[Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Fri May 2 21:34:45 BST 2025
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
7b6114eb by Salvatore Bonaccorso at 2025-05-02T22:34:21+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,17 +1,17 @@
CVE-2025-4214 (A vulnerability was found in PHPGuruku Online DJ Booking Management Sy ...)
- TODO: check
+ NOT-FOR-US: PHPGuruku Online DJ Booking Management System
CVE-2025-4213 (A vulnerability has been found in PHPGurukul Online Birth Certificate ...)
NOT-FOR-US: PHPGurukul
CVE-2025-4210 (A vulnerability classified as critical was found in Casdoor up to 1.81 ...)
- TODO: check
+ NOT-FOR-US: Casdoor
CVE-2025-4204 (The Ultimate Auction Pro plugin for WordPress is vulnerable to SQL Inj ...)
NOT-FOR-US: WordPress plugin
CVE-2025-4166 (Vault Community and Vault Enterprise Key/Value (kv) Version 2 plugin m ...)
- TODO: check
+ NOT-FOR-US: Vault Community and Vault Enterprise Key/Value (kv) Version 2 plugin
CVE-2025-46332 (Flags SDK is an open-source feature flags toolkit for Next.js and Svel ...)
- TODO: check
+ NOT-FOR-US: Flags SDK
CVE-2025-45800 (TOTOLINK A950RG V4.1.2cu.5204_B20210112 contains a command execution v ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2025-44877 (Tenda AC9 V15.03.06.42_multi was found to contain a command injection ...)
NOT-FOR-US: Tenda
CVE-2025-44872 (Tenda AC9 V15.03.06.42_multi was found to contain a command injection ...)
@@ -19,27 +19,27 @@ CVE-2025-44872 (Tenda AC9 V15.03.06.42_multi was found to contain a command inje
CVE-2025-44868 (Wavlink WL-WN530H4 20220801 was found to contain a command injection v ...)
TODO: check
CVE-2025-3927 (Digigram's PYKO-OUT audio-over-IP (AoIP) web-server does not require a ...)
- TODO: check
+ NOT-FOR-US: Digigram's PYKO-OUT audio-over-IP (AoIP) web-server
CVE-2025-3879 (Vault Community, Vault Enterprise (\u201cVault\u201d) Azure Auth metho ...)
- TODO: check
+ NOT-FOR-US: HashiCorp Vault
CVE-2025-2812 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: Mydata Informatics Ticket Sales Automation
CVE-2025-2605 (Improper Neutralization of Special Elements used in an OS Command ('OS ...)
TODO: check
CVE-2025-2488 (Improper Neutralization of Input During Web Page Generation (XSS or 'C ...)
- TODO: check
+ NOT-FOR-US: Profelis Informatics SambaBox
CVE-2025-2421 (Improper Control of Generation of Code ('Code Injection') vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: Profelis Informatics SambaBox
CVE-2025-1884 (Use-After-Free vulnerability exists in the SLDPRT file reading procedu ...)
TODO: check
CVE-2025-1883 (Out-Of-Bounds Write vulnerability exists in the OBJ file reading proce ...)
TODO: check
CVE-2025-1301 (Improper Neutralization of Input During Web Page Generation (XSS or 'C ...)
- TODO: check
+ NOT-FOR-US: Yordam Informatics Library Automation System
CVE-2025-0427 (Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm ...)
- TODO: check
+ NOT-FOR-US: Arm
CVE-2025-0072 (Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm ...)
- TODO: check
+ NOT-FOR-US: Arm
CVE-2024-58253 (In the obfstr crate before 0.4.4 for Rust, the obfstr! argument type i ...)
TODO: check
CVE-2023-53144 (In the Linux kernel, the following vulnerability has been resolved: e ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7b6114eb795f99a411a40647f982cc2e8631774a
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7b6114eb795f99a411a40647f982cc2e8631774a
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250502/915753fc/attachment.htm>
More information about the debian-security-tracker-commits
mailing list