[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff (@jmm) jmm at debian.org
Wed Jul 16 21:17:39 BST 2025



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
61662a6f by Moritz Muehlenhoff at 2025-07-16T22:17:19+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3,7 +3,7 @@ CVE-2025-7703 (Authentication vulnerability in the mobile application\uff08tech.
 CVE-2025-7699 (An improper access control vulnerability  was found in the EZ Sync Man ...)
 	NOT-FOR-US: Asustor
 CVE-2025-7357 (LITEON IC48A firmware versions prior to 01.00.19r and LITEON IC80A fir ...)
-	TODO: check
+	NOT-FOR-US: LITEON
 CVE-2025-7035 (The Media Library Assistant plugin for WordPress is vulnerable to Stor ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2025-6993 (The Ultimate WP Mail plugin for WordPress is vulnerable to Privilege E ...)
@@ -87,7 +87,7 @@ CVE-2025-53984 (Improper Neutralization of Input During Web Page Generation ('Cr
 CVE-2025-53982 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-53943 (VoidBot Open-Source is a customizable Discord bot. VoidBot Open-Source ...)
-	TODO: check
+	NOT-FOR-US: VoidBot
 CVE-2025-53938 (WeGIA is an open source web manager with a focus on the Portuguese lan ...)
 	NOT-FOR-US: WeGIA
 CVE-2025-53937 (WeGIA is an open source web manager with a focus on the Portuguese lan ...)
@@ -109,33 +109,33 @@ CVE-2025-53930 (WeGIA is an open source web manager with a focus on the Portugue
 CVE-2025-53929 (WeGIA is an open source web manager with a focus on the Portuguese lan ...)
 	NOT-FOR-US: WeGIA
 CVE-2025-53926 (Emlog is an open source website building system. A cross-site scriptin ...)
-	TODO: check
+	NOT-FOR-US: Emlog
 CVE-2025-53925 (Emlog is an open source website building system. A cross-site scriptin ...)
-	TODO: check
+	NOT-FOR-US: Emlog
 CVE-2025-53924 (Emlog is an open source website building system. A cross-site scriptin ...)
-	TODO: check
+	NOT-FOR-US: Emlog
 CVE-2025-53923 (Emlog is an open source website building system. A cross-site scriptin ...)
-	TODO: check
+	NOT-FOR-US: Emlog
 CVE-2025-53908 (RomM is a self-hosted rom manager and player. Versions prior to 3.10.3 ...)
-	TODO: check
+	NOT-FOR-US: RomM
 CVE-2025-53904 (The Scratch Channel is a news website that is under development as of  ...)
-	TODO: check
+	NOT-FOR-US: Scratch Channel
 CVE-2025-53892 (Vue I18n is the internationalization plugin for Vue.js. The escapePara ...)
-	TODO: check
+	NOT-FOR-US: Vue I18n
 CVE-2025-53840 (Icinga DB Web provides a graphical interface for Icinga monitoring. St ...)
 	TODO: check
 CVE-2025-53758 (This vulnerability exists in Digisol DG-GR6821AC Router due to use of  ...)
-	TODO: check
+	NOT-FOR-US: Digisol
 CVE-2025-53757 (This vulnerability exists in Digisol DG-GR6821AC Router due to misconf ...)
-	TODO: check
+	NOT-FOR-US: Digisol
 CVE-2025-53756 (This vulnerability exists in Digisol DG-GR6821AC Router due to clearte ...)
-	TODO: check
+	NOT-FOR-US: Digisol
 CVE-2025-53755 (This vulnerability exists in Digisol DG-GR6821AC Router due to storage ...)
-	TODO: check
+	NOT-FOR-US: Digisol
 CVE-2025-53754 (This vulnerability exists in Digisol DG-GR6821AC Router due to hard-co ...)
-	TODO: check
+	NOT-FOR-US: Digisol
 CVE-2025-52836 (Incorrect Privilege Assignment vulnerability in Unity Business Technol ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-52819 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-52804 (Missing Authorization vulnerability in uxper Nuss allows Accessing Fun ...)
@@ -151,7 +151,7 @@ CVE-2025-52779 (Improper Neutralization of Input During Web Page Generation ('Cr
 CVE-2025-52777 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-52714 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-50028 (Missing Authorization vulnerability in CodeSolz Ultimate Push Notifica ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-49888 (Missing Authorization vulnerability in pimwick PW WooCommerce On Sale! ...)
@@ -159,9 +159,9 @@ CVE-2025-49888 (Missing Authorization vulnerability in pimwick PW WooCommerce On
 CVE-2025-49884 (Missing Authorization vulnerability in alexvtn Internal Linking of Rel ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-49876 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-49319 (Missing Authorization vulnerability in WPFactory Wishlist for WooComme ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-49034 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-49031 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/61662a6f85a52fda07b9010ada176e2d22a69682

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/61662a6f85a52fda07b9010ada176e2d22a69682
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250716/cb1ccd40/attachment.htm>


More information about the debian-security-tracker-commits mailing list