Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
94c46995 by Salvatore Bonaccorso at 2025-08-27T10:27:40+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,7 +1,7 @@
CVE-2025-9514 (A vulnerability has been found in macrozheng mall up to 1.0.3.
This im ...)
- TODO: check
+ NOT-FOR-US: macrozheng mall
CVE-2025-9513 (A flaw has been found in editso fuso up to 1.0.4-beta.7. This
affects ...)
- TODO: check
+ NOT-FOR-US: editso fuso
CVE-2025-9511 (A vulnerability was identified in itsourcecode Apartment
Management Sy ...)
NOT-FOR-US: itsourcecode System
CVE-2025-9510 (A security vulnerability has been detected in itsourcecode
Apartment M ...)
@@ -35,7 +35,7 @@ CVE-2025-57846 (Multiple i-\u30d5\u30a3\u30eb\u30bf\u30fc
products contain an is
CVE-2025-57820 (Svelte devalue is a utility library. Prior to version 5.3.2, a
string ...)
TODO: check
CVE-2025-57797 (Incorrect privilege assignment vulnerability exists in
ScanSnap Manage ...)
- TODO: check
+ NOT-FOR-US: ScanSnap Manager installers
CVE-2025-49040 (Cross-Site Request Forgery (CSRF) vulnerability in Backup Bolt
allows ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2025-49039 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
@@ -45,13 +45,13 @@ CVE-2025-49035 (Improper Neutralization of Input During Web
Page Generation ('Cr
CVE-2025-48081 (Path Traversal: '.../...//' vulnerability in Printeers
Printeers Print ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2025-35115 (Agiloft Release 28 downloads critical system packages over an
insecure ...)
- TODO: check
+ NOT-FOR-US: Agiloft
CVE-2025-35114 (Agiloft Release 28 contains several accounts with default
credentials ...)
- TODO: check
+ NOT-FOR-US: Agiloft
CVE-2025-35113 (Agiloft Release 28 does not properly neutralize special
elements used ...)
- TODO: check
+ NOT-FOR-US: Agiloft
CVE-2025-35112 (Agiloft Release 28 contains an XML External Entities
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Agiloft
CVE-2025-26417 (In checkWhetherCallingAppHasAccess of DownloadProvider.java,
there is ...)
TODO: check
CVE-2025-22413 (In multiple functions of hyp-main.c, there is a possible
privilege esc ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/94c46995ef01a0014f7b19e104aa2635ac68d002
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/94c46995ef01a0014f7b19e104aa2635ac68d002
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
