Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
6fe2bbd6 by Salvatore Bonaccorso at 2025-11-17T22:14:24+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -31,15 +31,15 @@ CVE-2025-58410 (Software installed and run as a
non-privileged user may conduct
CVE-2025-58407 (Kernel or driver software installed on a Guest VM may post
improper co ...)
NOT-FOR-US: Imagination Technologies
CVE-2025-55059 (CWE-79 Improper Neutralization of Input During Web Page
Generation (XS ...)
- TODO: check
+ NOT-FOR-US: Rumpus
CVE-2025-55058 (CWE-20 Improper Input Validation)
- TODO: check
+ NOT-FOR-US: Rumpus
CVE-2025-55057 (Multiple CWE-352 Cross-Site Request Forgery (CSRF))
- TODO: check
+ NOT-FOR-US: Rumpus
CVE-2025-55056 (Multiple CWE-79 Improper Neutralization of Input During Web
Page Gener ...)
- TODO: check
+ NOT-FOR-US: Rumpus
CVE-2025-55055 (CWE-78 Improper Neutralization of Special Elements used in an
OS Comma ...)
- TODO: check
+ NOT-FOR-US: Rumpus
CVE-2025-4321 (In a Bluetooth device, using RS9116-WiseConnect SDK experiences
a Deni ...)
NOT-FOR-US: Silicon Labs
CVE-2025-40936 (A vulnerability has been identified in PS/IGES Parasolid
Translator Co ...)
@@ -47,9 +47,9 @@ CVE-2025-40936 (A vulnerability has been identified in
PS/IGES Parasolid Transla
CVE-2025-40834 (A vulnerability has been identified in Mendix RichText (All
versions > ...)
NOT-FOR-US: Siemens
CVE-2025-34323 (Nagios Log Server versions prior to 2026R1.0.1 are vulnerable
to local ...)
- TODO: check
+ NOT-FOR-US: Nagios Log Server
CVE-2025-34322 (Nagios Log Server versions prior to 2026R1.0.1 contain an
authenticate ...)
- TODO: check
+ NOT-FOR-US: Nagios Log Server
CVE-2025-13319 (An injection vulnerability has been discovered in the API
feature in D ...)
NOT-FOR-US: Digi
CVE-2025-13310
@@ -65,7 +65,7 @@ CVE-2025-13291 (A vulnerability was found in Campcodes
Supplier Management Syste
CVE-2025-13290 (A vulnerability has been found in code-projects Simple Food
Ordering S ...)
NOT-FOR-US: code-projects
CVE-2025-13289 (A vulnerability was detected in 1000projects Design &
Development of S ...)
- TODO: check
+ NOT-FOR-US: 1000projects Design & Development of Student Database
Management System
CVE-2025-13288 (A security vulnerability has been detected in Tenda CH22
1.0.0.1. This ...)
NOT-FOR-US: Tenda
CVE-2025-13287 (A weakness has been identified in itsourcecode Online Voting
System 1. ...)
@@ -83,9 +83,9 @@ CVE-2025-13278 (A vulnerability has been found in
projectworlds Advanced Library
CVE-2025-13277 (A flaw has been found in code-projects Nero Social Networking
Site 1.0 ...)
NOT-FOR-US: code-projects
CVE-2025-13276 (A vulnerability was detected in g33kyrash
Online-Banking-System up to ...)
- TODO: check
+ NOT-FOR-US: g33kyrash Online-Banking-System
CVE-2025-13275 (A security vulnerability has been detected in Iqbolshoh
php-business-w ...)
- TODO: check
+ NOT-FOR-US: Iqbolshoh php-business-website
CVE-2025-13274 (A weakness has been identified in Campcodes School Fees
Payment Manage ...)
NOT-FOR-US: Campcodes
CVE-2025-13273 (A security flaw has been discovered in Campcodes School Fees
Payment M ...)
@@ -99,11 +99,11 @@ CVE-2025-13216
CVE-2025-11681 (Denial-of-service condition in M-Files Server versions before
25.11.15 ...)
NOT-FOR-US: M-Files
CVE-2024-46336 (kashipara School Management System 1.0 is vulnerable to Cross
Site Scr ...)
- TODO: check
+ NOT-FOR-US: kashipara School Management System
CVE-2024-46335 (PHPGurukul Complaint Management System 2.0 is vulnerble to
Cross Site ...)
NOT-FOR-US: PHPGurukul
CVE-2024-46334 (kashipara School Management System 1.0 is vulnerable to Cross
Site Scr ...)
- TODO: check
+ NOT-FOR-US: kashipara School Management System
CVE-2024-44664 (PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL
Injection v ...)
NOT-FOR-US: PHPGurukul
CVE-2024-44663 (PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL
Injection v ...)
@@ -125,11 +125,11 @@ CVE-2024-44655 (PHPGurukul Complaint Management System
2.0 is vulnerable to Cros
CVE-2024-44654 (PHPGurukul Complaint Management System 2.0 is vulnerable to
SQL Inject ...)
NOT-FOR-US: PHPGurukul
CVE-2024-44653 (Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection
via the ...)
- TODO: check
+ NOT-FOR-US: Kashipara Ecommerce Website
CVE-2024-44652 (Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection
via the ...)
- TODO: check
+ NOT-FOR-US: Kashipara Ecommerce Website
CVE-2024-44651 (Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection
via the ...)
- TODO: check
+ NOT-FOR-US: Kashipara Ecommerce Website
CVE-2024-44648 (PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via id
and adm ...)
NOT-FOR-US: PHPGurukul
CVE-2024-44647 (PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting
(XSS) v ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6fe2bbd6cb712883fd202974dc6acb813ee2e6cb
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6fe2bbd6cb712883fd202974dc6acb813ee2e6cb
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
