[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff (@jmm) jmm at debian.org
Wed Apr 2 09:42:25 BST 2025 


Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
42869bff by Moritz Muehlenhoff at 2025-04-02T10:42:05+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,69 +1,69 @@
 CVE-2025-31889 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31819 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31753 (Cross-Site Request Forgery (CSRF) vulnerability in Animesh Kumar Advan ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31628 (Missing Authorization vulnerability in SlicedInvoices Sliced Invoices. ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31619 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31612 (Deserialization of Untrusted Data vulnerability in Sabuj Kundu CBX Pol ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31594 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31580 (Missing Authorization vulnerability in Anzar Ahmed Ni WooCommerce Prod ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31579 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31578 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31571 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31568 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31564 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
 	TODO: check
 CVE-2025-31563 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31561 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31560 (Incorrect Privilege Assignment vulnerability in Dimitri Grassi Salon b ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31553 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31552 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31551 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31550 (Insertion of Sensitive Information into Externally-Accessible File or  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31548 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31537 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31534 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31531 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31525 (Missing Authorization vulnerability in WP Messiah WP Mobile Bottom Men ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31462 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	TODO: check
 CVE-2025-31461 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31455 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31454 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31446 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31445 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31441 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31431 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31135 (Go-Guerrilla SMTP Daemon is a lightweight SMTP server written in Go. P ...)
 	TODO: check
 CVE-2025-31097 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
@@ -71,51 +71,51 @@ CVE-2025-31097 (Improper Control of Filename for Include/Require Statement in PH
 CVE-2025-31089 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
 	TODO: check
 CVE-2025-31086 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31085 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31082 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31081 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31080 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-31078 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-30913 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-30906 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-30905 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-30892 (Deserialization of Untrusted Data vulnerability in magepeopleteam WpTr ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-30853 (Missing Authorization vulnerability in ShortPixel ShortPixel Adaptive  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-30852 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-30844 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-30841 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-30825 (Missing Authorization vulnerability in WPClever WPC Smart Linked Produ ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-30807 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-30778 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-30580 (Improper Control of Generation of Code ('Code Injection') vulnerabilit ...)
 	TODO: check
 CVE-2025-30554 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-30356 (CryptoLib provides a software-only solution using the CCSDS Space Data ...)
 	TODO: check
 CVE-2025-2779 (The Insert Headers and Footers Code \u2013 HT Script plugin for WordPr ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-29982 (Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Ins ...)
-	TODO: check
+	NOT-FOR-US: Dell / EMC
 CVE-2025-29981 (Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Exp ...)
-	TODO: check
+	NOT-FOR-US: Dell / EMC
 CVE-2025-29070 (A heap buffer overflow vulnerability has been identified in thesmooth2 ...)
 	TODO: check
 CVE-2025-29049 (Cross Site Scripting vulnerability in arnog MathLive Versions v0.103.0 ...)
@@ -125,11 +125,11 @@ CVE-2025-29036 (An issue in hackathon-starter v.8.1.0 allows a remote attacker t
 CVE-2025-29033 (An issue in BambooHR Build v.25.0210.170831-83b08dd allows a remote at ...)
 	TODO: check
 CVE-2025-27694 (Dell Wyse Management Suite, versions prior to  WMS 5.1, contains an In ...)
-	TODO: check
+	NOT-FOR-US: Dell / EMC
 CVE-2025-27693 (Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Imp ...)
-	TODO: check
+	NOT-FOR-US: Dell / EMC
 CVE-2025-27692 (Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Unr ...)
-	TODO: check
+	NOT-FOR-US: Dell / EMC
 CVE-2025-27244 (AssetView and AssetView CLOUD contain an issue with acquiring sensitiv ...)
 	TODO: check
 CVE-2025-25060 (Missing authentication for critical function vulnerability exists in A ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/42869bffa99eac6155d9cdbc7a0c702667a2bdfc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/42869bffa99eac6155d9cdbc7a0c702667a2bdfc
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250402/da107168/attachment.htm>

More information about the debian-security-tracker-commits mailing list