[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Nov 25 08:26:03 GMT 2025



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c136daa7 by Salvatore Bonaccorso at 2025-11-25T09:25:06+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,5 +1,5 @@
 CVE-2025-9803 (lunary-ai/lunary version 1.9.34 is vulnerable to an account takeover d ...)
-	TODO: check
+	NOT-FOR-US: lunary-ai/lunary
 CVE-2025-6389 (The Sneeit Framework plugin for WordPress is vulnerable to Remote Code ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2025-66187
@@ -21,25 +21,25 @@ CVE-2025-66180
 CVE-2025-66179
 	REJECTED
 CVE-2025-65951 (Inside Track / Entropy Derby is a research-grade horse-racing betting  ...)
-	TODO: check
+	NOT-FOR-US: Entropy Derby
 CVE-2025-65944 (Sentry-Javascript is an official Sentry SDKs for JavaScript. From vers ...)
 	TODO: check
 CVE-2025-64761 (OpenBao is an open source identity-based secrets management system. Pr ...)
 	TODO: check
 CVE-2025-64730 (Cross-site scripting vulnerability exists in SNC-CX600W all versions.  ...)
-	TODO: check
+	NOT-FOR-US: SNC-CX600W
 CVE-2025-64693 (Security Point (Windows) of MaLion and MaLionCloud contains a heap-bas ...)
-	TODO: check
+	NOT-FOR-US: MaLion and MaLionCloud
 CVE-2025-64304 ("FOD" App uses hard-coded cryptographic keys, which may allow a local  ...)
-	TODO: check
+	NOT-FOR-US: "FOD" App
 CVE-2025-63674 (An issue in Blurams Lumi Security Camera (A31C) v23.1227.472.2926 allo ...)
-	TODO: check
+	NOT-FOR-US: Blurams
 CVE-2025-63498 (alinto SOGo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the ...)
 	TODO: check
 CVE-2025-62691 (Security Point (Windows) of MaLion and MaLionCloud contains a stack-ba ...)
-	TODO: check
+	NOT-FOR-US: MaLion and MaLionCloud
 CVE-2025-62497 (Cross-site request forgery vulnerability exists in SNC-CX600W versions ...)
-	TODO: check
+	NOT-FOR-US: SNC-CX600W
 CVE-2025-62155 (New API is a large language mode (LLM) gateway and artificial intellig ...)
 	TODO: check
 CVE-2025-59485 (Incorrect default permissions issue exists in Security Point (Windows) ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c136daa7713fddb819637a1ea103ebf3f753f706

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c136daa7713fddb819637a1ea103ebf3f753f706
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251125/68292070/attachment.htm>


More information about the debian-security-tracker-commits mailing list