[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Jan 7 20:46:05 GMT 2025 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
05c11a3d by Salvatore Bonaccorso at 2025-01-07T21:45:40+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2,235 +2,235 @@ CVE-2025-0291
 	- chromium <unfixed>
 	[bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2025-22621 (In versions 1.0.67 and lower of the Splunk App for SOAR, the Splunk do ...)
-	TODO: check
+	NOT-FOR-US: /Splunk App for SOAR
 CVE-2025-22593 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22592 (Missing Authorization vulnerability in Lenderd 1003 Mortgage Applicati ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22591 (Missing Authorization vulnerability in Lenderd 1003 Mortgage Applicati ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22590 (Cross-Site Request Forgery (CSRF) vulnerability in mmrs151 Prayer Time ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22589 (Cross-Site Request Forgery (CSRF) vulnerability in bozdoz Quote Tweet  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22585 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22584 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22582 (Cross-Site Request Forgery (CSRF) vulnerability in Scott Nell\xe9 Upti ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22581 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22580 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22579 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22578 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22577 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22574 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22573 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22572 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22571 (Cross-Site Request Forgery (CSRF) vulnerability in Instabot Instabot a ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22563 (Cross-Site Request Forgery (CSRF) vulnerability in Faaiq Pretty Url al ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22562 (Cross-Site Request Forgery (CSRF) vulnerability in Jason Funk Title Ex ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22560 (Missing Authorization vulnerability in Saoshyant.1994 Saoshyant Page B ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22559 (Cross-Site Request Forgery (CSRF) vulnerability in Mario Mansour and G ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22558 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22557 (Cross-Site Request Forgery (CSRF) vulnerability in WPMagic News Publis ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22556 (Cross-Site Request Forgery (CSRF) vulnerability in Greg Whitehead Nors ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22555 (Cross-Site Request Forgery (CSRF) vulnerability in Noel Jarencio. Smoo ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22554 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22552 (Cross-Site Request Forgery (CSRF) vulnerability in Jason Keeley, Bryan ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22551 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22550 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22549 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22548 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22547 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22546 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22545 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22544 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22543 (Missing Authorization vulnerability in Beautiful Templates ST Gallery  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22541 (Missing Authorization vulnerability in Etruel Developments LLC WP Dele ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22538 (Cross-Site Request Forgery (CSRF) vulnerability in Ofek Nakar Virtual  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22536 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22534 (Missing Authorization vulnerability in Ella van Durpe Slides & Present ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22533 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22532 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22531 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22530 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22529 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22528 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22525 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22524 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22522 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22520 (Cross-Site Request Forgery (CSRF) vulnerability in Tock Tock Widget al ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22519 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22518 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22517 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22516 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22515 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22512 (Missing Authorization vulnerability in Sprout Apps Help Scout allows E ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22511 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22507 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22503 (Cross-Site Request Forgery (CSRF) vulnerability in Digital Zoom Studio ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22502 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22500 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22365 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	NOT-FOR-US: EMC2 Alert Boxes
 CVE-2025-22364 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22363 (Missing Authorization vulnerability in ORION Allada T-shirt Designer f ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22362 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22359 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22358 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22357 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22355 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22354 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22353 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22352 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22351 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22350 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22349 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22348 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22347 (Cross-Site Request Forgery (CSRF) vulnerability in BannerSky.com BSK F ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22343 (Cross-Site Request Forgery (CSRF) vulnerability in Dennis Koot wpSOL a ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22342 (Cross-Site Request Forgery (CSRF) vulnerability in Jens T\xf6rnell WP  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22339 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22338 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22336 (Cross-Site Request Forgery (CSRF) vulnerability in WordPress \u667a\u5 ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22335 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22334 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22333 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22328 (Cross-Site Request Forgery (CSRF) vulnerability in Elevio Elevio allow ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22327 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22326 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22325 (Cross-Site Request Forgery (CSRF) vulnerability in Nik Chankov Autocom ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22324 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22323 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22321 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22320 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22319 (Missing Authorization vulnerability in DearHive Social Media Share But ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22316 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22315 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22312 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22310 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22309 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22308 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22306 (Insertion of Sensitive Information into Externally-Accessible File or  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22305 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22304 (Missing Authorization vulnerability in osamaesh WP Visitor Statistics  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22303 (Insertion of Sensitive Information Into Sent Data vulnerability in bra ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22302 (Missing Authorization vulnerability in WP Wand WP Wand allows Exploiti ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22301 (Cross-Site Request Forgery (CSRF) vulnerability in Stormhill Media MyB ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22300 (Cross-Site Request Forgery (CSRF) vulnerability in PixelYourSite Pixel ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22299 (Missing Authorization vulnerability in spacecodes AI for SEO allows Ex ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22298 (Missing Authorization vulnerability in Hive Support Hive Support \u201 ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22297 (Cross-Site Request Forgery (CSRF) vulnerability in AIpost AI WP Writer ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22296 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22294 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22293 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-22261 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-21624 (ClipBucket V5 provides open source video hosting with PHP. Prior to 5. ...)
 	TODO: check
 CVE-2025-21623 (ClipBucket V5 provides open source video hosting with PHP. Prior to 5. ...)
