Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f9997465 by Moritz Muehlenhoff at 2025-04-03T11:57:59+02:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -8,7 +8,7 @@ CVE-2025-3154 (Out-of-bounds array write in Xpdf 4.05 and
earlier, triggered by
CVE-2025-3153 (Concrete CMS version 9 below 9.4.0RC2 and versions below 8.5.20
are vu ...)
NOT-FOR-US: Concrete CMS
CVE-2025-3152 (A vulnerability classified as problematic has been found in
caipeichao ...)
- TODO: check
+ NOT-FOR-US: ThinkOX
CVE-2025-3151 (A vulnerability was found in SourceCodester Gym Management
System 1.0. ...)
NOT-FOR-US: SourceCodester
CVE-2025-3150 (A vulnerability was found in itning Student Homework Management
System ...)
@@ -50,7 +50,7 @@ CVE-2025-3130 (Improper Neutralization of Input During Web
Page Generation ('Cro
CVE-2025-3129 (Improper Restriction of Excessive Authentication Attempts
vulnerabilit ...)
NOT-FOR-US: Drupal core and addons
CVE-2025-3123 (A vulnerability, which was classified as critical, has been
found in W ...)
- TODO: check
+ NOT-FOR-US: WonderCMS
CVE-2025-3122 (A vulnerability classified as problematic was found in
WebAssembly wab ...)
TODO: check
CVE-2025-3121 (A vulnerability classified as problematic has been found in
PyTorch 2. ...)
@@ -66,15 +66,15 @@ CVE-2025-31484 (conda-forge infrastructure holds common
configurations and setti
CVE-2025-31479 (canonical/get-workflow-version-action is a GitHub composite
action to ...)
NOT-FOR-US: canonical/get-workflow-version-action GitHub action
CVE-2025-31477 (The Tauri shell plugin allows access to the system shell.
Prior to 2.2 ...)
- TODO: check
+ NOT-FOR-US: Tauri plugin
CVE-2025-31334 (Issue that bypasses the "Mark of the Web" security warning
function fo ...)
TODO: check
CVE-2025-30485 (UNIX symbolic link (Symlink) following issue exists in
FutureNet NXR s ...)
- TODO: check
+ NOT-FOR-US: FutureNet devices
CVE-2025-30218 (Next.js is a React framework for building full-stack web
applications. ...)
- TODO: check
+ NOT-FOR-US: Next.js
CVE-2025-30080 (Signalling in Pexip Infinity 29 through 36.2 before 37.0 has
improper ...)
- TODO: check
+ NOT-FOR-US: Pexip Infinity
CVE-2025-2874 (The User Submitted Posts \u2013 Enable Users to Submit Posts
from the ...)
NOT-FOR-US: WordPress plugin
CVE-2025-2784 (A flaw was found in libsoup. The package is vulnerable to a
heap buffe ...)
@@ -199,7 +199,7 @@ CVE-2025-20120 (A vulnerability in the web-based management
interface of Cisco E
CVE-2025-0154 (IBM TXSeries for Multiplatforms 9.1 and 11.1 could disclose
sensitive ...)
NOT-FOR-US: IBM
CVE-2025-0014 (Incorrect default permissions on the AMD Ryzen(TM) AI
installation fol ...)
- TODO: check
+ NOT-FOR-US: AMD
CVE-2024-56476 (IBM TXSeries for Multiplatforms 9.1 and 11.1 could allow an
attacker t ...)
NOT-FOR-US: IBM
CVE-2024-56475 (IBM TXSeries for Multiplatforms 9.1 and 11.1is vulnerable to
cross-sit ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f9997465b33da6e9717906b08d8d801c268049a5
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f9997465b33da6e9717906b08d8d801c268049a5
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
