[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
94c46995 by Salvatore Bonaccorso at 2025-08-27T10:27:40+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,7 +1,7 @@
 CVE-2025-9514 (A vulnerability has been found in macrozheng mall up to 1.0.3. This im ...)
-	TODO: check
+	NOT-FOR-US: macrozheng mall
 CVE-2025-9513 (A flaw has been found in editso fuso up to 1.0.4-beta.7. This affects  ...)
-	TODO: check
+	NOT-FOR-US: editso fuso
 CVE-2025-9511 (A vulnerability was identified in itsourcecode Apartment Management Sy ...)
 	NOT-FOR-US: itsourcecode System
 CVE-2025-9510 (A security vulnerability has been detected in itsourcecode Apartment M ...)
@@ -35,7 +35,7 @@ CVE-2025-57846 (Multiple i-\u30d5\u30a3\u30eb\u30bf\u30fc products contain an is
 CVE-2025-57820 (Svelte devalue is a utility library. Prior to version 5.3.2, a string  ...)
 	TODO: check
 CVE-2025-57797 (Incorrect privilege assignment vulnerability exists in ScanSnap Manage ...)
-	TODO: check
+	NOT-FOR-US: ScanSnap Manager installers
 CVE-2025-49040 (Cross-Site Request Forgery (CSRF) vulnerability in Backup Bolt allows  ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-49039 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
@@ -45,13 +45,13 @@ CVE-2025-49035 (Improper Neutralization of Input During Web Page Generation ('Cr
 CVE-2025-48081 (Path Traversal: '.../...//' vulnerability in Printeers Printeers Print ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-35115 (Agiloft Release 28 downloads critical system packages over an insecure ...)
-	TODO: check
+	NOT-FOR-US: Agiloft
 CVE-2025-35114 (Agiloft Release 28 contains several accounts with default credentials  ...)
-	TODO: check
+	NOT-FOR-US: Agiloft
 CVE-2025-35113 (Agiloft Release 28 does not properly neutralize special elements used  ...)
-	TODO: check
+	NOT-FOR-US: Agiloft
 CVE-2025-35112 (Agiloft Release 28 contains an XML External Entities vulnerability in  ...)
-	TODO: check
+	NOT-FOR-US: Agiloft
 CVE-2025-26417 (In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is  ...)
 	TODO: check
 CVE-2025-22413 (In multiple functions of hyp-main.c, there is a possible privilege esc ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/94c46995ef01a0014f7b19e104aa2635ac68d002

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/94c46995ef01a0014f7b19e104aa2635ac68d002
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250827/cfd0f530/attachment.htm>