[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
68000dab by security tracker role at 2025-10-21T08:13:38+00:00
automatic NOT-FOR-US entries update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,7 +1,7 @@
 CVE-2025-9133 (A missing authorization vulnerability in Zyxel ATP series firmware ver ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2025-8078 (A post-authentication command injection vulnerability in Zyxel ATP ser ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2025-7851 (An attacker may obtain the root shell on the underlying OS system with ...)
 	TODO: check
 CVE-2025-7850 (A command injection vulnerability may be exploited after the admin's a ...)
@@ -55,7 +55,7 @@ CVE-2025-60781 (PHP Education Manager v1.0 is vulnerable to Cross Site Scripting
 CVE-2025-54764 (Mbed TLS before 3.6.5 allows a local timing attack against certain RSA ...)
 	TODO: check
 CVE-2025-26392 (SolarWinds Observability Self-Hosted is susceptible to SQL injection v ...)
-	TODO: check
+	NOT-FOR-US: SolarWinds
 CVE-2025-12004 (Incorrect Permission Assignment for Critical Resource vulnerability in ...)
 	TODO: check
 CVE-2025-12001 (Lack of application manifest sanitation could lead to potential stored ...)
@@ -63,9 +63,9 @@ CVE-2025-12001 (Lack of application manifest sanitation could lead to potential
 CVE-2025-11949 (EasyFlow .NET and EasyFlow AiNet, developed by Digiwin, has a Missing  ...)
 	TODO: check
 CVE-2025-11536 (The Element Pack Addons for Elementor plugin for WordPress is vulnerab ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-10916 (The FormGent  WordPress plugin before 1.0.4 is vulnerable to arbitrary ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2018-25118 (GeoVision embedded IP devices, confirmed onGV-BX1500 andGV-MFD1501, co ...)
 	TODO: check
 CVE-2025-9574 (Missing Authentication for Critical Function vulnerability in ABB ALS- ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/68000dab8811bb3b2abaaf4a38b77af4993d8cb3

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/68000dab8811bb3b2abaaf4a38b77af4993d8cb3
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251021/a8d5fdb9/attachment.htm>