Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a33146cd by security tracker role at 2025-04-04T20:12:46+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,359 @@
+CVE-2025-3267 (A vulnerability, which was classified as critical, was found in
qinguo ...)
+ TODO: check
+CVE-2025-3266 (A vulnerability, which was classified as critical, has been
found in q ...)
+ TODO: check
+CVE-2025-3265 (A vulnerability classified as critical was found in PHPGurukul
e-Diary ...)
+ TODO: check
+CVE-2025-3259 (A vulnerability, which was classified as critical, has been
found in T ...)
+ TODO: check
+CVE-2025-3258 (A vulnerability classified as critical was found in PHPGurukul
Old Age ...)
+ TODO: check
+CVE-2025-3257 (A vulnerability classified as problematic has been found in
xujiangfei ...)
+ TODO: check
+CVE-2025-3256 (A vulnerability was found in xujiangfei admintwo 1.0. It has
been rate ...)
+ TODO: check
+CVE-2025-3255 (A vulnerability was found in xujiangfei admintwo 1.0. It has
been decl ...)
+ TODO: check
+CVE-2025-3254 (A vulnerability was found in xujiangfei admintwo 1.0. It has
been clas ...)
+ TODO: check
+CVE-2025-3253 (A vulnerability was found in xujiangfei admintwo 1.0 and
classified as ...)
+ TODO: check
+CVE-2025-3252 (A vulnerability has been found in xujiangfei admintwo 1.0 and
classifi ...)
+ TODO: check
+CVE-2025-3251 (A vulnerability, which was classified as problematic, was found
in xuj ...)
+ TODO: check
+CVE-2025-3250 (A vulnerability, which was classified as problematic, has been
found i ...)
+ TODO: check
+CVE-2025-3249 (A vulnerability classified as critical was found in TOTOLINK
A6000R 1. ...)
+ TODO: check
+CVE-2025-3245 (A vulnerability was found in itsourcecode Library Management
System 1. ...)
+ TODO: check
+CVE-2025-3244 (A vulnerability was found in SourceCodester Web-based Pharmacy
Product ...)
+ TODO: check
+CVE-2025-3243 (A vulnerability was found in code-projects Patient Record
Management S ...)
+ TODO: check
+CVE-2025-3242 (A vulnerability has been found in PHPGurukul e-Diary Management
System ...)
+ TODO: check
+CVE-2025-3241 (A vulnerability, which was classified as problematic, was found
in zha ...)
+ TODO: check
+CVE-2025-3240 (A vulnerability, which was classified as critical, has been
found in P ...)
+ TODO: check
+CVE-2025-3239 (A vulnerability classified as critical was found in PHPGurukul
Online ...)
+ TODO: check
+CVE-2025-3238 (A vulnerability classified as critical has been found in
PHPGurukul On ...)
+ TODO: check
+CVE-2025-3237 (A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has
been r ...)
+ TODO: check
+CVE-2025-3236 (A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has
been d ...)
+ TODO: check
+CVE-2025-3235 (A vulnerability was found in PHPGurukul Old Age Home Management
System ...)
+ TODO: check
+CVE-2025-3231 (A vulnerability was found in PHPGurukul Zoo Management System
2.1. It ...)
+ TODO: check
+CVE-2025-3229 (A vulnerability was found in PHPGurukul Restaurant Table
Booking Syste ...)
+ TODO: check
+CVE-2025-3189 (Stored Cross-Site Scripting (XSS) in DoWISP in versions prior
to 1.16. ...)
+ TODO: check
+CVE-2025-32280 (Cross-Site Request Forgery (CSRF) vulnerability in weDevs WP
Project M ...)
+ TODO: check
+CVE-2025-32278 (Cross-Site Request Forgery (CSRF) vulnerability in wprio Table
Block b ...)
+ TODO: check
+CVE-2025-32277 (Missing Authorization vulnerability in Ateeq Rafeeq
RepairBuddy allows ...)
+ TODO: check
+CVE-2025-32276 (Cross-Site Request Forgery (CSRF) vulnerability in Qu\xfd
L\xea 91 Adm ...)
