Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e66c4570 by security tracker role at 2025-09-24T20:13:57+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,7 +1,7 @@
CVE-2025-9353 (The Themify Builder plugin for WordPress is vulnerable to
Stored Cross ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2025-9054 (The MultiLoca - WooCommerce Multi Locations Inventory
Management plugi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2025-9031 (Observable Timing Discrepancy vulnerability in DivvyDrive
Information ...)
TODO: check
CVE-2025-8869 (When extracting a tar archive pip may not check symbolic links
point i ...)
@@ -19,7 +19,7 @@ CVE-2025-59343 (tar-fs provides filesystem bindings for
tar-stream. Versions pri
CVE-2025-59305 (Improper authorization in the background migration endpoints
of Langfu ...)
TODO: check
CVE-2025-59251 (Microsoft Edge (Chromium-based) Remote Code Execution
Vulnerability)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2025-58457 (Improper permission check in ZooKeeper AdminServer lets
authorized cli ...)
TODO: check
CVE-2025-57354 (A vulnerability exists in the 'counterpart' library for
Node.js and th ...)
@@ -67,9 +67,9 @@ CVE-2025-55322 (Binding to an unrestricted ip address in
GitHub allows an unauth
CVE-2025-55178 (Llama Stack prior to version v0.2.20 accepted unverified
parameters in ...)
TODO: check
CVE-2025-52907 (Improper Input Validation vulnerability in TOTOLINK X6000R
allows Comm ...)
- TODO: check
+ NOT-FOR-US: Palo Alto Networks
CVE-2025-52906 (Improper Neutralization of Special Elements used in an OS
Command ('OS ...)
- TODO: check
+ NOT-FOR-US: Palo Alto Networks
CVE-2025-48869 (Horilla is a free and open source Human Resource Management
System (HR ...)
TODO: check
CVE-2025-48868 (Horilla is a free and open source Human Resource Management
System (HR ...)
@@ -77,49 +77,49 @@ CVE-2025-48868 (Horilla is a free and open source Human
Resource Management Syst
CVE-2025-48867 (Horilla is a free and open source Human Resource Management
System (HR ...)
TODO: check
CVE-2025-47329 (Memory corruption while handling invalid inputs in application
info se ...)
- TODO: check
+ NOT-FOR-US: Qualcomm
CVE-2025-47328 (Transient DOS while processing power control requests with
invalid ant ...)
- TODO: check
+ NOT-FOR-US: Qualcomm
CVE-2025-47327 (Memory corruption while encoding the image data.)
- TODO: check
+ NOT-FOR-US: Qualcomm
CVE-2025-47326 (Transient DOS while handling command data during power control
process ...)
- TODO: check
+ NOT-FOR-US: Qualcomm
CVE-2025-47318 (Transient DOS while parsing the EPTM test control message to
get the t ...)
- TODO: check
+ NOT-FOR-US: Qualcomm
CVE-2025-47317 (Memory corruption due to global buffer overflow when a test
command us ...)
- TODO: check
+ NOT-FOR-US: Qualcomm
CVE-2025-47316 (Memory corruption due to double free when multiple threads
race to set ...)
- TODO: check
+ NOT-FOR-US: Qualcomm
CVE-2025-47315 (Memory corruption while handling repeated memory unmap
requests from g ...)
- TODO: check
+ NOT-FOR-US: Qualcomm
CVE-2025-47314 (Memory corruption while processing data sent by FE driver.)
- TODO: check
+ NOT-FOR-US: Qualcomm
CVE-2025-41716 (The web application allows an unauthenticated remote attacker
to learn ...)
TODO: check
CVE-2025-41715 (The database for the web application is exposed without
authentication ...)
TODO: check
CVE-2025-27077 (Memory corruption while processing message in guest VM.)
- TODO: check
+ NOT-FOR-US: Qualcomm
CVE-2025-27037 (Memory corruption while processing config_dev IOCTL when
camera kernel ...)
- TODO: check
+ NOT-FOR-US: Qualcomm
CVE-2025-27036 (Information disclosure when Video engine escape input data is
less tha ...)
- TODO: check
+ NOT-FOR-US: Qualcomm
CVE-2025-27034 (Memory corruption while selecting the PLMN from SOR failed
list.)
- TODO: check
+ NOT-FOR-US: Qualcomm
CVE-2025-27033 (Information disclosure while running video usecase having
rogue firmwa ...)
- TODO: check
+ NOT-FOR-US: Qualcomm
CVE-2025-27032 (memory corruption while loading a PIL authenticated VM, when
authentic ...)
- TODO: check
+ NOT-FOR-US: Qualcomm
CVE-2025-27030 (information disclosure while invoking calibration data from
user space ...)
- TODO: check
+ NOT-FOR-US: Qualcomm
CVE-2025-23354 (NVIDIA Megatron-LM for all platforms contains a vulnerability
in the e ...)
- TODO: check
+ NOT-FOR-US: NVIDIA
CVE-2025-23353 (NVIDIA Megatron-LM for all platforms contains a vulnerability
in the m ...)
- TODO: check
+ NOT-FOR-US: NVIDIA
CVE-2025-23349 (NVIDIA Megatron-LM for all platforms contains a vulnerability
in the t ...)
- TODO: check
+ NOT-FOR-US: NVIDIA
CVE-2025-23348 (NVIDIA Megatron-LM for all platforms contains a vulnerability
in the p ...)
- TODO: check
+ NOT-FOR-US: NVIDIA
CVE-2025-23346 (NVIDIA CUDA Toolkit contains a vulnerability in cuobjdump,
where an un ...)
TODO: check
CVE-2025-23340 (NVIDIA CUDA Toolkit for all platforms contains a vulnerability
in the ...)
@@ -145,19 +145,19 @@ CVE-2025-23255 (NVIDIA CUDA Toolkit for all platforms
contains a vulnerability i
CVE-2025-23248 (NVIDIA CUDA Toolkit for all platforms contains a vulnerability
in the ...)
TODO: check
CVE-2025-21488 (Information disclosure while decoding this RTP packet headers
received ...)
- TODO: check
+ NOT-FOR-US: Qualcomm
CVE-2025-21487 (Information disclosure while decoding RTP packet received by
UE from t ...)
- TODO: check
+ NOT-FOR-US: Qualcomm
CVE-2025-21484 (Information disclosure when UE receives the RTP packet from
the networ ...)
- TODO: check
+ NOT-FOR-US: Qualcomm
CVE-2025-21483 (Memory corruption when the UE receives an RTP packet from the
network, ...)
- TODO: check
+ NOT-FOR-US: Qualcomm
CVE-2025-21482 (Cryptographic issue while performing RSA PKCS padding
decoding.)
- TODO: check
+ NOT-FOR-US: Qualcomm
CVE-2025-21481 (Memory corruption while performing private key encryption in
trusted a ...)
- TODO: check
+ NOT-FOR-US: Qualcomm
CVE-2025-21476 (Memory corruption when passing parameters to the Trusted
Virtual Machi ...)
- TODO: check
+ NOT-FOR-US: Qualcomm
CVE-2025-20365 (A vulnerability in the IPv6 Router Advertisement (RA) packet
processin ...)
TODO: check
CVE-2025-20364 (A vulnerability in the Device Analytics action frame
processing of Cis ...)
@@ -167,27 +167,27 @@ CVE-2025-20352 (A vulnerability in the Simple Network
Management Protocol (SNMP)
CVE-2025-20339 (A vulnerability in the access control list (ACL) processing of
IPv4 pa ...)
TODO: check
CVE-2025-20338 (A vulnerability in the CLI of Cisco IOS XE Software could
allow an aut ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2025-20334 (A vulnerability in the HTTP API subsystem of Cisco IOS XE
Software cou ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2025-20327 (A vulnerability in the web UI of Cisco IOS Software could
allow an aut ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2025-20316 (A vulnerability in the access control list (ACL) programming
of Cisco ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2025-20315 (A vulnerability in the Network-Based Application Recognition
(NBAR) fe ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2025-20314 (A vulnerability in Cisco IOS XE Software could allow an
authenticated, ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2025-20313 (Multiple vulnerabilities in Cisco IOS XE Software of could
allow an au ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2025-20312 (A vulnerability in the Simple Network Management Protocol
(SNMP) subsy ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2025-20311 (A vulnerability in the handling of certain Ethernet frames in
Cisco IO ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2025-20293 (A vulnerability in the Day One setup process of Cisco IOS XE
Software ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2025-20240 (A vulnerability in the web UI of Cisco IOS XE Software could
allow an ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2025-20160 (A vulnerability in the implementation of the TACACS+ protocol
in Cisco ...)
TODO: check
CVE-2025-20149 (A vulnerability in the CLI of Cisco IOS Software and Cisco IOS
XE Soft ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e66c45702131f04b50fe8f51a3ad5cd369f7bb35
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e66c45702131f04b50fe8f51a3ad5cd369f7bb35
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
