[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sat Jul 26 09:13:01 BST 2025



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9ac8c06b by security tracker role at 2025-07-26T08:12:54+00:00
automatic NOT-FOR-US entries update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,45 +1,45 @@
 CVE-2025-8198 (The MinimogWP \u2013 The High Converting eCommerce WordPress Theme the ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-8181 (A vulnerability, which was classified as critical, was found in TOTOLI ...)
-	TODO: check
+	NOT-FOR-US: TOTOLINK
 CVE-2025-8180 (A vulnerability, which was classified as critical, has been found in T ...)
-	TODO: check
+	NOT-FOR-US: Tenda
 CVE-2025-8179 (A vulnerability classified as critical was found in PHPGurukul Local S ...)
-	TODO: check
+	NOT-FOR-US: PHPGurukul
 CVE-2025-8178 (A vulnerability classified as critical has been found in Tenda AC10 16 ...)
-	TODO: check
+	NOT-FOR-US: Tenda
 CVE-2025-8175 (A vulnerability was found in D-Link DI-8400 16.07.26A1. It has been cl ...)
-	TODO: check
+	NOT-FOR-US: D-Link
 CVE-2025-8174 (A vulnerability was found in code-projects Voting System 1.0 and class ...)
-	TODO: check
+	NOT-FOR-US: code-projects
 CVE-2025-8173 (A vulnerability has been found in 1000 Projects ABC Courier Management ...)
 	TODO: check
 CVE-2025-8172 (A vulnerability, which was classified as critical, was found in itsour ...)
-	TODO: check
+	NOT-FOR-US: itsourcecode System
 CVE-2025-8171 (A vulnerability, which was classified as critical, has been found in c ...)
-	TODO: check
+	NOT-FOR-US: code-projects
 CVE-2025-8170 (A vulnerability classified as critical was found in TOTOLINK T6 4.1.5c ...)
-	TODO: check
+	NOT-FOR-US: TOTOLINK
 CVE-2025-8169 (A vulnerability classified as critical has been found in D-Link DIR-51 ...)
-	TODO: check
+	NOT-FOR-US: D-Link
 CVE-2025-8103 (The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to C ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-8101 (Improperly Controlled Modification of Object Prototype Attributes ('Pr ...)
 	TODO: check
 CVE-2025-8097 (The WoodMart theme for WordPress is vulnerable to Improper Input Valid ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-7501 (The Wonder Slider Lite plugin for WordPress is vulnerable to Stored Cr ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-6991 (The kallyas theme for WordPress is vulnerable to Local File Inclusion  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-6989 (The Kallyas theme for WordPress is vulnerable to arbitrary folder dele ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-6987 (The Advanced iFrame plugin for WordPress is vulnerable to Stored Cross ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-6895 (The Melapress Login Security plugin for WordPress is vulnerable to Aut ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-5529 (The Educenter theme for WordPress is vulnerable to Stored Cross-Site S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-54416 (tj-actions/branch-names is a Github actions repository that contains w ...)
 	TODO: check
 CVE-2025-54415 (dag-factory is a library for Apache Airflow\xae to construct DAGs decl ...)
@@ -51,7 +51,7 @@ CVE-2025-54413 (skops is a Python library which helps users share and ship their
 CVE-2025-54412 (skops is a Python library which helps users share and ship their sciki ...)
 	TODO: check
 CVE-2025-54385 (XWiki Platform is a generic wiki platform offering runtime services fo ...)
-	TODO: check
+	NOT-FOR-US: XWiki
 CVE-2025-54380 (Opencast is a free, open-source platform to support the management of  ...)
 	TODO: check
 CVE-2025-54378 (HAX CMS allows you to manage your microsite universe with PHP or NodeJ ...)
@@ -63,7 +63,7 @@ CVE-2025-50185 (DbGate is cross-platform database manager. In versions 6.6.0 and
 CVE-2025-50184 (DbGate is cross-platform database manager. In versions 6.4.3-premium-b ...)
 	TODO: check
 CVE-2024-13507 (The GeoDirectory \u2013 WP Business Directory Plugin and Classified Li ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-8177 (A vulnerability was found in LibTIFF up to 4.7.0. It has been rated as ...)
 	- tiff <unfixed> (unimportant)
 	NOTE: https://gitlab.com/libtiff/libtiff/-/issues/715



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9ac8c06b0eb8572a4e3c7922e9697bfb243b201c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9ac8c06b0eb8572a4e3c7922e9697bfb243b201c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250726/b4deb4d9/attachment.htm>


More information about the debian-security-tracker-commits mailing list