+ TODO: check
+CVE-2025-32274 (Cross-Site Request Forgery (CSRF) vulnerability in axew3 WP
w3all phpB ...)
+ TODO: check
+CVE-2025-32273 (Cross-Site Request Forgery (CSRF) vulnerability in freetobook
Freetobo ...)
+ TODO: check
+CVE-2025-32272 (Cross-Site Request Forgery (CSRF) vulnerability in PickPlugins
Wishlis ...)
+ TODO: check
+CVE-2025-32271 (Cross-Site Request Forgery (CSRF) vulnerability in ablancodev
Woocomme ...)
+ TODO: check
+CVE-2025-32270 (Cross-Site Request Forgery (CSRF) vulnerability in Broadstreet
Broadst ...)
+ TODO: check
+CVE-2025-32269 (Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks
WP Zendes ...)
+ TODO: check
+CVE-2025-32268 (Cross-Site Request Forgery (CSRF) vulnerability in www.15.to
QR Code T ...)
+ TODO: check
+CVE-2025-32267 (Cross-Site Request Forgery (CSRF) vulnerability in wpzinc Post
to Soci ...)
+ TODO: check
+CVE-2025-32266 (Cross-Site Request Forgery (CSRF) vulnerability in wp-buy 404
Image Re ...)
+ TODO: check
+CVE-2025-32265 (Cross-Site Request Forgery (CSRF) vulnerability in Hossni
Mubarak JobW ...)
+ TODO: check
+CVE-2025-32264 (Cross-Site Request Forgery (CSRF) vulnerability in Saiful
Islam UltraA ...)
+ TODO: check
+CVE-2025-32263 (Cross-Site Request Forgery (CSRF) vulnerability in BeRocket
Sequential ...)
+ TODO: check
+CVE-2025-32262 (Cross-Site Request Forgery (CSRF) vulnerability in Robert D
Payne RDP ...)
+ TODO: check
+CVE-2025-32261 (Cross-Site Request Forgery (CSRF) vulnerability in Kuppuraj
Advanced A ...)
+ TODO: check
+CVE-2025-32258 (Missing Authorization vulnerability in InfoGiants Simple
Website Logo ...)
+ TODO: check
+CVE-2025-32257 (Exposure of Sensitive System Information Due to Uncleared
Debug Inform ...)
+ TODO: check
+CVE-2025-32256 (Missing Authorization vulnerability in devsoftbaltic SurveyJS
allows A ...)
+ TODO: check
+CVE-2025-32255 (Exposure of Sensitive System Information to an Unauthorized
Control Sp ...)
+ TODO: check
+CVE-2025-32254 (Missing Authorization vulnerability in Iqonic Design WPBookit
allows A ...)
+ TODO: check
+CVE-2025-32253 (Missing Authorization vulnerability in ComMotion Course
Booking System ...)
+ TODO: check
+CVE-2025-32252 (Missing Authorization vulnerability in blackandwhitedigital WP
Genealo ...)
+ TODO: check
+CVE-2025-32251 (Exposure of Sensitive System Information to an Unauthorized
Control Sp ...)
+ TODO: check
+CVE-2025-32250 (Cross-Site Request Forgery (CSRF) vulnerability in rollbar
Rollbar all ...)
+ TODO: check
+CVE-2025-32249 (Cross-Site Request Forgery (CSRF) vulnerability in
designinvento Direc ...)
+ TODO: check
+CVE-2025-32248 (Cross-Site Request Forgery (CSRF) vulnerability in SwiftXR
SwiftXR (3D ...)
+ TODO: check
+CVE-2025-32247 (Cross-Site Request Forgery (CSRF) vulnerability in ABCdatos AI
Content ...)
+ TODO: check
+CVE-2025-32246 (Missing Authorization vulnerability in Tim Nguyen 1-Click
Backup & ...)
+ TODO: check
+CVE-2025-32241 (Cross-Site Request Forgery (CSRF) vulnerability in
CleverReach\xae Off ...)
