[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Jul 29 09:13:07 BST 2025



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d8eb2267 by security tracker role at 2025-07-29T08:13:00+00:00
automatic NOT-FOR-US entries update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,13 +1,13 @@
 CVE-2025-8264 (Versions of the package z-push/z-push-dev before 2.7.6 are vulnerable  ...)
 	TODO: check
 CVE-2025-7811 (The StreamWeasels YouTube Integration plugin for WordPress is vulnerab ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-7810 (The StreamWeasels Kick Integration plugin for WordPress is vulnerable  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-7809 (The StreamWeasels Twitch Integration plugin for WordPress is vulnerabl ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-6495 (The Bricks theme for WordPress is vulnerable to blind SQL Injection vi ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-54769 (An authenticated, read-only user can upload a file and perform a direc ...)
 	TODO: check
 CVE-2025-54768 (An API endpoint that should be limited to web application administrato ...)
@@ -53,11 +53,11 @@ CVE-2025-53078 (Deserialization of Untrusted Data in Samsung DMS(Data Management
 CVE-2025-53077 (An execution after redirect in Samsung DMS(Data Management Server) all ...)
 	TODO: check
 CVE-2025-4566 (The Elementor Website Builder \u2013 More Than Just a Page Builder plu ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-4370 (The Brizy \u2013 Page Builder plugin for WordPress is vulnerable to li ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-3075 (The Elementor Website Builder \u2013 More Than Just a Page Builder plu ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-8283 (A vulnerability was found in the netavark package, a network stack for ...)
 	- netavark <not-affected> (Vulnerable code introduced later)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2383941



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d8eb2267a8c0d25cd3448e68c2782413c11b9290

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d8eb2267a8c0d25cd3448e68c2782413c11b9290
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250729/42687b9b/attachment.htm>


More information about the debian-security-tracker-commits mailing list