Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e27fd304 by Moritz Muehlenhoff at 2025-04-18T23:37:50+02:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -32,11 +32,11 @@ CVE-2025-32796 (Dify is an open-source LLM app development
platform. Prior to ve
CVE-2025-32795 (Dify is an open-source LLM app development platform. Prior to
version ...)
NOT-FOR-US: Dify
CVE-2025-32792 (SES safely executes third-party JavaScript 'strict' mode
programs in c ...)
- TODO: check
+ NOT-FOR-US: Node ses
CVE-2025-32790 (Dify is an open-source LLM app development platform. In
versions 0.6.8 ...)
NOT-FOR-US: Dify
CVE-2025-32442 (Fastify is a fast and low overhead web framework, for Node.js.
In vers ...)
- TODO: check
+ NOT-FOR-US: Fastify
CVE-2025-32434 (PyTorch is a Python package that provides tensor computation
with stro ...)
TODO: check
CVE-2025-32389 (NamelessMC is a free, easy to use & powerful website software
for Mine ...)
@@ -56,7 +56,7 @@ CVE-2025-2950 (IBM i 7.3, 7.4, 7.5, and 7.5 is vulnerable to
a host header injec
CVE-2025-2492 (An improper authentication control vulnerability exists in
AiCloud. Th ...)
NOT-FOR-US: ASUS
CVE-2025-29953 (Deserialization of Untrusted Data vulnerability in Apache
ActiveMQ NMS ...)
- TODO: check
+ NOT-FOR-US: Apache ActiveMQ NMS OpenWire Client
CVE-2025-29784 (NamelessMC is a free, easy to use & powerful website software
for Mine ...)
NOT-FOR-US: NamelessMC
CVE-2025-29625 (A buffer overflow vulnerability in Astrolog v7.70 allows
attackers to ...)
@@ -96,7 +96,7 @@ CVE-2025-28197 (Crawl4AI <=0.4.247 is vulnerable to SSRF in
/crawl4ai/async_disp
CVE-2025-28059 (An access control vulnerability in Nagios Network Analyzer
2024R1.0.3 ...)
NOT-FOR-US: Nagios Network Analyzer
CVE-2025-27599 (Element X Android is a Matrix Android Client provided by
element.io. P ...)
- TODO: check
+ NOT-FOR-US: Element X Android
CVE-2025-25985 (An issue in Macro-video Technologies Co.,Ltd V380E6_C1 IP
camera (Hw_H ...)
NOT-FOR-US: Macro-video Technologies
CVE-2025-25984 (An issue in Macro-video Technologies Co.,Ltd V380E6_C1 IP
camera (Hw_H ...)
@@ -108,7 +108,7 @@ CVE-2025-24914 (When installing Nessus to a non-default
location on a Windows ho
CVE-2025-1697 (A potential security vulnerability has been identified in the
HP Touch ...)
NOT-FOR-US: HP
CVE-2024-57493 (An issue in redoxOS relibc before commit 98aa4ea5 allows a
local attac ...)
- TODO: check
+ NOT-FOR-US: redoxOS relibc
CVE-2024-49808 (IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and
6.3.0 could ...)
NOT-FOR-US: IBM
CVE-2024-46089 (74cms <=3.33 is vulnerable to remote code execution (RCE) in
the backg ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e27fd3044734bc0817098288e59a8136808efcee
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e27fd3044734bc0817098288e59a8136808efcee
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
