Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
a6253eaf by Moritz Muehlenhoff at 2025-04-03T10:22:19+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5,7 +5,7 @@ CVE-2025-3153 (Concrete CMS version 9 below 9.4.0RC2 and 
versions below 8.5.20 a
 CVE-2025-3152 (A vulnerability classified as problematic has been found in 
caipeichao ...)
        TODO: check
 CVE-2025-3151 (A vulnerability was found in SourceCodester Gym Management 
System 1.0. ...)
-       TODO: check
+       NOT-FOR-US: SourceCodester
 CVE-2025-3150 (A vulnerability was found in itning Student Homework Management 
System ...)
        TODO: check
 CVE-2025-3149 (A vulnerability was found in itning Student Homework Management 
System ...)
@@ -13,37 +13,37 @@ CVE-2025-3149 (A vulnerability was found in itning Student 
Homework Management S
 CVE-2025-3148 (A vulnerability was found in codeprojects Product Management 
System 1. ...)
        TODO: check
 CVE-2025-3147 (A vulnerability has been found in PHPGurukul Boat Booking 
System 1.0 a ...)
-       TODO: check
+       NOT-FOR-US: PHPGurukul
 CVE-2025-3146 (A vulnerability, which was classified as critical, was found in 
PHPGur ...)
-       TODO: check
+       NOT-FOR-US: PHPGurukul
 CVE-2025-3145 (A vulnerability, which was classified as problematic, has been 
found i ...)
        TODO: check
 CVE-2025-3144 (A vulnerability classified as problematic was found in 
MindSpore 2.5.0 ...)
        TODO: check
 CVE-2025-3143 (A vulnerability classified as critical has been found in 
SourceCodeste ...)
-       TODO: check
+       NOT-FOR-US: SourceCodester
 CVE-2025-3142 (A vulnerability was found in SourceCodester Apartment Visitor 
Manageme ...)
-       TODO: check
+       NOT-FOR-US: SourceCodester
 CVE-2025-3141 (A vulnerability was found in SourceCodester Online Medicine 
Ordering S ...)
-       TODO: check
+       NOT-FOR-US: SourceCodester
 CVE-2025-3140 (A vulnerability was found in SourceCodester Online Medicine 
Ordering S ...)
-       TODO: check
+       NOT-FOR-US: SourceCodester
 CVE-2025-3139 (A vulnerability was found in code-projects Bus Reservation 
System 1.0  ...)
-       TODO: check
+       NOT-FOR-US: code-projects
 CVE-2025-3138 (A vulnerability has been found in PHPGurukul Online Security 
Guards Hi ...)
-       TODO: check
+       NOT-FOR-US: PHPGurukul
 CVE-2025-3137 (A vulnerability, which was classified as critical, was found in 
PHPGur ...)
-       TODO: check
+       NOT-FOR-US: PHPGurukul
 CVE-2025-3136 (A vulnerability, which was classified as problematic, has been 
found i ...)
        TODO: check
 CVE-2025-3135 (A vulnerability classified as critical was found in fcba_zzm 
ics-park  ...)
        TODO: check
 CVE-2025-3134 (A vulnerability classified as critical has been found in 
code-projects ...)
-       TODO: check
+       NOT-FOR-US: code-projects
 CVE-2025-3130 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: Drupal core and addons
 CVE-2025-3129 (Improper Restriction of Excessive Authentication Attempts 
vulnerabilit ...)
-       TODO: check
+       NOT-FOR-US: Drupal core and addons
 CVE-2025-3123 (A vulnerability, which was classified as critical, has been 
found in W ...)
        TODO: check
 CVE-2025-3122 (A vulnerability classified as problematic was found in 
WebAssembly wab ...)
@@ -51,11 +51,11 @@ CVE-2025-3122 (A vulnerability classified as problematic 
was found in WebAssembl
 CVE-2025-3121 (A vulnerability classified as problematic has been found in 
PyTorch 2. ...)
        TODO: check
 CVE-2025-3120 (A vulnerability was found in SourceCodester Apartment Visitors 
Managem ...)
-       TODO: check
+       NOT-FOR-US: SourceCodester
 CVE-2025-3119 (A vulnerability was found in SourceCodester Online Tutor Portal 
1.0. I ...)
-       TODO: check
+       NOT-FOR-US: SourceCodester
 CVE-2025-3118 (A vulnerability was found in SourceCodester Online Tutor Portal 
1.0. I ...)
-       TODO: check
+       NOT-FOR-US: SourceCodester
 CVE-2025-31484 (conda-forge infrastructure holds common configurations and 
settings fo ...)
        TODO: check
 CVE-2025-31479 (canonical/get-workflow-version-action is a GitHub composite 
action to  ...)
@@ -71,15 +71,15 @@ CVE-2025-30218 (Next.js is a React framework for building 
full-stack web applica
 CVE-2025-30080 (Signalling in Pexip Infinity 29 through 36.2 before 37.0 has 
improper  ...)
        TODO: check
 CVE-2025-2874 (The User Submitted Posts \u2013 Enable Users to Submit Posts 
from the  ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-2784 (A flaw was found in libsoup. The package is vulnerable to a 
heap buffe ...)
        TODO: check
 CVE-2025-2055 (The MapPress Maps for WordPress plugin before 2.94.9 does not 
sanitise ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-29991 (Yubico YubiKey 5.4.1 through 5.7.3 before 5.7.4 has an 
incorrect FIDO  ...)
        TODO: check
 CVE-2025-29719 (SourceCodester (rems) Employee Management System 1.0 is 
vulnerable to  ...)
-       TODO: check
+       NOT-FOR-US: SourceCodester
 CVE-2025-29085 (SQL injection vulnerability in vipshop Saturn v.3.5.1 and 
before allow ...)
        TODO: check
 CVE-2025-29063 (An issue in BL-AC2100 V1.0.4 and before allows a remote 
attacker to ex ...)
@@ -121,15 +121,15 @@ CVE-2025-21996 (In the Linux kernel, the following 
vulnerability has been resolv
 CVE-2025-21995 (In the Linux kernel, the following vulnerability has been 
resolved:  d ...)
        TODO: check
 CVE-2025-1663 (The Unlimited Elements For Elementor plugin for WordPress is 
vulnerabl ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-0257 (HCL DevOps Deploy / HCL Launch could allow unauthorized access 
to othe ...)
-       TODO: check
+       NOT-FOR-US: HCL
 CVE-2024-38392 (Pexip Infinity Connect before 1.13.0 lacks sufficient 
authenticity che ...)
        TODO: check
 CVE-2024-37917 (Pexip Infinity before 35.0 has improper input validation that 
allows r ...)
        TODO: check
 CVE-2024-13673 (The Big Boom Directory plugin for WordPress is vulnerable to 
Stored Cr ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-53868
        - trafficserver <unfixed>
        NOTE: https://www.openwall.com/lists/oss-security/2025/04/02/4



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a6253eaf18e44e8654ec03ffb2b22f360839af70

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a6253eaf18e44e8654ec03ffb2b22f360839af70
You're receiving this email because of your account on salsa.debian.org.


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to