[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Jul 1 09:13:03 BST 2025 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c1f70031 by security tracker role at 2025-07-01T08:12:50+00:00
automatic NOT-FOR-US entries update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3,23 +3,23 @@ CVE-2025-6940 (A vulnerability classified as critical was found in TOTOLINK A702
 CVE-2025-6939 (A vulnerability classified as critical has been found in TOTOLINK A300 ...)
 	TODO: check
 CVE-2025-6938 (A vulnerability was found in code-projects Simple Pizza Ordering Syste ...)
-	TODO: check
+	NOT-FOR-US: code-projects
 CVE-2025-6937 (A vulnerability was found in code-projects Simple Pizza Ordering Syste ...)
-	TODO: check
+	NOT-FOR-US: code-projects
 CVE-2025-6936 (A vulnerability was found in code-projects Simple Pizza Ordering Syste ...)
-	TODO: check
+	NOT-FOR-US: code-projects
 CVE-2025-6935 (A vulnerability was found in Campcodes Sales and Inventory System 1.0  ...)
-	TODO: check
+	NOT-FOR-US: Campcodes
 CVE-2025-6934 (The Opal Estate Pro \u2013 Property Management and Submission plugin f ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-6932 (A vulnerability, which was classified as problematic, was found in D-L ...)
-	TODO: check
+	NOT-FOR-US: D-Link
 CVE-2025-6931 (A vulnerability classified as problematic was found in D-Link DCS-6517 ...)
-	TODO: check
+	NOT-FOR-US: D-Link
 CVE-2025-6930 (A vulnerability classified as critical has been found in PHPGurukul Zo ...)
-	TODO: check
+	NOT-FOR-US: PHPGurukul
 CVE-2025-6929 (A vulnerability was found in PHPGurukul Zoo Management System 2.1. It  ...)
-	TODO: check
+	NOT-FOR-US: PHPGurukul
 CVE-2025-6925 (A vulnerability has been found in Dromara RuoYi-Vue-Plus 5.4.0 and cla ...)
 	TODO: check
 CVE-2025-6917 (A vulnerability has been found in code-projects Online Hotel Booking 1 ...)
@@ -27,39 +27,39 @@ CVE-2025-6917 (A vulnerability has been found in code-projects Online Hotel Book
 CVE-2025-6916 (A vulnerability, which was classified as critical, was found in TOTOLI ...)
 	TODO: check
 CVE-2025-6915 (A vulnerability, which was classified as critical, has been found in P ...)
-	TODO: check
+	NOT-FOR-US: PHPGurukul
 CVE-2025-6914 (A vulnerability classified as critical was found in PHPGurukul Student ...)
-	TODO: check
+	NOT-FOR-US: PHPGurukul
 CVE-2025-6913 (A vulnerability classified as critical has been found in PHPGurukul St ...)
-	TODO: check
+	NOT-FOR-US: PHPGurukul
 CVE-2025-6912 (A vulnerability was found in PHPGurukul Student Record System 3.2. It  ...)
-	TODO: check
+	NOT-FOR-US: PHPGurukul
 CVE-2025-6911 (A vulnerability was found in PHPGurukul Student Record System 3.2. It  ...)
-	TODO: check
+	NOT-FOR-US: PHPGurukul
 CVE-2025-6910 (A vulnerability was found in PHPGurukul Student Record System 3.2. It  ...)
-	TODO: check
+	NOT-FOR-US: PHPGurukul
 CVE-2025-6909 (A vulnerability has been found in PHPGurukul Old Age Home Management S ...)
-	TODO: check
+	NOT-FOR-US: PHPGurukul
 CVE-2025-6908 (A vulnerability, which was classified as critical, was found in PHPGur ...)
-	TODO: check
+	NOT-FOR-US: PHPGurukul
 CVE-2025-6907 (A vulnerability classified as critical was found in code-projects Car  ...)
-	TODO: check
+	NOT-FOR-US: code-projects
 CVE-2025-6906 (A vulnerability classified as critical has been found in code-projects ...)
-	TODO: check
+	NOT-FOR-US: code-projects
 CVE-2025-6905 (A vulnerability, which was classified as critical, has been found in c ...)
-	TODO: check
+	NOT-FOR-US: code-projects
 CVE-2025-6904 (A vulnerability was found in code-projects Car Rental System 1.0. It h ...)
-	TODO: check
+	NOT-FOR-US: code-projects
 CVE-2025-6903 (A vulnerability was found in code-projects Car Rental System 1.0. It h ...)
-	TODO: check
+	NOT-FOR-US: code-projects
 CVE-2025-6902 (A vulnerability was found in code-projects Inventory Management System ...)
-	TODO: check
+	NOT-FOR-US: code-projects
 CVE-2025-6901 (A vulnerability was found in code-projects Inventory Management System ...)
-	TODO: check
+	NOT-FOR-US: code-projects
 CVE-2025-6900 (A vulnerability has been found in code-projects Library System 1.0 and ...)
-	TODO: check
+	NOT-FOR-US: code-projects
 CVE-2025-6899 (A vulnerability, which was classified as critical, was found in D-Link ...)
-	TODO: check
+	NOT-FOR-US: D-Link
 CVE-2025-6081 (Insufficiently Protected Credentials in LDAP in Konica Minoltabizhub 2 ...)
 	TODO: check
 CVE-2025-5967 (A stored cross-site scripting vulnerability in ENS HX 10.0.4 allows a  ...)
@@ -67,7 +67,7 @@ CVE-2025-5967 (A stored cross-site scripting vulnerability in ENS HX 10.0.4 allo
 CVE-2025-53416
 	REJECTED
 CVE-2025-53415 (Delta Electronics DTM SoftProject File Parsing Deserialization of Untr ...)
-	TODO: check
+	NOT-FOR-US: Delta Electronics
 CVE-2025-53096 (Sunshine is a self-hosted game stream host for Moonlight. Prior to ver ...)
 	TODO: check
 CVE-2025-53095 (Sunshine is a self-hosted game stream host for Moonlight. Prior to ver ...)
@@ -99,7 +99,7 @@ CVE-2025-52895 (Frappe is a full-stack web application framework. Prior to versi
 CVE-2025-52491 (Akamai CloudTest before 60 2025.06.09 (12989) allows SSRF.)
 	TODO: check
 CVE-2025-4407 (Insufficient Session Expiration vulnerability in ABB Lite Panel Pro.Th ...)
-	TODO: check
+	NOT-FOR-US: ABB group
 CVE-2025-49521 (A flaw was found in the EDA component of the Ansible Automation Platfo ...)
 	TODO: check
 CVE-2025-49520 (A flaw was found in Ansible Automation Platform\u2019s EDA component w ...)
@@ -111,7 +111,7 @@ CVE-2025-47871 (Mattermost versions 10.5.x <= 10.5.5, 9.11.x <= 9.11.15, 10.8.x
 CVE-2025-46702 (Mattermost versions 10.5.x <= 10.5.5, 9.11.x <= 9.11.15, 10.8.x <= 10. ...)
 	TODO: check
 CVE-2025-45931 (An issue D-Link DIR-816-A2 DIR-816A2_FWv1.10CNB05_R1B011D88210 allows  ...)
-	TODO: check
+	NOT-FOR-US: D-Link
 CVE-2025-45143 (string-math v1.2.2 was discovered to contain a Regex Denial of Service ...)
 	TODO: check
 CVE-2025-41439 (A reflected cross-site scripting vulnerability via a specific paramete ...)
@@ -127,19 +127,19 @@ CVE-2025-40731 (SQL injection vulnerability in Daily Expense Manager v1.0. This
 CVE-2025-40710 (Host Header Injection (HHI) vulnerability in the Hotspot Shield VPN cl ...)
 	TODO: check
 CVE-2025-36593 (Dell OpenManage Network Integration, versions prior to 3.8, contains a ...)
-	TODO: check
+	NOT-FOR-US: Dell / EMC
 CVE-2025-36056 (IBM System Storage Virtualization Engine TS7700 3957 VED R5.4 8.54.2.1 ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2025-2895 (IBM Cloud Pak System 2.3.3.6, 2.3.36 iFix1, 2.3.3.7, 2.3.3.7 iFix1, 2. ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2025-2141 (IBM System Storage Virtualization Engine TS7700 3957 VED R5.4 8.54.2.1 ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2025-26074 (Orkes Conductor v3.21.11 allows remote attackers to execute arbitrary  ...)
 	TODO: check
 CVE-2024-8419 (The endpoint hosts a script that allows an unauthorized remote attacke ...)
 	TODO: check
 CVE-2024-53621 (A buffer overflow in the formSetCfm() function of Tenda AC1206 1200M 1 ...)
-	TODO: check
+	NOT-FOR-US: Tenda
 CVE-2024-49365 (tiny-secp256k1 is a tiny secp256k1 native/JS wrapper. Prior to version ...)
 	TODO: check
 CVE-2024-49364 (tiny-secp256k1 is a tiny secp256k1 native/JS wrapper. Prior to version ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c1f70031d3406637dd58a4b5f2d1f924562b409e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c1f70031d3406637dd58a4b5f2d1f924562b409e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250701/0378199b/attachment-0001.htm>

More information about the debian-security-tracker-commits mailing list