[Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue Nov 25 08:26:03 GMT 2025
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
c136daa7 by Salvatore Bonaccorso at 2025-11-25T09:25:06+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,5 +1,5 @@
CVE-2025-9803 (lunary-ai/lunary version 1.9.34 is vulnerable to an account takeover d ...)
- TODO: check
+ NOT-FOR-US: lunary-ai/lunary
CVE-2025-6389 (The Sneeit Framework plugin for WordPress is vulnerable to Remote Code ...)
NOT-FOR-US: WordPress plugin
CVE-2025-66187
@@ -21,25 +21,25 @@ CVE-2025-66180
CVE-2025-66179
REJECTED
CVE-2025-65951 (Inside Track / Entropy Derby is a research-grade horse-racing betting ...)
- TODO: check
+ NOT-FOR-US: Entropy Derby
CVE-2025-65944 (Sentry-Javascript is an official Sentry SDKs for JavaScript. From vers ...)
TODO: check
CVE-2025-64761 (OpenBao is an open source identity-based secrets management system. Pr ...)
TODO: check
CVE-2025-64730 (Cross-site scripting vulnerability exists in SNC-CX600W all versions. ...)
- TODO: check
+ NOT-FOR-US: SNC-CX600W
CVE-2025-64693 (Security Point (Windows) of MaLion and MaLionCloud contains a heap-bas ...)
- TODO: check
+ NOT-FOR-US: MaLion and MaLionCloud
CVE-2025-64304 ("FOD" App uses hard-coded cryptographic keys, which may allow a local ...)
- TODO: check
+ NOT-FOR-US: "FOD" App
CVE-2025-63674 (An issue in Blurams Lumi Security Camera (A31C) v23.1227.472.2926 allo ...)
- TODO: check
+ NOT-FOR-US: Blurams
CVE-2025-63498 (alinto SOGo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the ...)
TODO: check
CVE-2025-62691 (Security Point (Windows) of MaLion and MaLionCloud contains a stack-ba ...)
- TODO: check
+ NOT-FOR-US: MaLion and MaLionCloud
CVE-2025-62497 (Cross-site request forgery vulnerability exists in SNC-CX600W versions ...)
- TODO: check
+ NOT-FOR-US: SNC-CX600W
CVE-2025-62155 (New API is a large language mode (LLM) gateway and artificial intellig ...)
TODO: check
CVE-2025-59485 (Incorrect default permissions issue exists in Security Point (Windows) ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c136daa7713fddb819637a1ea103ebf3f753f706
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c136daa7713fddb819637a1ea103ebf3f753f706
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251125/68292070/attachment.htm>
More information about the debian-security-tracker-commits
mailing list