Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e7d0ae09 by Moritz Muehlenhoff at 2025-10-02T12:13:48+02:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -23,13 +23,13 @@ CVE-2025-61691 (VT STUDIO versions 8.53 and prior contain
an out-of-bounds read
CVE-2025-61690 (KV STUDIO versions 12.23 and prior contain a buffer underflow
vulnerab ...)
NOT-FOR-US: KV STUDIO
CVE-2025-61588 (RISC Zero is a zero-knowledge verifiable general computing
platform ba ...)
- TODO: check
+ NOT-FOR-US: RISC Zero
CVE-2025-61587 (Weblate is a web based localization tool. An open redirect
exists in v ...)
- TODO: check
+ - weblate <itp> (bug #745661)
CVE-2025-61583 (TS3 Manager is modern web interface for maintaining Teamspeak3
servers ...)
- TODO: check
+ NOT-FOR-US: TS3 Manager
CVE-2025-61582 (TS3 Manager is modern web interface for maintaining Teamspeak3
servers ...)
- TODO: check
+ NOT-FOR-US: TS3 Manager
CVE-2025-59951 (Termix is a web-based server management platform with SSH
terminal, tu ...)
TODO: check
CVE-2025-59538 (Argo CD is a declarative, GitOps continuous delivery tool for
Kubernet ...)
@@ -47,19 +47,19 @@ CVE-2025-58776 (KV Studio versions 12.23 and prior contain
a stack-based buffer
CVE-2025-58775 (KV STUDIO and VT5-WX15/WX12 contain a stack-based buffer
overflow vuln ...)
NOT-FOR-US: KV STUDIO and VT5-WX15/WX12
CVE-2025-57389 (A reflected cross-site scripted (XSS) vulnerability in the
/admin/syst ...)
- TODO: check
+ NOT-FOR-US: OpenWRT
CVE-2025-54811 (OpenPLC_V3 has a vulnerability in the enipThread function that
occurs ...)
- TODO: check
+ NOT-FOR-US: OpenPLC
CVE-2025-23355 (NVIDIA Nsight Graphics for Windows contains a vulnerability in
an ngfx ...)
TODO: check
CVE-2025-23297 (NVIDIA Installer for NvAPP for Windows contains a
vulnerability in the ...)
TODO: check
CVE-2025-11221 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
- TODO: check
+ NOT-FOR-US: GTONE ChangeFlow
CVE-2025-11182 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
- TODO: check
+ NOT-FOR-US: GTONE ChangeFlow
CVE-2025-11020 (An attacker can obtain server information using Path Traversal
vulnera ...)
- TODO: check
+ NOT-FOR-US: MarkAny SafePC Enterprise
CVE-2025-9512 (The Schema & Structured Data for WP & AMP WordPress plugin
before 1.50 ...)
NOT-FOR-US: WordPress plugin
CVE-2025-9075 (The ZoloBlocks plugin for WordPress is vulnerable to Stored
Cross-Site ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e7d0ae09089897354c0475621eed881ec363f75c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e7d0ae09089897354c0475621eed881ec363f75c
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
