[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff (@jmm) jmm at debian.org
Thu Jul 3 22:15:15 BST 2025



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
90586961 by Moritz Muehlenhoff at 2025-07-03T23:14:56+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -13,21 +13,21 @@ CVE-2025-6071 (Use of Hard-coded Cryptographic Key vulnerability in ABB RMC-100,
 CVE-2025-5961 (The Migration, Backup, Staging \u2013 WPvivid Backup & Migration plugi ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2025-53502 (Improper Input Validation vulnerability in Wikimedia Foundation Mediaw ...)
-	TODO: check
+	NOT-FOR-US: Mediawiki extension FeaturedFeeds
 CVE-2025-53501 (Improper Access Control vulnerability in Wikimedia Foundation Mediawik ...)
-	TODO: check
+	NOT-FOR-US: Mediawiki extension Scribunto
 CVE-2025-53500 (Improper Neutralization of Input During Web Page Generation (XSS or 'C ...)
-	TODO: check
+	NOT-FOR-US: Mediawiki extension MassEditRegex
 CVE-2025-53490 (Improper Neutralization of Input During Web Page Generation (XSS or 'C ...)
-	TODO: check
+	NOT-FOR-US: Mediawiki extension CampaignEvents
 CVE-2025-53489 (Improper Neutralization of Input During Web Page Generation (XSS or 'C ...)
-	TODO: check
+	NOT-FOR-US: Mediawiki extension GoogleDocs4MW
 CVE-2025-53370 (Citizen is a MediaWiki skin that makes extensions part of the cohesive ...)
-	TODO: check
+	NOT-FOR-US: Mediawiki skin Citizen
 CVE-2025-53369 (Short Description is a MediaWiki extension that provides local short d ...)
-	TODO: check
+	NOT-FOR-US: Mediawiki extension ShortDescription
 CVE-2025-53368 (Citizen is a MediaWiki skin that makes extensions part of the cohesive ...)
-	TODO: check
+	NOT-FOR-US: Mediawiki skin Citizen
 CVE-2025-50263 (Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the f ...)
 	NOT-FOR-US: Tenda
 CVE-2025-50262 (Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the f ...)
@@ -59,7 +59,7 @@ CVE-2025-40722 (Stored Cross-Site Scripting (XSS) vulnerability in versions prio
 CVE-2025-3702 (Missing Authorization vulnerability in Melapress Melapress File Monito ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-34089 (An unauthenticated remote code execution vulnerability exists in Remot ...)
-	TODO: check
+	NOT-FOR-US: Aexol Studio Remote for Mac
 CVE-2025-34088 (An authenticated remote code execution vulnerability exists in Pandora ...)
 	NOT-FOR-US: Pandora FMS
 CVE-2025-34087 (An authenticated command injection vulnerability exists in Pi-hole ver ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/905869614cbbe3cd33c65ce261ba6bebe2a00a9d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/905869614cbbe3cd33c65ce261ba6bebe2a00a9d
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250703/36541240/attachment.htm>


More information about the debian-security-tracker-commits mailing list