[Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed May 28 21:19:56 BST 2025
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
9253cf3a by Salvatore Bonaccorso at 2025-05-28T22:19:33+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -5,75 +5,75 @@ CVE-2025-5298 (A vulnerability, which was classified as critical, was found in C
CVE-2025-5297 (A vulnerability, which was classified as critical, has been found in S ...)
NOT-FOR-US: SourceCodester
CVE-2025-5295 (A vulnerability classified as critical was found in FreeFloat FTP Serv ...)
- TODO: check
+ NOT-FOR-US: FreeFloat FTP Server
CVE-2025-5287 (The Likes and Dislikes Plugin plugin for WordPress is vulnerable to SQ ...)
NOT-FOR-US: WordPress plugin
CVE-2025-5277 (aws-mcp-server MCP server is vulnerable to command injection. An attac ...)
- TODO: check
+ NOT-FOR-US: aws-mcp-server MCP server
CVE-2025-5257 (SummaryThis advisory addresses a security vulnerability in Mautic wher ...)
- TODO: check
+ NOT-FOR-US: Mautic
CVE-2025-5256 (SummaryThis advisory addresses an Open Redirection vulnerability in Ma ...)
- TODO: check
+ NOT-FOR-US: Mautic
CVE-2025-4963 (The WP Extended plugin for WordPress is vulnerable to Stored Cross-Sit ...)
NOT-FOR-US: WordPress plugin
CVE-2025-4493 (Improper privilege assignment in PAM JIT privilege sets in Devolutions ...)
NOT-FOR-US: Devolutions
CVE-2025-4134 (Lack of file validation in do_update_vps in Avast Business Antivirus f ...)
- TODO: check
+ NOT-FOR-US: Avast Business Antivirus for Linux
CVE-2025-48931 (The TeleMessage service through 2025-05-05 relies on MD5 for password ...)
- TODO: check
+ NOT-FOR-US: TeleMessage service
CVE-2025-48930 (The TeleMessage service through 2025-05-05 stores certain cleartext in ...)
- TODO: check
+ NOT-FOR-US: TeleMessage service
CVE-2025-48929 (The TeleMessage service through 2025-05-05 implements authentication t ...)
- TODO: check
+ NOT-FOR-US: TeleMessage service
CVE-2025-48928 (The TeleMessage service through 2025-05-05 is based on a JSP applicati ...)
- TODO: check
+ NOT-FOR-US: TeleMessage service
CVE-2025-48927 (The TeleMessage service through 2025-05-05 configures Spring Boot Actu ...)
- TODO: check
+ NOT-FOR-US: TeleMessage service
CVE-2025-48926 (The admin panel in the TeleMessage service through 2025-05-05 allows a ...)
- TODO: check
+ NOT-FOR-US: TeleMessage service
CVE-2025-48925 (The TeleMessage service through 2025-05-05 relies on the client side ( ...)
- TODO: check
+ NOT-FOR-US: TeleMessage service
CVE-2025-48749 (Netwrix Directory Manager (formerly Imanami GroupID) v11.0.0.0 and bef ...)
- TODO: check
+ NOT-FOR-US: Netwrix Directory Manager (formerly Imanami GroupID)
CVE-2025-48747 (Netwrix Directory Manager (formerly Imanami GroupID) before and includ ...)
- TODO: check
+ NOT-FOR-US: Netwrix Directory Manager (formerly Imanami GroupID)
CVE-2025-48746 (Netwrix Directory Manager (formerly Imanami GroupID) v.11.0.0.0 and be ...)
- TODO: check
+ NOT-FOR-US: Netwrix Directory Manager (formerly Imanami GroupID)
CVE-2025-47748 (Netwrix Directory Manager v.11.0.0.0 and before & after v.11.1.25134.0 ...)
- TODO: check
+ NOT-FOR-US: Netwrix Directory Manager
CVE-2025-45997 (Sourcecodester Web-based Pharmacy Product Management System v.1.0 has ...)
NOT-FOR-US: SourceCodester
CVE-2025-45343 (An issue in Tenda W18E v.2.0 v.16.01.0.11 allows an attacker to execut ...)
NOT-FOR-US: Tenda
CVE-2025-40673 (A Missing Authorization vulnerability has been found in DinoRANK. This ...)
- TODO: check
+ NOT-FOR-US: DinoRANK
CVE-2025-40651 (Reflected Cross-Site Scripting (XSS) vulnerability in Real Easy Store. ...)
- TODO: check
+ NOT-FOR-US: Real Easy Store
CVE-2025-3864 (Hackney fails to properly release HTTP connections to the pool after h ...)
- TODO: check
+ NOT-FOR-US: Hackney
CVE-2025-3357 (IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 19could all ...)
NOT-FOR-US: IBM
CVE-2025-36572 (Dell PowerStore, version(s) 4.0.0.0, contain(s) an Use of Hard-coded C ...)
NOT-FOR-US: Dell / EMC
CVE-2025-1753 (LLama-Index CLI version v0.12.20 contains an OS command injection vuln ...)
- TODO: check
+ NOT-FOR-US: LLama-Index CLI
CVE-2025-1461 (Improper neutralization of the value of the 'eventMoreText' property o ...)
- TODO: check
+ NOT-FOR-US: Vuetify
CVE-2024-57338 (An arbitrary file upload vulnerability in M2Soft CROWNIX Report & ERS ...)
- TODO: check
+ NOT-FOR-US: M2Soft CROWNIX Report & ERS
CVE-2024-57337 (An arbitrary file upload vulnerability in the opcode 500 functionality ...)
- TODO: check
+ NOT-FOR-US: M2Soft CROWNIX Report & ERS
CVE-2024-57336 (Incorrect access control in M2Soft CROWNIX Report & ERS affected v7.x ...)
- TODO: check
+ NOT-FOR-US: M2Soft CROWNIX Report & ERS
CVE-2024-51453 (IBM Sterling Secure Proxy 6.2.0.0 through 6.2.0.1 could allow a remote ...)
NOT-FOR-US: IBM
CVE-2024-47057 (SummaryThis advisory addresses a security vulnerability in Mautic rela ...)
- TODO: check
+ NOT-FOR-US: Mautic
CVE-2024-47056 (SummaryThis advisory addresses a security vulnerability in Mautic wher ...)
- TODO: check
+ NOT-FOR-US: Mautic
CVE-2024-47055 (SummaryThis advisory addresses a security vulnerability in Mautic rela ...)
- TODO: check
+ NOT-FOR-US: Mautic
CVE-2024-38341 (IBM Sterling Secure Proxy 6.0.0.0 through 6.0.3.1, 6.1.0.0 through 6.1 ...)
NOT-FOR-US: IBM
CVE-2025-48734 (Improper Access Control vulnerability in Apache Commons. A special ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9253cf3a6228aac1d23805e9bd160f51264a8dfb
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9253cf3a6228aac1d23805e9bd160f51264a8dfb
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250528/4d2544c4/attachment.htm>
More information about the debian-security-tracker-commits
mailing list