[Git][security-tracker-team/security-tracker][master] Process some NFUs

Thu Jun 12 21:35:30 BST 2025


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
66de1a96 by Salvatore Bonaccorso at 2025-06-12T22:35:09+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -13,17 +13,17 @@ CVE-2025-5996 (An issue has been discovered in GitLab CE/EE affecting all versio
 CVE-2025-5982 (An issue has been discovered in GitLab EE affecting all versions from  ...)
 	TODO: check
 CVE-2025-5485 (User names used to access the web management interface are limited to  ...)
-	TODO: check
+	NOT-FOR-US: SinoTrack
 CVE-2025-5484 (A username and password are required to authenticate to the central  S ...)
-	TODO: check
+	NOT-FOR-US: SinoTrack
 CVE-2025-5195 (An issue has been discovered in GitLab CE/EE affecting all versions fr ...)
 	TODO: check
 CVE-2025-4613 (Path traversal in Google Web Designer's template handling versions pri ...)
-	TODO: check
+	NOT-FOR-US: Google Web Designer
 CVE-2025-4418 (An improper validation of integrity check value vulnerability exists i ...)
-	TODO: check
+	NOT-FOR-US: AVEVA
 CVE-2025-4417 (A cross-site scripting vulnerability exists in  AVEVAPI Connector for  ...)
-	TODO: check
+	NOT-FOR-US: AVEVA
 CVE-2025-4278 (An issue has been discovered in GitLab CE/EE affecting all versions st ...)
 	TODO: check
 CVE-2025-49579 (Citizen is a MediaWiki skin that makes extensions part of the cohesive ...)
@@ -87,19 +87,19 @@ CVE-2025-48699
 CVE-2025-46035 (Buffer Overflow vulnerability in Tenda AC6 v.15.03.05.16 allows a remo ...)
 	NOT-FOR-US: Tenda
 CVE-2025-44019 (AVEVA PI Data Archive products are vulnerable to an uncaught exception ...)
-	TODO: check
+	NOT-FOR-US: AVEVA
 CVE-2025-43866 (vantage6 is an open-source infrastructure for privacy preserving analy ...)
-	TODO: check
+	NOT-FOR-US: vantage6
 CVE-2025-43863 (vantage6 is an open source framework built to enable, manage and deplo ...)
-	TODO: check
+	NOT-FOR-US: vantage6
 CVE-2025-40592 (A vulnerability has been identified in Mendix Studio Pro 10 (All versi ...)
 	NOT-FOR-US: Siemens
 CVE-2025-36573 (Dell Smart Dock Firmware, versions prior to 01.00.08.01, contain an In ...)
 	NOT-FOR-US: Dell / EMC
 CVE-2025-36539 (AVEVA PI Data Archive products  are vulnerable to an uncaught exceptio ...)
-	TODO: check
+	NOT-FOR-US: AVEVA
 CVE-2025-2745 (A cross-site scripting vulnerability exists in AVEVAPI Web API version ...)
-	TODO: check
+	NOT-FOR-US: AVEVA
 CVE-2025-2254 (An issue has been discovered in GitLab CE/EE affecting all versions fr ...)
 	TODO: check
 CVE-2025-29744 (pg-promise before 11.5.5 is vulnerable to SQL Injection due to imprope ...)
@@ -113,9 +113,9 @@ CVE-2025-0673 (An issue has been discovered in GitLab CE/EE affecting all versio
 CVE-2024-9512 (An issue has been discovered in GitLab EE affecting all versions prior ...)
 	TODO: check
 CVE-2024-7562 (A potential elevated privilege issue has been reported with InstallShi ...)
-	TODO: check
+	NOT-FOR-US: InstallShield
 CVE-2024-56158 (XWiki is a generic wiki platform. It's possible to execute any SQL que ...)
-	TODO: check
+	NOT-FOR-US: XWiki
 CVE-2024-55567 (Improper input validation was discovered in UsbCoreDxe in Insyde Insyd ...)
 	TODO: check
 CVE-2024-44906 (uptrace pgdriver v1.2.1 was discovered to contain a SQL injection vuln ...)
@@ -123,7 +123,7 @@ CVE-2024-44906 (uptrace pgdriver v1.2.1 was discovered to contain a SQL injectio
 CVE-2024-44905 (go-pg pg v10.13.0 was discovered to contain a SQL injection vulnerabil ...)
 	TODO: check
 CVE-2023-45256 (Multiple SQL injection vulnerabilities in the EuroInformation Monetico ...)
-	TODO: check
+	NOT-FOR-US: PrestaShop module
 CVE-2025-30399
 	NOT-FOR-US: Microsoft .NET
 CVE-2025-6009 (A vulnerability was found in kiCode111 like-girl 5.2.0 and classified  ...)
@@ -165,7 +165,7 @@ CVE-2025-35978 (Improper restriction of communication channel to intended endpoi
 CVE-2023-36636
 	REJECTED
 CVE-2022-4976 (Archive::Unzip::Burst from 0.01 through 0.09 for Perl contains a bundl ...)
-	TODO: check
+	NOT-FOR-US: Archive::Unzip::Burst Perl module
 CVE-2025-6002 (An unrestricted file upload vulnerability exists in the Product Image  ...)
 	NOT-FOR-US: VirtueMart
 CVE-2025-6001 (A Cross-Site Request Forgery (CSRF) vulnerability exists in the produc ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/66de1a961a8b4056d4a2bd2f3b0d4d9e3a7e267e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/66de1a961a8b4056d4a2bd2f3b0d4d9e3a7e267e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250612/c4abff53/attachment-0001.htm>
