[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Sep 30 21:30:34 BST 2025



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
87ecea5d by Salvatore Bonaccorso at 2025-09-30T22:29:40+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -27,11 +27,11 @@ CVE-2025-6033 (There is a memory corruption vulnerability due to an out of bound
 CVE-2025-57852 (A container privilege escalation flaw was found in KServe ModelMesh co ...)
 	TODO: check
 CVE-2025-57254 (An SQL injection vulnerability in user-login.php and index.php of Kart ...)
-	TODO: check
+	NOT-FOR-US: Karthikg1908 Hospital Management System (HMS)
 CVE-2025-56676 (TitanSystems Zender v3.9.7 contains an account takeover vulnerability  ...)
-	TODO: check
+	NOT-FOR-US: TitanSystems Zender
 CVE-2025-56675 (The EKEN video doorbell T6 BT60PLUS_MAIN_V1.0_GC1084_20230531 periodic ...)
-	TODO: check
+	NOT-FOR-US: EKEN video doorbell
 CVE-2025-56572 (An issue in finance.js v.4.1.0 allows a remote attacker to cause a den ...)
 	TODO: check
 CVE-2025-56571 (Finance.js v4.1.0 contains a Denial of Service (DoS) vulnerability via ...)
@@ -39,11 +39,11 @@ CVE-2025-56571 (Finance.js v4.1.0 contains a Denial of Service (DoS) vulnerabili
 CVE-2025-56520 (Dify v1.6.0 was discovered to contain a Server-Side Request Forgery (S ...)
 	TODO: check
 CVE-2025-56513 (NiceHash QuickMiner 6.12.0 perform software updates over HTTP without  ...)
-	TODO: check
+	NOT-FOR-US: NiceHash QuickMiner
 CVE-2025-56392 (An Insecure Direct Object Reference (IDOR) in the /dashboard/notes end ...)
-	TODO: check
+	NOT-FOR-US: Syaqui Collegetivity
 CVE-2025-56301 (An issue was discovered in Chipsalliance Rocket-Chip commit f517abbf41 ...)
-	TODO: check
+	NOT-FOR-US: Chipsalliance Rocket-Chip
 CVE-2025-56207 (A security flaw in the '_transfer' function of a smart contract implem ...)
 	TODO: check
 CVE-2025-56200 (A URL validation bypass vulnerability exists in validator.js through v ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/87ecea5d605be908448a9f79d0b8f5670089f5d6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/87ecea5d605be908448a9f79d0b8f5670089f5d6
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250930/2f73aafa/attachment.htm>


More information about the debian-security-tracker-commits mailing list