[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Jan 2 20:14:01 GMT 2026 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f3cc14c8 by security tracker role at 2026-01-02T20:13:53+00:00
automatic NOT-FOR-US entries update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -17,23 +17,23 @@ CVE-2026-21429 (Emlog is an open source website building system. In version 2.5.
 CVE-2026-0571 (A security flaw has been discovered in yeqifu warehouse up to aaf29962 ...)
 	TODO: check
 CVE-2026-0570 (A vulnerability was found in code-projects Online Music Site 1.0. This ...)
-	TODO: check
+	NOT-FOR-US: code-projects
 CVE-2026-0569 (A vulnerability has been found in code-projects Online Music Site 1.0. ...)
-	TODO: check
+	NOT-FOR-US: code-projects
 CVE-2026-0568 (A flaw has been found in code-projects Online Music Site 1.0. The impa ...)
-	TODO: check
+	NOT-FOR-US: code-projects
 CVE-2026-0567 (A vulnerability was detected in code-projects Content Management Syste ...)
-	TODO: check
+	NOT-FOR-US: code-projects
 CVE-2026-0566 (A security vulnerability has been detected in code-projects Content Ma ...)
-	TODO: check
+	NOT-FOR-US: code-projects
 CVE-2026-0565 (A weakness has been identified in code-projects Content Management Sys ...)
-	TODO: check
+	NOT-FOR-US: code-projects
 CVE-2026-0547 (A vulnerability was found in PHPGurukul Online Course Registration up  ...)
-	TODO: check
+	NOT-FOR-US: PHPGurukul
 CVE-2026-0546 (A vulnerability was determined in code-projects Content Management Sys ...)
-	TODO: check
+	NOT-FOR-US: code-projects
 CVE-2025-9110 (An exposure of sensitive system information to an unauthorized control ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-69417 (In the plex.tv backend for Plex Media Server (PMS) through 2025-12-31, ...)
 	TODO: check
 CVE-2025-69416 (In the plex.tv backend for Plex Media Server (PMS) through 2025-12-31, ...)
@@ -57,73 +57,73 @@ CVE-2025-67158 (An authentication bypass in the /cgi-bin/jvsweb.cgi endpoint of
 CVE-2025-65125 (SQL injection in gosaliajainam/online-movie-booking 5.5 in movie_detai ...)
 	TODO: check
 CVE-2025-62857 (A cross-site scripting (XSS) vulnerability has been reported to affect ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-62852 (A buffer overflow vulnerability has been reported to affect several QN ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-62842 (An external control of file name or path vulnerability has been report ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-62840 (A generation of error message containing sensitive information vulnera ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-59389 (An SQL injection vulnerability has been reported to affect Hyper Data  ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-59387 (An SQL injection vulnerability has been reported to affect MARS (Multi ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-59384 (A path traversal vulnerability has been reported to affect Qfiling. Th ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-59381 (A path traversal vulnerability has been reported to affect several QNA ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-59380 (A path traversal vulnerability has been reported to affect several QNA ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-57705 (An allocation of resources without limits or throttling vulnerability  ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-54166 (An out-of-bounds read vulnerability has been reported to affect severa ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-54165 (An out-of-bounds read vulnerability has been reported to affect severa ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-54164 (An out-of-bounds read vulnerability has been reported to affect severa ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-53597 (A buffer overflow vulnerability has been reported to affect License Ce ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-53596 (A NULL pointer dereference vulnerability has been reported to affect s ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-53594 (A path traversal vulnerability has been reported to affect several pro ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-53593 (A buffer overflow vulnerability has been reported to affect several QN ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-53592 (A NULL pointer dereference vulnerability has been reported to affect s ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-53591 (A use of externally-controlled format string vulnerability has been re ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-53590 (A NULL pointer dereference vulnerability has been reported to affect s ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-53589 (A NULL pointer dereference vulnerability has been reported to affect s ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-53414 (A NULL pointer dereference vulnerability has been reported to affect s ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-53405 (A NULL pointer dereference vulnerability has been reported to affect s ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-52872 (A buffer overflow vulnerability has been reported to affect several QN ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-52871 (An out-of-bounds read vulnerability has been reported to affect Licens ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-52864 (A buffer overflow vulnerability has been reported to affect several QN ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-52863 (A buffer overflow vulnerability has been reported to affect several QN ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-52431 (A NULL pointer dereference vulnerability has been reported to affect s ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-52430 (A NULL pointer dereference vulnerability has been reported to affect s ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-52426 (A NULL pointer dereference vulnerability has been reported to affect s ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-48721 (A buffer overflow vulnerability has been reported to affect several QN ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-47208 (An allocation of resources without limits or throttling vulnerability  ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-45286 (A cross-site scripting (XSS) vulnerability in mccutchen httpbin v2.17. ...)
 	TODO: check
 CVE-2025-44013 (A NULL pointer dereference vulnerability has been reported to affect s ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2025-35002
 	REJECTED
 CVE-2025-35001
@@ -1351,7 +1351,7 @@ CVE-2025-15437 (A vulnerability was found in LigeroSmart up to 6.1.24. This affe
 CVE-2025-15436 (A vulnerability has been found in Yonyou KSOA 9.0. Affected by this is ...)
 	TODO: check
 CVE-2025-11837 (An improper control of generation of code vulnerability has been repor ...)
-	TODO: check
+	NOT-FOR-US: QNAP
 CVE-2024-55374 (REDCap 14.3.13 allows an attacker to enumerate usernames due to an obs ...)
 	TODO: check
 CVE-2026-21444 (libtpms, a library that provides software emulation of a Trusted Platf ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f3cc14c8d1192e84955cad71e4938bcbcfe45222

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f3cc14c8d1192e84955cad71e4938bcbcfe45222
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260102/243da526/attachment.htm>

More information about the debian-security-tracker-commits mailing list