+ TODO: check
+CVE-2025-32239 (Missing Authorization vulnerability in Joao Romao Social Share
Buttons ...)
+ TODO: check
+CVE-2025-32238 (Generation of Error Message Containing Sensitive Information
vulnerabi ...)
+ TODO: check
+CVE-2025-32237 (Missing Authorization vulnerability in Stylemix MasterStudy
LMS allows ...)
+ TODO: check
+CVE-2025-32235 (Missing Authorization vulnerability in sonaar MP3 Audio Player
for Mus ...)
+ TODO: check
+CVE-2025-32234 (Missing Authorization vulnerability in aleswebs AdMail \u2013
Multilin ...)
+ TODO: check
+CVE-2025-32233 (Missing Authorization vulnerability in WP Chill Revive.so
\u2013 Bulk ...)
+ TODO: check
+CVE-2025-32232 (Missing Authorization vulnerability in ERA404 StaffList allows
Exploit ...)
+ TODO: check
+CVE-2025-32231 (Missing Authorization vulnerability in Bookingor Bookingor
allows Expl ...)
+ TODO: check
+CVE-2025-32229 (Missing Authorization vulnerability in Bowo Variable Inspector
allows ...)
+ TODO: check
+CVE-2025-32226 (Missing Authorization vulnerability in Anzar Ahmed Display
product var ...)
+ TODO: check
+CVE-2025-32225 (Missing Authorization vulnerability in WP Event Manager WP
Event Manag ...)
+ TODO: check
+CVE-2025-32224 (Missing Authorization vulnerability in shivammani Privyr CRM
allows Ex ...)
+ TODO: check
+CVE-2025-32220 (Missing Authorization vulnerability in Dimitri Grassi Salon
booking sy ...)
+ TODO: check
+CVE-2025-32219 (Missing Authorization vulnerability in Syntactics, Inc. eaSYNC
allows ...)
+ TODO: check
+CVE-2025-32218 (Missing Authorization vulnerability in RealMag777 TableOn
\u2013 WordP ...)
+ TODO: check
+CVE-2025-32217 (Missing Authorization vulnerability in WP Messiah Ai Image Alt
Text Ge ...)
+ TODO: check
+CVE-2025-32207 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32204 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
+ TODO: check
+CVE-2025-32203 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
+ TODO: check
+CVE-2025-32201 (Missing Authorization vulnerability in Xpro Xpro Theme Builder
allows ...)
+ TODO: check
+CVE-2025-32200 (Improper Neutralization of Script-Related HTML Tags in a Web
Page (Bas ...)
+ TODO: check
+CVE-2025-32197 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32196 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32195 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32194 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32193 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32192 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32191 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32190 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32189 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32188 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32187 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32186 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32185 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32184 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32183 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32182 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32181 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32179 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32178 (Missing Authorization vulnerability in 6Storage 6Storage
Rentals allow ...)
+ TODO: check
+CVE-2025-32177 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32176 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32175 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32174 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32173 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32172 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32171 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32170 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32169 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32168 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32167 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32166 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32165 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32163 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32162 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32161 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32159 (Improper Control of Filename for Include/Require Statement in
PHP Prog ...)
+ TODO: check
+CVE-2025-32157 (Improper Control of Filename for Include/Require Statement in
PHP Prog ...)
+ TODO: check
+CVE-2025-32156 (Improper Control of Filename for Include/Require Statement in
PHP Prog ...)
+ TODO: check
+CVE-2025-32155 (Improper Control of Filename for Include/Require Statement in
PHP Prog ...)
+ TODO: check
+CVE-2025-32154 (Improper Control of Filename for Include/Require Statement in
PHP Prog ...)
+ TODO: check
+CVE-2025-32153 (Improper Control of Filename for Include/Require Statement in
PHP Prog ...)
+ TODO: check
+CVE-2025-32152 (Improper Control of Filename for Include/Require Statement in
PHP Prog ...)
+ TODO: check
+CVE-2025-32151 (Improper Control of Filename for Include/Require Statement in
PHP Prog ...)
