[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Mon Jun 16 22:06:14 BST 2025



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fd5f8a12 by Salvatore Bonaccorso at 2025-06-16T23:05:50+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -84,13 +84,13 @@ CVE-2025-48976 (Allocation of resources for multipart headers with insufficient
 CVE-2025-46710 (Possible kernel exceptions caused by reading and writing kernel heap d ...)
 	NOT-FOR-US: Imagination Technologies
 CVE-2025-40729 (Reflected Cross-Site Scripting (XSS) in /customer_support/index.php in ...)
-	TODO: check
+	NOT-FOR-US: Customer Support System
 CVE-2025-40728 (SQL injection vulnerability in Customer Support System v1.0. This vuln ...)
-	TODO: check
+	NOT-FOR-US: Customer Support System
 CVE-2025-40727 (A Reflected Cross Site Scripting (XSS) vulnerability was found in '/se ...)
-	TODO: check
+	NOT-FOR-US: Phoenix Site CMS from Phoenix
 CVE-2025-40726 (Reflected Cross-Site Scripting (XSS) vulnerability in /pages/search-re ...)
-	TODO: check
+	NOT-FOR-US: Nosto
 CVE-2025-3602 (Liferay Portal 7.4.0 through 7.4.3.97, and Liferay DXP 2023.Q3.1 throu ...)
 	NOT-FOR-US: Liferay
 CVE-2025-3594 (Path traversal vulnerability with the downloading and installation of  ...)
@@ -102,9 +102,9 @@ CVE-2025-3464 (A race condition vulnerability exists in Armoury Crate. This vuln
 CVE-2025-36632 (In Tenable Agent versions prior to 10.8.5 on a Windows host, it was fo ...)
 	NOT-FOR-US: Tenable
 CVE-2025-32798 (Conda-build contains commands and tools to build conda packages. Prior ...)
-	TODO: check
+	NOT-FOR-US: Conda-build
 CVE-2025-32797 (Conda-build contains commands and tools to build conda packages. Prior ...)
-	TODO: check
+	NOT-FOR-US: Conda-build
 CVE-2025-2327 (A flaw exists in FlashArray whereby the Key Encryption Key (KEK) is lo ...)
 	NOT-FOR-US: Pure Storage
 CVE-2025-2091 (An open redirection vulnerability in M-Files mobile applications for A ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fd5f8a12fba93cb291b85bb92c03a96be1278d9c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fd5f8a12fba93cb291b85bb92c03a96be1278d9c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250616/a805d5b1/attachment.htm>


More information about the debian-security-tracker-commits mailing list