Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
c081e8ce by security tracker role at 2025-05-28T20:14:15+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,13 +1,13 @@
CVE-2025-5299 (A vulnerability was found in SourceCodester Client Database
Management ...)
- TODO: check
+ NOT-FOR-US: SourceCodester
CVE-2025-5298 (A vulnerability, which was classified as critical, was found in
Campco ...)
- TODO: check
+ NOT-FOR-US: Campcodes
CVE-2025-5297 (A vulnerability, which was classified as critical, has been
found in S ...)
- TODO: check
+ NOT-FOR-US: SourceCodester
CVE-2025-5295 (A vulnerability classified as critical was found in FreeFloat
FTP Serv ...)
TODO: check
CVE-2025-5287 (The Likes and Dislikes Plugin plugin for WordPress is
vulnerable to SQ ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2025-5277 (aws-mcp-server MCP server is vulnerable to command injection.
An attac ...)
TODO: check
CVE-2025-5257 (SummaryThis advisory addresses a security vulnerability in
Mautic wher ...)
@@ -15,9 +15,9 @@ CVE-2025-5257 (SummaryThis advisory addresses a security
vulnerability in Mautic
CVE-2025-5256 (SummaryThis advisory addresses an Open Redirection
vulnerability in Ma ...)
TODO: check
CVE-2025-4963 (The WP Extended plugin for WordPress is vulnerable to Stored
Cross-Sit ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2025-4493 (Improper privilege assignment in PAM JIT privilege sets in
Devolutions ...)
- TODO: check
+ NOT-FOR-US: Devolutions
CVE-2025-4134 (Lack of file validation in do_update_vps in Avast Business
Antivirus f ...)
TODO: check
CVE-2025-48931 (The TeleMessage service through 2025-05-05 relies on MD5 for
password ...)
@@ -43,9 +43,9 @@ CVE-2025-48746 (Netwrix Directory Manager (formerly Imanami
GroupID) v.11.0.0.0
CVE-2025-47748 (Netwrix Directory Manager v.11.0.0.0 and before & after
v.11.1.25134.0 ...)
TODO: check
CVE-2025-45997 (Sourcecodester Web-based Pharmacy Product Management System
v.1.0 has ...)
- TODO: check
+ NOT-FOR-US: SourceCodester
CVE-2025-45343 (An issue in Tenda W18E v.2.0 v.16.01.0.11 allows an attacker
to execut ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2025-40673 (A Missing Authorization vulnerability has been found in
DinoRANK. This ...)
TODO: check
CVE-2025-40651 (Reflected Cross-Site Scripting (XSS) vulnerability in Real
Easy Store. ...)
@@ -53,9 +53,9 @@ CVE-2025-40651 (Reflected Cross-Site Scripting (XSS)
vulnerability in Real Easy
CVE-2025-3864 (Hackney fails to properly release HTTP connections to the pool
after h ...)
TODO: check
CVE-2025-3357 (IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack
19could all ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2025-36572 (Dell PowerStore, version(s) 4.0.0.0, contain(s) an Use of
Hard-coded C ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2025-1753 (LLama-Index CLI version v0.12.20 contains an OS command
injection vuln ...)
TODO: check
CVE-2025-1461 (Improper neutralization of the value of the 'eventMoreText'
property o ...)
@@ -67,7 +67,7 @@ CVE-2024-57337 (An arbitrary file upload vulnerability in the
opcode 500 functio
CVE-2024-57336 (Incorrect access control in M2Soft CROWNIX Report & ERS
affected v7.x ...)
TODO: check
CVE-2024-51453 (IBM Sterling Secure Proxy 6.2.0.0 through 6.2.0.1 could allow
a remote ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2024-47057 (SummaryThis advisory addresses a security vulnerability in
Mautic rela ...)
TODO: check
CVE-2024-47056 (SummaryThis advisory addresses a security vulnerability in
Mautic wher ...)
@@ -75,7 +75,7 @@ CVE-2024-47056 (SummaryThis advisory addresses a security
vulnerability in Mauti
CVE-2024-47055 (SummaryThis advisory addresses a security vulnerability in
Mautic rela ...)
TODO: check
CVE-2024-38341 (IBM Sterling Secure Proxy 6.0.0.0 through 6.0.3.1, 6.1.0.0
through 6.1 ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2025-48734 (Improper Access Control vulnerability in Apache Commons. A
special ...)
- commons-beanutils 1.10.1-1
NOTE: https://www.openwall.com/lists/oss-security/2025/05/28/6
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c081e8ceb37d35fb00207934da8cdbb7b347ab09
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c081e8ceb37d35fb00207934da8cdbb7b347ab09
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