+ TODO: check
+CVE-2025-32150 (Improper Control of Filename for Include/Require Statement in
PHP Prog ...)
+ TODO: check
+CVE-2025-32149 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
+ TODO: check
+CVE-2025-32148 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
+ TODO: check
+CVE-2025-32147 (Missing Authorization vulnerability in coothemes Easy WP
Optimizer all ...)
+ TODO: check
+CVE-2025-32146 (Improper Control of Filename for Include/Require Statement in
PHP Prog ...)
+ TODO: check
+CVE-2025-32142 (Improper Control of Filename for Include/Require Statement in
PHP Prog ...)
+ TODO: check
+CVE-2025-32141 (Improper Control of Filename for Include/Require Statement in
PHP Prog ...)
+ TODO: check
+CVE-2025-32138 (Improper Restriction of XML External Entity Reference
vulnerability in ...)
+ TODO: check
+CVE-2025-32137 (Relative Path Traversal vulnerability in Cristi\xe1n
L\xe1vaque s2Memb ...)
+ TODO: check
+CVE-2025-32136 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32135 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32134 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32133 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32132 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32131 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32130 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32129 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-32127 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
+ TODO: check
+CVE-2025-32126 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
+ TODO: check
+CVE-2025-32125 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
+ TODO: check
+CVE-2025-32124 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
+ TODO: check
+CVE-2025-32122 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
+ TODO: check
+CVE-2025-32121 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
+ TODO: check
+CVE-2025-32120 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
+ TODO: check
+CVE-2025-32118 (Unrestricted Upload of File with Dangerous Type vulnerability
in Niteo ...)
+ TODO: check
+CVE-2025-32113 (Cross-Site Request Forgery (CSRF) vulnerability in Renzo
Tejada Libro ...)
+ TODO: check
+CVE-2025-32112 (Cross-Site Request Forgery (CSRF) vulnerability in OTWthemes
Sidebar M ...)
+ TODO: check
+CVE-2025-31480 (aiven-extras is a PostgreSQL extension. This is a privilege
escalation ...)
+ TODO: check
+CVE-2025-31421 (Insertion of Sensitive Information into Externally-Accessible
File or ...)
+ TODO: check
+CVE-2025-31420 (Incorrect Privilege Assignment vulnerability in Tomdever
wpForo Forum ...)
+ TODO: check
+CVE-2025-31418 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-31416 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-31407 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-31405 (Improper Control of Filename for Include/Require Statement in
PHP Prog ...)
+ TODO: check
+CVE-2025-31403 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
+ TODO: check
+CVE-2025-31389 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-31384 (Improper Neutralization of Script-Related HTML Tags in a Web
Page (Bas ...)
+ TODO: check
+CVE-2025-31381 (Missing Authorization vulnerability in shiptrack Booking
Calendar and ...)
+ TODO: check
+CVE-2025-31130 (gitoxide is an implementation of git written in Rust. Before
0.42.0, g ...)
+ TODO: check
+CVE-2025-2798 (The Woffice CRM theme for WordPress is vulnerable to
Authentication By ...)
+ TODO: check
+CVE-2025-2245 (A server-side request forgery (SSRF) vulnerability exists in
the Bitde ...)
+ TODO: check
+CVE-2025-2244 (A vulnerability in thesendMailFromRemoteSourcemethod in
Emails.php as ...)
+ TODO: check
+CVE-2025-2243 (A server-side request forgery (SSRF) vulnerability in
Bitdefender Grav ...)
+ TODO: check
+CVE-2025-29477 (An issue in fluent-bit v.3.7.2 allows a local attacker to
cause a deni ...)
+ TODO: check
+CVE-2025-29476 (Buffer Overflow vulnerability in compress_chunk_fuzzer with
oss-fuzz o ...)
+ TODO: check
+CVE-2025-28146 (Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3
1.0.15 was ...)
+ TODO: check
+CVE-2025-27520 (BentoML is a Python library for building online serving
systems optimi ...)
