[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update

Wed May 28 21:14:22 BST 2025


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c081e8ce by security tracker role at 2025-05-28T20:14:15+00:00
automatic NOT-FOR-US entries update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,13 +1,13 @@
 CVE-2025-5299 (A vulnerability was found in SourceCodester Client Database Management ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester
 CVE-2025-5298 (A vulnerability, which was classified as critical, was found in Campco ...)
-	TODO: check
+	NOT-FOR-US: Campcodes
 CVE-2025-5297 (A vulnerability, which was classified as critical, has been found in S ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester
 CVE-2025-5295 (A vulnerability classified as critical was found in FreeFloat FTP Serv ...)
 	TODO: check
 CVE-2025-5287 (The Likes and Dislikes Plugin plugin for WordPress is vulnerable to SQ ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-5277 (aws-mcp-server MCP server is vulnerable to command injection. An attac ...)
 	TODO: check
 CVE-2025-5257 (SummaryThis advisory addresses a security vulnerability in Mautic wher ...)
@@ -15,9 +15,9 @@ CVE-2025-5257 (SummaryThis advisory addresses a security vulnerability in Mautic
 CVE-2025-5256 (SummaryThis advisory addresses an Open Redirection vulnerability in Ma ...)
 	TODO: check
 CVE-2025-4963 (The WP Extended plugin for WordPress is vulnerable to Stored Cross-Sit ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-4493 (Improper privilege assignment in PAM JIT privilege sets in Devolutions ...)
-	TODO: check
+	NOT-FOR-US: Devolutions
 CVE-2025-4134 (Lack of file validation in do_update_vps in Avast Business Antivirus f ...)
 	TODO: check
 CVE-2025-48931 (The TeleMessage service through 2025-05-05 relies on MD5 for password  ...)
@@ -43,9 +43,9 @@ CVE-2025-48746 (Netwrix Directory Manager (formerly Imanami GroupID) v.11.0.0.0
 CVE-2025-47748 (Netwrix Directory Manager v.11.0.0.0 and before & after v.11.1.25134.0 ...)
 	TODO: check
 CVE-2025-45997 (Sourcecodester Web-based Pharmacy Product Management System v.1.0 has  ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester
 CVE-2025-45343 (An issue in Tenda W18E v.2.0 v.16.01.0.11 allows an attacker to execut ...)
-	TODO: check
+	NOT-FOR-US: Tenda
 CVE-2025-40673 (A Missing Authorization vulnerability has been found in DinoRANK. This ...)
 	TODO: check
 CVE-2025-40651 (Reflected Cross-Site Scripting (XSS) vulnerability in Real Easy Store. ...)
@@ -53,9 +53,9 @@ CVE-2025-40651 (Reflected Cross-Site Scripting (XSS) vulnerability in Real Easy
 CVE-2025-3864 (Hackney fails to properly release HTTP connections to the pool after h ...)
 	TODO: check
 CVE-2025-3357 (IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 19could all ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2025-36572 (Dell PowerStore, version(s) 4.0.0.0, contain(s) an Use of Hard-coded C ...)
-	TODO: check
+	NOT-FOR-US: Dell / EMC
 CVE-2025-1753 (LLama-Index CLI version v0.12.20 contains an OS command injection vuln ...)
 	TODO: check
 CVE-2025-1461 (Improper neutralization of the value of the 'eventMoreText' property o ...)
@@ -67,7 +67,7 @@ CVE-2024-57337 (An arbitrary file upload vulnerability in the opcode 500 functio
 CVE-2024-57336 (Incorrect access control in M2Soft CROWNIX Report & ERS affected v7.x  ...)
 	TODO: check
 CVE-2024-51453 (IBM Sterling Secure Proxy 6.2.0.0 through 6.2.0.1 could allow a remote ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2024-47057 (SummaryThis advisory addresses a security vulnerability in Mautic rela ...)
 	TODO: check
 CVE-2024-47056 (SummaryThis advisory addresses a security vulnerability in Mautic wher ...)
@@ -75,7 +75,7 @@ CVE-2024-47056 (SummaryThis advisory addresses a security vulnerability in Mauti
 CVE-2024-47055 (SummaryThis advisory addresses a security vulnerability in Mautic rela ...)
 	TODO: check
 CVE-2024-38341 (IBM Sterling Secure Proxy 6.0.0.0 through 6.0.3.1, 6.1.0.0 through 6.1 ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2025-48734 (Improper Access Control vulnerability in Apache Commons.    A special  ...)
 	- commons-beanutils 1.10.1-1
 	NOTE: https://www.openwall.com/lists/oss-security/2025/05/28/6



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c081e8ceb37d35fb00207934da8cdbb7b347ab09

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c081e8ceb37d35fb00207934da8cdbb7b347ab09
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250528/629c601a/attachment.htm>
