[Git][security-tracker-team/security-tracker][master] NFUs

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e7d0ae09 by Moritz Muehlenhoff at 2025-10-02T12:13:48+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -23,13 +23,13 @@ CVE-2025-61691 (VT STUDIO versions 8.53 and prior contain an out-of-bounds read
 CVE-2025-61690 (KV STUDIO versions 12.23 and prior contain a buffer underflow vulnerab ...)
 	NOT-FOR-US: KV STUDIO
 CVE-2025-61588 (RISC Zero is a zero-knowledge verifiable general computing platform ba ...)
-	TODO: check
+	NOT-FOR-US: RISC Zero
 CVE-2025-61587 (Weblate is a web based localization tool. An open redirect exists in v ...)
-	TODO: check
+	- weblate <itp> (bug #745661)
 CVE-2025-61583 (TS3 Manager is modern web interface for maintaining Teamspeak3 servers ...)
-	TODO: check
+	NOT-FOR-US: TS3 Manager
 CVE-2025-61582 (TS3 Manager is modern web interface for maintaining Teamspeak3 servers ...)
-	TODO: check
+	NOT-FOR-US: TS3 Manager
 CVE-2025-59951 (Termix is a web-based server management platform with SSH terminal, tu ...)
 	TODO: check
 CVE-2025-59538 (Argo CD is a declarative, GitOps continuous delivery tool for Kubernet ...)
@@ -47,19 +47,19 @@ CVE-2025-58776 (KV Studio versions 12.23 and prior contain a stack-based buffer
 CVE-2025-58775 (KV STUDIO and VT5-WX15/WX12 contain a stack-based buffer overflow vuln ...)
 	NOT-FOR-US: KV STUDIO and VT5-WX15/WX12
 CVE-2025-57389 (A reflected cross-site scripted (XSS) vulnerability in the /admin/syst ...)
-	TODO: check
+	NOT-FOR-US: OpenWRT
 CVE-2025-54811 (OpenPLC_V3 has a vulnerability in the enipThread function that occurs  ...)
-	TODO: check
+	NOT-FOR-US: OpenPLC
 CVE-2025-23355 (NVIDIA Nsight Graphics for Windows contains a vulnerability in an ngfx ...)
 	TODO: check
 CVE-2025-23297 (NVIDIA Installer for NvAPP for Windows contains a vulnerability in the ...)
 	TODO: check
 CVE-2025-11221 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
-	TODO: check
+	NOT-FOR-US: GTONE ChangeFlow
 CVE-2025-11182 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
-	TODO: check
+	NOT-FOR-US: GTONE ChangeFlow
 CVE-2025-11020 (An attacker can obtain server information using Path Traversal vulnera ...)
-	TODO: check
+	NOT-FOR-US: MarkAny SafePC Enterprise
 CVE-2025-9512 (The Schema & Structured Data for WP & AMP WordPress plugin before 1.50 ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2025-9075 (The ZoloBlocks plugin for WordPress is vulnerable to Stored Cross-Site ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e7d0ae09089897354c0475621eed881ec363f75c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e7d0ae09089897354c0475621eed881ec363f75c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251002/6ca3fd3a/attachment-0001.htm>