@@ -238,91 +238,91 @@ CVE-2025-21623 (ClipBucket V5 provides open source video hosting with PHP. Prior
 CVE-2025-21622 (ClipBucket V5 provides open source video hosting with PHP. During the  ...)
 	TODO: check
 CVE-2025-0301 (A vulnerability, which was classified as problematic, has been found i ...)
-	TODO: check
+	NOT-FOR-US: code-projects Online Book Shop
 CVE-2025-0300 (A vulnerability classified as critical was found in code-projects Onli ...)
-	TODO: check
+	NOT-FOR-US: code-projects Online Book Shop
 CVE-2025-0299 (A vulnerability classified as critical has been found in code-projects ...)
-	TODO: check
+	NOT-FOR-US: code-projects Online Book Shop
 CVE-2025-0298 (A vulnerability was found in code-projects Online Book Shop 1.0. It ha ...)
-	TODO: check
+	NOT-FOR-US: code-projects Online Book Shop
 CVE-2025-0297 (A vulnerability was found in code-projects Online Book Shop 1.0. It ha ...)
-	TODO: check
+	NOT-FOR-US: code-projects Online Book Shop
 CVE-2025-0296 (A vulnerability was found in code-projects Online Book Shop 1.0. It ha ...)
-	TODO: check
+	NOT-FOR-US: code-projects Online Book Shop
 CVE-2025-0295 (A vulnerability was found in code-projects Online Book Shop 1.0 and cl ...)
-	TODO: check
+	NOT-FOR-US: code-projects Online Book Shop
 CVE-2025-0294 (A vulnerability has been found in SourceCodester Home Clean Services M ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Home Clean Services Management System
 CVE-2025-0218 (When batch jobs are executed by pgAgent, a script is created in a temp ...)
 	TODO: check
 CVE-2024-8361 (In SiWx91x devices, the SHA2/224 algorithm returns a hash of 256 bits  ...)
 	TODO: check
 CVE-2024-56300 (Insertion of Sensitive Information Into Sent Data vulnerability in WPS ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-56299 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-56298 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-56297 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-56296 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-56294 (Missing Authorization vulnerability in POSIMYTH Nexter Blocks allows E ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-56293 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-56292 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-56291 (Deserialization of Untrusted Data vulnerability in plainware.com Plain ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-56290 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-56289 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-56288 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-56287 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-56286 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-56285 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-56284 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-56283 (Deserialization of Untrusted Data vulnerability in plainware.com Locat ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-56282 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-56281 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-56280 (Incorrect Privilege Assignment vulnerability in Amento Tech Pvt ltd WP ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-56279 (Server-Side Request Forgery (SSRF) vulnerability in Tips and Tricks HQ ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-56278 (Improper Control of Generation of Code ('Code Injection') vulnerabilit ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-56276 (Missing Authorization vulnerability in WPForms Contact Form by WPForms ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-56275 (Server-Side Request Forgery (SSRF) vulnerability in Envato Envato Elem ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-56274 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-56273 (Missing Authorization vulnerability in WPvivid Backup & Migration WPvi ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-56272 (Missing Authorization vulnerability in ThemeSupport Hide Category by U ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-56271 (Missing Authorization vulnerability in SecureSubmit WP SecureSubmit al ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-56270 (Missing Authorization vulnerability in SecureSubmit WP SecureSubmit.Th ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-56056 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-55556 (A vulnerability in Crater Invoice allows an unauthenticated attacker w ...)
 	TODO: check
 CVE-2024-55555 (Invoice Ninja before 5.10.43 allows remote code execution from a pre-a ...)
 	TODO: check
 CVE-2024-55414 (A vulnerability exits in driver SmSerl64.sys in Motorola SM56 Modem WD ...)
-	TODO: check
+	NOT-FOR-US: Motorola
 CVE-2024-55413 (A vulnerability exits in driver snxppamd.sys in SUNIX Parallel Driver  ...)
 	TODO: check
 CVE-2024-55412 (A vulnerability exits in driver snxpsamd.sys in SUNIX Serial Driver x6 ...)
@@ -330,7 +330,7 @@ CVE-2024-55412 (A vulnerability exits in driver snxpsamd.sys in SUNIX Serial Dri
 CVE-2024-55411 (An issue in the snxpcamd.sys component of SUNIX Multi I/O Card v10.1.0 ...)
 	TODO: check
 CVE-2024-55410 (An issue in the 690b33e1-0462-4e84-9bea-c7552b45432a.sys component of  ...)
-	TODO: check
+	NOT-FOR-US: ASUS
 CVE-2024-55218 (IceWarp Server 10.2.1 is vulnerable to Cross Site Scripting (XSS) via  ...)
 	TODO: check
 CVE-2024-55008 (JATOS 3.9.4 contains a denial-of-service (DoS) vulnerability in the au ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/05c11a3d9c95928d317b529950ba8ae19037bedb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/05c11a3d9c95928d317b529950ba8ae19037bedb
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250107/eb2e3521/attachment-0001.htm>

More information about the debian-security-tracker-commits mailing list