[Git][security-tracker-team/security-tracker][master] Process more NFUs
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue Sep 16 21:35:49 BST 2025
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
5cbad409 by Salvatore Bonaccorso at 2025-09-16T22:35:02+02:00
Process more NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -72,41 +72,41 @@ CVE-2025-56263 (by-night sms V1.0 has an Arbitrary File Upload vulnerability. Th
CVE-2025-55834 (A Cross Site Scripting vulnerability in JeeWMS v.3.7 and before allows ...)
NOT-FOR-US: JeeWMS
CVE-2025-55118 (Memory corruptions can be remotely triggered in the Control-M/Agent wh ...)
- TODO: check
+ NOT-FOR-US: Control-M/Agent
CVE-2025-55117 (A stack-based buffer overflow can be remotely triggered when formattin ...)
- TODO: check
+ NOT-FOR-US: Control-M/Agent
CVE-2025-55116 (A buffer overflow in the Control-M/Agent can lead to a local privilege ...)
- TODO: check
+ NOT-FOR-US: Control-M/Agent
CVE-2025-55115 (A path traversal in the Control-M/Agent can lead to a local privilege ...)
- TODO: check
+ NOT-FOR-US: Control-M/Agent
CVE-2025-55114 (The improper order of AUTHORIZED_CTM_IP validation in the Control-M/Ag ...)
- TODO: check
+ NOT-FOR-US: Control-M/Agent
CVE-2025-55113 (If the Access Control List is enforced by the Control-M/Agent and the ...)
- TODO: check
+ NOT-FOR-US: Control-M/Agent
CVE-2025-55112 (Out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 (and potentia ...)
- TODO: check
+ NOT-FOR-US: Control-M/Agent
CVE-2025-55111 (Certain files with overly permissive permissions were identified in th ...)
- TODO: check
+ NOT-FOR-US: Control-M/Agent
CVE-2025-55110 (Control-M/Agents use a kdb or PKCS#12 keystore by default, and the def ...)
- TODO: check
+ NOT-FOR-US: Control-M/Agent
CVE-2025-55109 (An authentication bypass vulnerability exists in the out-of-support Co ...)
- TODO: check
+ NOT-FOR-US: Control-M/Agent
CVE-2025-54262 (Substance3D - Stager versions 3.1.3 and earlier are affected by an out ...)
NOT-FOR-US: Adobe
CVE-2025-54237 (Substance3D - Stager versions 3.1.3 and earlier are affected by an out ...)
NOT-FOR-US: Adobe
CVE-2025-52044 (In Frappe ERPNext v15.57.5, the function get_stock_balance() at erpnex ...)
- TODO: check
+ NOT-FOR-US: Frappe ERPNext
CVE-2025-4953 (A flaw was found in Podman. In a Containerfile or Podman, data written ...)
TODO: check
CVE-2025-4688 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: BGS Interactive SINAV.LINK Exam Result Module
CVE-2025-49728 (Cleartext storage of sensitive information in Microsoft PC Manager all ...)
NOT-FOR-US: Microsoft
CVE-2025-47967 (Insufficient ui warning of dangerous operations in Microsoft Edge for ...)
NOT-FOR-US: Microsoft
CVE-2025-44034 (SQL injection vulnerability in oa_system oasys v.1.1 allows a remote a ...)
- TODO: check
+ NOT-FOR-US: oa_system oasys
CVE-2025-43801 (Unchecked input for loop condition vulnerability in XML-RPC in Liferay ...)
NOT-FOR-US: Liferay
CVE-2025-41249 (The Spring Framework annotation detection mechanism may not correctly ...)
@@ -251,19 +251,19 @@ CVE-2025-39805 (In the Linux kernel, the following vulnerability has been resolv
CVE-2025-36244 (IBM AIX 7.2, 7.3, IBM VIOS 3.1, and 4.1, when configured to use Kerber ...)
NOT-FOR-US: IBM
CVE-2025-34187 (Ilevia EVE X1/X5 Server version \u2264 4.7.18.0.eden contains a miscon ...)
- TODO: check
+ NOT-FOR-US: Ilevia EVE X1/X5 Server
CVE-2025-34186 (Ilevia EVE X1/X5 Server version \u2264 4.7.18.0.eden contains a vulner ...)
- TODO: check
+ NOT-FOR-US: Ilevia EVE X1/X5 Server
CVE-2025-34185 (Ilevia EVE X1 Server version \u2264 4.7.18.0.eden contains a pre-authe ...)
- TODO: check
+ NOT-FOR-US: Ilevia EVE X1 Server
CVE-2025-34184 (Ilevia EVE X1 Server version \u2264 4.7.18.0.eden contains an unauthen ...)
- TODO: check
+ NOT-FOR-US: Ilevia EVE X1 Server
CVE-2025-34183 (Ilevia EVE X1 Server version \u2264 4.7.18.0.eden contains a vulnerabi ...)
- TODO: check
+ NOT-FOR-US: Ilevia EVE X1 Server
CVE-2025-30075 (In Alludo MindManager before 25.0.208 on Windows, attackers could pote ...)
- TODO: check
+ NOT-FOR-US: Alludo MindManager
CVE-2025-2404 (Improper Neutralization of Input During Web Page Generation (XSS or 'C ...)
- TODO: check
+ NOT-FOR-US: STOYS
CVE-2025-26711 (There is an unauthorized access vulnerability in ZTE T5400. Due to imp ...)
NOT-FOR-US: ZTE
CVE-2025-26710 (There is an an information disclosure vulnerability in ZTE T5400. Due ...)
@@ -275,7 +275,7 @@ CVE-2025-10563 (A vulnerability has been found in Campcodes Grocery Sales and In
CVE-2025-10562 (A flaw has been found in Campcodes Grocery Sales and Inventory System ...)
NOT-FOR-US: Campcodes
CVE-2025-10546 (This vulnerability exist in PPC 2K15X Router, due to improper input va ...)
- TODO: check
+ NOT-FOR-US: PPC 2K15X Router
CVE-2025-10492 (A Java deserialisation vulnerability has been discovered in Jaspersoft ...)
TODO: check
CVE-2025-10316 (The extension "Form to Database" is susceptible to Cross-Site Scriptin ...)
@@ -289,11 +289,11 @@ CVE-2025-10015 (The Sparkle frameworkincludes an XPC service Downloader.xpc, by
CVE-2024-13174 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
TODO: check
CVE-2024-13149 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: Arma Store Armalife
CVE-2024-12913 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: Megatek Communication System Azora Azora Wireless Network Management
CVE-2024-12796 (Improper Neutralization of Input During Web Page Generation (XSS or 'C ...)
- TODO: check
+ NOT-FOR-US: Holistic IT, Consultancy Coop. Workcube ERP
CVE-2021-47687
REJECTED
CVE-2021-47686
@@ -489,7 +489,7 @@ CVE-2019-25163
CVE-2009-20007 (Talkative IRC v0.4.4.16 is vulnerable to a stack-based buffer overflow ...)
TODO: check
CVE-2009-20006 (osCommerce versions up to and including 2.2 RC2a contain a vulnerabili ...)
- TODO: check
+ NOT-FOR-US: osCommerce
CVE-2009-20005 (A stack-based buffer overflow exists in the UtilConfigHome.csp endpoin ...)
TODO: check
CVE-2023-53334 (In the Linux kernel, the following vulnerability has been resolved: U ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5cbad409c6f8e38296b0cb5a3c228a6e07f81db0
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5cbad409c6f8e38296b0cb5a3c228a6e07f81db0
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250916/3045cdae/attachment.htm>
More information about the debian-security-tracker-commits
mailing list