[Git][security-tracker-team/security-tracker][master] NFUs
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Tue May 27 10:33:42 BST 2025
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
83f1e148 by Moritz Muehlenhoff at 2025-05-27T11:28:06+02:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -97,9 +97,9 @@ CVE-2025-33079 (IBM Controller 11.0.0, 11.0.1, and 11.1.0 application could allo
CVE-2025-2407 (Missing Authentication & Authorization in Web-API in Mobatime AMX MTAP ...)
NOT-FOR-US: Mobatime AMX MTAPI
CVE-2025-26211 (Gibbon before 29.0.00 allows CSRF.)
- TODO: check
+ NOT-FOR-US: Gibbon
CVE-2025-23393 (A Improper Neutralization of Script-Related HTML Tags in a Web Page (B ...)
- TODO: check
+ NOT-FOR-US: Spacewalk
CVE-2024-47090 (Improper neutralization of input in Nagvis before version 1.9.47 which ...)
- nagvis <unfixed>
NOTE: https://github.com/NagVis/nagvis/commit/5baf87d30175357aaa39e42ff0d99fb0abefbc06 (nagvis-1.9.47)
@@ -143,7 +143,7 @@ CVE-2025-5200 (A vulnerability was found in Open Asset Import Library Assimp 5.4
CVE-2025-5196 (A vulnerability has been found in Wing FTP Server up to 7.4.3 and clas ...)
NOT-FOR-US: Wing FTP Server
CVE-2025-5186 (A vulnerability was found in thinkgem JeeSite up to 5.11.1. It has bee ...)
- TODO: check
+ NOT-FOR-US: JeeSite
CVE-2025-5185 (A vulnerability was found in Summer Pearl Group Vacation Rental Manage ...)
NOT-FOR-US: Summer Pearl Group Vacation Rental Management Platform
CVE-2025-5184 (A vulnerability was found in Summer Pearl Group Vacation Rental Manage ...)
@@ -197,7 +197,7 @@ CVE-2025-39498 (Insertion of Sensitive Information Into Sent Data vulnerability
CVE-2025-23394 (A UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tum ...)
TODO: check
CVE-2025-23392 (A Improper Neutralization of Script-Related HTML Tags in a Web Page (B ...)
- TODO: check
+ NOT-FOR-US: Spacewalk
CVE-2025-1985 (Due to improper neutralization of input during web page generation (XS ...)
NOT-FOR-US: Pepperl+Fuchs SE
CVE-2025-37992 (In the Linux kernel, the following vulnerability has been resolved: n ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/83f1e148ff4c289aef96f60d1aa0cf1daa746d20
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/83f1e148ff4c289aef96f60d1aa0cf1daa746d20
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250527/e2d68cd4/attachment.htm>
More information about the debian-security-tracker-commits
mailing list