Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
20e292af by Salvatore Bonaccorso at 2025-03-29T10:01:18+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -33,53 +33,53 @@ CVE-2025-2006 (The Inline Image Upload for BBPress plugin
for WordPress is vulne
CVE-2025-28256 (An issue in TOTOLINK A3100R V4.1.2cu.5247_B20211129 allows a
remote at ...)
NOT-FOR-US: TOTOLINK
CVE-2025-28254 (Cross Site Scripting vulnerability in Leantime v3.2.1 and
before allow ...)
- TODO: check
+ NOT-FOR-US: Leantime
CVE-2025-28097 (OneNav 1.1.0 is vulnerable to Cross Site Scripting (XSS) in
custom hea ...)
- TODO: check
+ NOT-FOR-US: OneNav
CVE-2025-28096 (OneNav 1.1.0 is vulnerable to Server-Side Request Forgery
(SSRF) in cu ...)
- TODO: check
+ NOT-FOR-US: OneNav
CVE-2025-28094 (shopxo v6.4.0 has a ssrf/xss vulnerability in multiple places.)
- TODO: check
+ NOT-FOR-US: ShopXO
CVE-2025-28093 (ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery
(SSRF) in E ...)
- TODO: check
+ NOT-FOR-US: ShopXO
CVE-2025-28092 (ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery
(SSRF) via ...)
- TODO: check
+ NOT-FOR-US: ShopXO
CVE-2025-28091 (maccms10 v2025.1000.4047 has a Server-Side Request Forgery
(SSRF) vuln ...)
- TODO: check
+ NOT-FOR-US: maccms10
CVE-2025-28090 (maccms10 v2025.1000.4047 is vulnerable to Server-Side Request
Forgery ...)
- TODO: check
+ NOT-FOR-US: maccms10
CVE-2025-28089 (maccms10 v2025.1000.4047 is vulnerable to Server-Side Request
Forgery ...)
- TODO: check
+ NOT-FOR-US: maccms10
CVE-2025-28087 (Sourcecodester Online Exam System 1.0 is vulnerable to SQL
Injection v ...)
TODO: check
CVE-2025-25579 (TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Command
Injecti ...)
NOT-FOR-US: TOTOLINK
CVE-2025-22953 (A SQL injection vulnerability exists in the Epicor HCM 2021
1.9, speci ...)
- TODO: check
+ NOT-FOR-US: Epicor HCM
CVE-2024-7577 (IBM InfoSphere Information Server 11.7 could disclose sensitive
user c ...)
NOT-FOR-US: IBM
CVE-2024-6875 (A vulnerability was found in the Infinispan component in Red
Hat Data ...)
- TODO: check
+ NOT-FOR-US: Infinispan component in Red Hat Data Grid
CVE-2024-58130 (In app/Controller/Component/RestResponseComponent.php in MISP
before 2 ...)
- TODO: check
+ NOT-FOR-US: MISP
CVE-2024-58129 (In MISP before 2.4.193, menu_custom_right_link_html parameters
can be ...)
- TODO: check
+ NOT-FOR-US: MISP
CVE-2024-58128 (In MISP before 2.4.193, menu_custom_right_link parameters can
be set v ...)
- TODO: check
+ NOT-FOR-US: MISP
CVE-2024-57083 (A prototype pollution in the component Module.mergeObjects
(redoc/bund ...)
TODO: check
CVE-2024-56975 (InvoicePlane (all versions tested as of December 2024)
v.1.6.11 and be ...)
- TODO: check
+ NOT-FOR-US: InvoicePlane
CVE-2024-51477 (IBM InfoSphere Information Server 11.7 could allow an
authenticated ...)
NOT-FOR-US: IBM
CVE-2024-43186 (IBM InfoSphere Information Server 11.7 could allow an
authenticated us ...)
NOT-FOR-US: IBM
CVE-2024-38988 (alizeait unflatto <= 1.0.2 was discovered to contain a
prototype pollu ...)
- TODO: check
+ NOT-FOR-US: alizeait unflatto
CVE-2024-38985 (janryWang products depath v1.0.6 and cool-path v1.1.2 were
discovered ...)
- TODO: check
+ NOT-FOR-US: janryWang products depath
CVE-2024-24292 (A Prototype Pollution issue in Aliconnect /sdk v.0.0.6 allows
an attac ...)
- TODO: check
+ NOT-FOR-US: Aliconnect
CVE-2024-23338
REJECTED
CVE-2024-13557 (The Shortcodes by United Themes plugin for WordPress is
vulnerable to ...)
@@ -246,7 +246,7 @@ CVE-2025-2909 (The lack of encryption in the DuoxMe
(formerly Blue) application
CVE-2025-2908 (The exposure of credentials in the call forwarding
configuration modul ...)
NOT-FOR-US: MeetMe
CVE-2025-2901 (A flaw was found in the JBoss EAP Management Console, where a
stored C ...)
- TODO: check
+ NOT-FOR-US: JBoss EAP Management Console
CVE-2025-2877 (A flaw was found in the Ansible Automation Platform's
Event-Driven Ans ...)
TODO: check
CVE-2025-2870 (Reflected Cross-Site Scripting (XSS) vulnerability in version
1.0 of t ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/20e292af8c977cc412b3b21c1d893643075bb863
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/20e292af8c977cc412b3b21c1d893643075bb863
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
