Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
83f1e148 by Moritz Muehlenhoff at 2025-05-27T11:28:06+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -97,9 +97,9 @@ CVE-2025-33079 (IBM Controller 11.0.0, 11.0.1, and 11.1.0 
application could allo
 CVE-2025-2407 (Missing Authentication & Authorization in Web-API in Mobatime 
AMX MTAP ...)
        NOT-FOR-US: Mobatime AMX MTAPI
 CVE-2025-26211 (Gibbon before 29.0.00 allows CSRF.)
-       TODO: check
+       NOT-FOR-US: Gibbon
 CVE-2025-23393 (A Improper Neutralization of Script-Related HTML Tags in a Web 
Page (B ...)
-       TODO: check
+       NOT-FOR-US: Spacewalk
 CVE-2024-47090 (Improper neutralization of input in Nagvis before version 
1.9.47 which ...)
        - nagvis <unfixed>
        NOTE: 
https://github.com/NagVis/nagvis/commit/5baf87d30175357aaa39e42ff0d99fb0abefbc06
 (nagvis-1.9.47)
@@ -143,7 +143,7 @@ CVE-2025-5200 (A vulnerability was found in Open Asset 
Import Library Assimp 5.4
 CVE-2025-5196 (A vulnerability has been found in Wing FTP Server up to 7.4.3 
and clas ...)
        NOT-FOR-US: Wing FTP Server
 CVE-2025-5186 (A vulnerability was found in thinkgem JeeSite up to 5.11.1. It 
has bee ...)
-       TODO: check
+       NOT-FOR-US: JeeSite
 CVE-2025-5185 (A vulnerability was found in Summer Pearl Group Vacation Rental 
Manage ...)
        NOT-FOR-US: Summer Pearl Group Vacation Rental Management Platform
 CVE-2025-5184 (A vulnerability was found in Summer Pearl Group Vacation Rental 
Manage ...)
@@ -197,7 +197,7 @@ CVE-2025-39498 (Insertion of Sensitive Information Into 
Sent Data vulnerability
 CVE-2025-23394 (A UNIX Symbolic Link (Symlink) Following vulnerability in 
openSUSE Tum ...)
        TODO: check
 CVE-2025-23392 (A Improper Neutralization of Script-Related HTML Tags in a Web 
Page (B ...)
-       TODO: check
+       NOT-FOR-US: Spacewalk
 CVE-2025-1985 (Due to improper neutralization of input during web page 
generation (XS ...)
        NOT-FOR-US: Pepperl+Fuchs SE
 CVE-2025-37992 (In the Linux kernel, the following vulnerability has been 
resolved:  n ...)



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/83f1e148ff4c289aef96f60d1aa0cf1daa746d20

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/83f1e148ff4c289aef96f60d1aa0cf1daa746d20
You're receiving this email because of your account on salsa.debian.org.


_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to