432 (A cross-site scripting (XSS) vulnerability exists in Nagios XI 2024R2. ...)
- TODO: check
+ NOT-FOR-US: Nagios XI
CVE-2025-55526 (n8n-workflows Main Commit ee25413 allows attackers to execute a direct ...)
TODO: check
CVE-2025-55443 (Telpo MDM 1.4.6 thru 1.4.9 for Android contains sensitive administrato ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ac73cb1b9903344c36877f5731951a297f071fe7
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ac73cb1b9903344c36877f5731951a297f071fe7
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250826/48ac7b74/attachment.htm>
More information about the debian-security-tracker-commits
mailing list