[Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Fri Jul 11 21:19:48 BST 2025
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
dff74dc4 by Salvatore Bonaccorso at 2025-07-11T22:19:23+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,5 +1,5 @@
CVE-2025-7503 (An OEM IP camera manufactured by Shenzhen Liandian Communication Techn ...)
- TODO: check
+ NOT-FOR-US: Shenzhen Liandian Communication Technology LTD IP camera
CVE-2025-7456 (A vulnerability, which was classified as critical, has been found in C ...)
NOT-FOR-US: Campcodes
CVE-2025-7455 (A vulnerability classified as critical was found in Campcodes Online M ...)
@@ -7,11 +7,11 @@ CVE-2025-7455 (A vulnerability classified as critical was found in Campcodes Onl
CVE-2025-7454 (A vulnerability classified as critical has been found in Campcodes Onl ...)
NOT-FOR-US: Campcodes
CVE-2025-7453 (A vulnerability was found in saltbo zpan up to 1.6.5/1.7.0-beta2. It h ...)
- TODO: check
+ NOT-FOR-US: saltbo zpan
CVE-2025-7452 (A vulnerability was found in kone-net go-chat up to f9e58d0afa9bbdb31f ...)
- TODO: check
+ NOT-FOR-US: kone-net go-chat
CVE-2025-7450 (A vulnerability was found in letseeqiji gorobbs up to 1.0.8. It has be ...)
- TODO: check
+ NOT-FOR-US: letseeqiji gorobbs
CVE-2025-7029 (A vulnerability in the Software SMI handler (SwSmiInputValue 0xB2) all ...)
TODO: check
CVE-2025-7028 (A vulnerability in the Software SMI handler (SwSmiInputValue 0x20) all ...)
@@ -31,11 +31,11 @@ CVE-2025-6549 (An Incorrect Authorization vulnerability in the web server of Jun
CVE-2025-6438 (CWE-611: Improper Restriction of XML External Entity Reference vulnera ...)
NOT-FOR-US: Schneider Electric
CVE-2025-53642 (haxcms-nodejs and haxcms-php are backends for HAXcms. The logout funct ...)
- TODO: check
+ NOT-FOR-US: HAXcms
CVE-2025-53641 (Postiz is an AI social media scheduling tool. From 1.45.1 to 1.62.3, t ...)
- TODO: check
+ NOT-FOR-US: Postiz
CVE-2025-52994 (gif_outputAsJpeg in phpThumb through 1.7.23 allows phpthumb.gif.php OS ...)
- TODO: check
+ NOT-FOR-US: phpThumb
CVE-2025-52989 (An Improper Neutralization of Delimiters vulnerability in the UI of Ju ...)
NOT-FOR-US: Juniper
CVE-2025-52988 (An Improper Neutralization of Special Elements used in an OS Command ( ...)
@@ -81,7 +81,7 @@ CVE-2025-52947 (An Improper Handling of Exceptional Conditions vulnerability in
CVE-2025-52946 (A Use After Free vulnerability in the routing protocol daemon (rpd) of ...)
NOT-FOR-US: Juniper
CVE-2025-52089 (A hidden remote support feature protected by a static secret in TOTOLI ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2025-51591 (A Server-Side Request Forgery (SSRF) in JGM Pandoc v3.6.4 allows attac ...)
TODO: check
CVE-2025-50125 (CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that ...)
@@ -103,7 +103,7 @@ CVE-2025-47182 (Improper input validation in Microsoft Edge (Chromium-based) all
CVE-2025-45582 (GNU Tar through 1.35 allows file overwrite via directory traversal in ...)
TODO: check
CVE-2025-43856 (immich is a high performance self-hosted photo and video management so ...)
- TODO: check
+ NOT-FOR-US: immich
CVE-2025-3933 (A Regular Expression Denial of Service (ReDoS) vulnerability was disco ...)
TODO: check
CVE-2025-3631 (An IBM MQ 9.3 and 9.4 Client connecting to an MQ Queue Manager can cau ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dff74dc417fa99c62ba05b42c9573547477abfac
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dff74dc417fa99c62ba05b42c9573547477abfac
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250711/1e2cd19f/attachment.htm>
More information about the debian-security-tracker-commits
mailing list