+ TODO: check
+CVE-2025-25178 (Software installed and run as a non-privileged user may
conduct improp ...)
+ TODO: check
+CVE-2025-22285 (Missing Authorization vulnerability in Eniture Technology
Pallet Packa ...)
+ TODO: check
+CVE-2025-22282 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-22281 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2025-1865 (The kernel driver, accessible to low-privileged users, exposes
a funct ...)
+ TODO: check
+CVE-2025-0468 (Software installed and run as a non-privileged user may conduct
improp ...)
+ TODO: check
+CVE-2024-51800 (Incorrect Privilege Assignment vulnerability in Favethemes
Homey allow ...)
+ TODO: check
CVE-2025-3220 (A vulnerability was found in PHPGurukul e-Diary Management
System 1.0. ...)
NOT-FOR-US: PHPGurukul
CVE-2025-3219 (A vulnerability was found in CodeCanyon Perfex CRM 3.2.1. It
has been ...)
@@ -2992,7 +3348,7 @@ CVE-2025-2861 (SaTECH BCU in its firmware version 2.1.3
uses the HTTP protocol.
NOT-FOR-US: SaTECH BCU
CVE-2025-2860 (SaTECH BCU in its firmware version 2.1.3, allows an
authenticated atta ...)
NOT-FOR-US: SaTECH BCU
-CVE-2025-2859 (An attacker with access to the network where the vulnerable
device is ...)
+CVE-2025-2859 (An attacker with networkaccess,could capture traffic and obtain
user c ...)
NOT-FOR-US: saTECH BCU
CVE-2025-2858 (Privilege escalation vulnerability in the saTECH BCU firmware
version ...)
NOT-FOR-US: saTECH BCU
@@ -4236,7 +4592,8 @@ CVE-2025-30164 (Icinga Web 2 is an open source monitoring
web interface, framewo
NOTE:
https://github.com/Icinga/icingaweb2/security/advisories/GHSA-8r73-6686-wv8q
CVE-2025-30073 (An issue was discovered in OPC cardsystems Webapp Aufwertung
2.1.0. Th ...)
NOT-FOR-US: OPC cardsystems Webapp Aufwertung
-CVE-2025-2825 (CrushFTP versions 10.0.0 through 10.8.3 and 11.0.0 through
11.3.0 are ...)
+CVE-2025-2825
+ REJECTED
NOT-FOR-US: CrushFTP
CVE-2025-2820 (An authenticated attacker can compromise the availability of
the devic ...)
NOT-FOR-US: Bizerba
@@ -7418,7 +7775,7 @@ CVE-2024-11284 (The WP JobHunt plugin for WordPress is
vulnerable to privilege e
NOT-FOR-US: WordPress plugin
CVE-2024-11283 (The WP JobHunt plugin for WordPress is vulnerable to
authentication by ...)
NOT-FOR-US: WordPress plugin
-CVE-2024-11235
+CVE-2024-11235 (In PHP versions 8.3.* before 8.3.19 and 8.4.* before 8.4.5, a
code seq ...)
- php8.4 8.4.5-1
NOTE:
https://github.com/php/php-src/security/advisories/GHSA-rwp7-7vc6-8477
CVE-2025-1861 (In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from
8.3.* ...)
@@ -18107,7 +18464,8 @@ CVE-2025-21700 (In the Linux kernel, the following
vulnerability has been resolv
NOTE:
https://git.kernel.org/linus/bc50835e83f60f56e9bec2b392fb5544f250fb6f (6.14-rc1)
CVE-2024-3303 (An issue was discovered in GitLab EE affecting all versions
starting f ...)
- gitlab <not-affected> (Specific to EE)
-CVE-2025-0998 (Out of bounds memory access in V8 in Google Chrome prior to
133.0.6943 ...)
+CVE-2025-0998
+ REJECTED
{DSA-5866-1}
- chromium 133.0.6943.98-1
[bullseye] - chromium <end-of-life> (see #1061268)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a33146cdea58d2bf5e84067fbbad853375f1747e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a33146cdea58d2bf5e84067fbbad853375f1747e
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits