Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 16a1a074 by Salvatore Bonaccorso at 2025-01-21T21:20:11+01:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,55 +1,55 @@ CVE-2025-24461 (In JetBrains TeamCity before 2024.12.1 decryption of connection secret ...) - TODO: check + NOT-FOR-US: JetBrains TeamCity CVE-2025-24460 (In JetBrains TeamCity before 2024.12.1 improper access control allowed ...) - TODO: check + NOT-FOR-US: JetBrains TeamCity CVE-2025-24459 (In JetBrains TeamCity before 2024.12.1 reflected XSS was possible on t ...) - TODO: check + NOT-FOR-US: JetBrains TeamCity CVE-2025-24458 (In JetBrains YouTrack before 2024.3.55417 account takeover was possibl ...) - TODO: check + NOT-FOR-US: JetBrains YouTrack CVE-2025-24457 (In JetBrains YouTrack before 2024.3.55417 permanent tokens could be ex ...) - TODO: check + NOT-FOR-US: JetBrains YouTrack CVE-2025-24456 (In JetBrains Hub before 2024.3.55417 privilege escalation was possible ...) - TODO: check + NOT-FOR-US: JetBrains Hub CVE-2025-24024 (Mjolnir is a moderation tool for Matrix. Mjolnir v1.9.0 responds to ma ...) - TODO: check + NOT-FOR-US: Mjolnir CVE-2025-24020 (WeGIA is a Web manager for charitable institutions. An Open Redirect v ...) - TODO: check + NOT-FOR-US: WeGIA CVE-2025-24019 (YesWiki is a wiki system written in PHP. In versions up to and includi ...) - TODO: check + NOT-FOR-US: YesWiki CVE-2025-24018 (YesWiki is a wiki system written in PHP. In versions up to and includi ...) - TODO: check + NOT-FOR-US: YesWiki CVE-2025-24017 (YesWiki is a wiki system written in PHP. Versions up to and including ...) - TODO: check + NOT-FOR-US: YesWiki CVE-2025-24012 (Umbraco is a free and open source .NET content management system. Star ...) - TODO: check + NOT-FOR-US: Umbraco CMS CVE-2025-24011 (Umbraco is a free and open source .NET content management system. Star ...) - TODO: check + NOT-FOR-US: Umbraco CMS CVE-2025-24001 (Cross-Site Request Forgery (CSRF) vulnerability in PPO Vi\u1ec7t Nam ( ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2025-23998 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2025-23997 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2025-23996 (Cross-Site Request Forgery (CSRF) vulnerability in anyroad.com AnyRoad ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2025-23994 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2025-23580 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2025-23551 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2025-23489 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2025-23477 (Missing Authorization vulnerability in Realty Workstation Realty Works ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2025-23461 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2025-23454 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2025-23369 (An improper verification of cryptographic signature vulnerability was ...) TODO: check CVE-2025-23184 (A potential denial of service vulnerability is present in versions of ...) - TODO: check + NOT-FOR-US: Apache CXF CVE-2025-23086 (On most desktop platforms, Brave Browser versions 1.70.x-1.73.x includ ...) TODO: check CVE-2025-22825 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/16a1a074ba96df94fdff8407ab356a3f55c90b33 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/16a1a074ba96df94fdff8407ab356a3f55c90b33 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits