[Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Nov 12 08:34:13 GMT 2025
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
f5392c9c by Salvatore Bonaccorso at 2025-11-12T09:32:09+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -11,7 +11,7 @@ CVE-2025-54983 (A health check port on Zscaler Client Connector on Windows, vers
CVE-2025-43205 (An out-of-bounds access issue was addressed with improved bounds check ...)
NOT-FOR-US: Apple
CVE-2025-41116 (When using the Grafana Databricks Datasource Plugin, if Oauth passthro ...)
- TODO: check
+ NOT-FOR-US: Grafana Databricks Datasource Plugin
CVE-2025-40827 (A vulnerability has been identified in Siemens Software Center (All ve ...)
NOT-FOR-US: Siemens
CVE-2025-40817 (A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0 ...)
@@ -36,21 +36,21 @@ CVE-2025-40110 (In the Linux kernel, the following vulnerability has been resolv
[trixie] - linux 6.12.57-1
NOTE: https://git.kernel.org/linus/5ac2c0279053a2c5265d46903432fb26ae2d0da2 (6.18-rc1)
CVE-2025-3717 (When using the Grafana Snowflake Datasource Plugin, if Oauth passthrou ...)
- TODO: check
+ NOT-FOR-US: Grafana Snowflake Datasource Plugin
CVE-2025-13047 (Bacteriology Laboratory Reporting System developed by ViewLead Technol ...)
- TODO: check
+ NOT-FOR-US: Bacteriology Laboratory Reporting System
CVE-2025-13046 (Bacteriology Laboratory Reporting System developed by ViewLead Technol ...)
- TODO: check
+ NOT-FOR-US: Bacteriology Laboratory Reporting System
CVE-2025-12901 (The Asgaros Forum plugin for WordPress is vulnerable to Cross-Site Req ...)
NOT-FOR-US: WordPress plugin
CVE-2025-12872 (The a+HRD and a+HCM developed by aEnrich has a Stored Cross-Site Scrip ...)
- TODO: check
+ NOT-FOR-US: aEnrich
CVE-2025-12871 (The a+HRD developed by aEnrich has an Authentication Abuse vulnerabili ...)
- TODO: check
+ NOT-FOR-US: aEnrich
CVE-2025-12870 (The a+HRD developed by aEnrich has an Authentication Abuse vulnerabili ...)
- TODO: check
+ NOT-FOR-US: aEnrich
CVE-2025-12869 (The a+HRD developed by aEnrich has a Stored Cross-Site Scripting vulne ...)
- TODO: check
+ NOT-FOR-US: aEnrich
CVE-2025-12833 (The GeoDirectory \u2013 WP Business Directory Plugin and Classified Li ...)
NOT-FOR-US: WordPress plugin
CVE-2025-12633 (The Booking Calendar | Appointment Booking | Bookit plugin for WordPre ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f5392c9cd766b4f08b53d0cb4c3b55034d83ce64
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f5392c9cd766b4f08b53d0cb4c3b55034d83ce64
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251112/ce9bd970/attachment.htm>
More information about the debian-security-tracker-commits
mailing list