[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Dec 25 08:13:06 GMT 2025



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
71ba885a by security tracker role at 2025-12-25T08:12:58+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,43 @@
+CVE-2025-8769 (Telenium Online Web Application is vulnerable due to a Perl script tha ...)
+	TODO: check
+CVE-2025-68922 (OpenOps before 0.6.11 allows remote code execution in the Terraform bl ...)
+	TODO: check
+CVE-2025-68920 (C-Kermit (aka ckermit) through 10.0 Beta.12 (aka 416-beta12) before 24 ...)
+	TODO: check
+CVE-2025-68919 (Fujitsu / Fsas Technologies ETERNUS SF ACM/SC/Express (DX / AF Managem ...)
+	TODO: check
+CVE-2025-68917 (ONLYOFFICE Docs before 9.2.1 allows XSS in the textarea of the comment ...)
+	TODO: check
+CVE-2025-66443 (Pexip Infinity 35.0 through 38.1 before 39.0, in non-default configura ...)
+	TODO: check
+CVE-2025-66379 (Pexip Infinity before 39.0 has Improper Input Validation in the media  ...)
+	TODO: check
+CVE-2025-66378 (Pexip Infinity 38.0 and 38.1 before 39.0 has insufficient access contr ...)
+	TODO: check
+CVE-2025-66377 (Pexip Infinity before 39.0 has Missing Authentication for a Critical F ...)
+	TODO: check
+CVE-2025-59683 (Pexip Infinity 15.0 through 38.0 before 38.1 has Improper Access Contr ...)
+	TODO: check
+CVE-2025-49088 (Pexip Infinity 32.0 through 37.1 before 37.2, in certain configuration ...)
+	TODO: check
+CVE-2025-48704 (Pexip Infinity 35.0 through 37.2 before 38.0 has Improper Input Valida ...)
+	TODO: check
+CVE-2025-32096 (Pexip Infinity 33.0 through 37.0 before 37.1 has improper input valida ...)
+	TODO: check
+CVE-2025-32095 (Pexip Infinity before 37.0 has improper input validation in signalling ...)
+	TODO: check
+CVE-2025-15078 (A vulnerability was detected in itsourcecode Student Management System ...)
+	TODO: check
+CVE-2025-15077 (A security vulnerability has been detected in itsourcecode Student Man ...)
+	TODO: check
+CVE-2025-15076 (A weakness has been identified in Tenda CH22 1.0.0.1. Impacted is an u ...)
+	TODO: check
+CVE-2025-15075 (A security flaw has been discovered in itsourcecode Student Management ...)
+	TODO: check
+CVE-2025-15074 (A vulnerability was identified in itsourcecode Online Frozen Foods Ord ...)
+	TODO: check
+CVE-2025-15073 (A vulnerability was determined in itsourcecode Online Frozen Foods Ord ...)
+	TODO: check
 CVE-2025-68916 (Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsuplo ...)
 	NOT-FOR-US: Riello UPS NetMan 208 Application
 CVE-2025-68915 (Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/loginbann ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/71ba885af1b839e5e180d5e3756aa97872a99e5d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/71ba885af1b839e5e180d5e3756aa97872a99e5d
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251225/2ef64b6c/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list