[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d6cdb9a1 by Salvatore Bonaccorso at 2025-10-03T22:22:14+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -73,41 +73,41 @@ CVE-2025-7721 (The JoomSport \u2013 for Sports: Team & League, Football, Hockey
 CVE-2025-6388 (The Spirit Framework plugin for WordPress is vulnerable to authenticat ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2025-61593 (Cursor is a code editor built for programming with AI. In versions 1.7 ...)
-	TODO: check
+	NOT-FOR-US: Cursor
 CVE-2025-61592 (Cursor is a code editor built for programming with AI. In versions 1.7 ...)
-	TODO: check
+	NOT-FOR-US: Cursor
 CVE-2025-61591 (Cursor is a code editor built for programming with AI. In versions 1.7 ...)
-	TODO: check
+	NOT-FOR-US: Cursor
 CVE-2025-61590 (Cursor is a code editor built for programming with AI. Versions 1.6 an ...)
-	TODO: check
+	NOT-FOR-US: Cursor
 CVE-2025-60787 (MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection i ...)
-	TODO: check
+	NOT-FOR-US: MotionEye
 CVE-2025-60454 (A stored Cross-Site Scripting (XSS) vulnerability has been discovered  ...)
-	TODO: check
+	NOT-FOR-US: MetInfo CMS
 CVE-2025-60453 (A stored Cross-Site Scripting (XSS) vulnerability has been discovered  ...)
-	TODO: check
+	NOT-FOR-US: MetInfo CMS
 CVE-2025-60452 (A stored Cross-Site Scripting (XSS) vulnerability has been discovered  ...)
-	TODO: check
+	NOT-FOR-US: MetInfo CMS
 CVE-2025-60451 (A stored Cross-Site Scripting (XSS) vulnerability has been discovered  ...)
-	TODO: check
+	NOT-FOR-US: MetInfo CMS
 CVE-2025-60450 (A stored Cross-Site Scripting (XSS) vulnerability has been discovered  ...)
-	TODO: check
+	NOT-FOR-US: MetInfo CMS
 CVE-2025-60449 (An information disclosure vulnerability has been discovered in SeaCMS  ...)
-	TODO: check
+	NOT-FOR-US: SeaCMS
 CVE-2025-60448 (A stored Cross-Site Scripting (XSS) vulnerability has been discovered  ...)
-	TODO: check
+	NOT-FOR-US: Emlog Pro
 CVE-2025-60447 (A stored Cross-Site Scripting (XSS) vulnerability has been discovered  ...)
-	TODO: check
+	NOT-FOR-US: Emlog Pro
 CVE-2025-60445 (A stored Cross-Site Scripting (XSS) vulnerability has been discovered  ...)
-	TODO: check
+	NOT-FOR-US: XunRuiCMS
 CVE-2025-59829 (Claude Code is an agentic coding tool. Versions below 1.0.120 failed t ...)
-	TODO: check
+	NOT-FOR-US: Claude Code
 CVE-2025-59489 (Unity Runtime before 2025-10-02 on Android, Windows, macOS, and Linux  ...)
-	TODO: check
+	NOT-FOR-US: Unity
 CVE-2025-57714 (An unquoted search path or element vulnerability has been reported to  ...)
 	NOT-FOR-US: QNAP
 CVE-2025-57423 (A SQL injection vulnerability was discovered in the /articles endpoint ...)
-	TODO: check
+	NOT-FOR-US: MyClub
 CVE-2025-56551 (An issue in DirectAdmin v1.680 allows unauthorized attackers to manipu ...)
 	TODO: check
 CVE-2025-55972 (A TCL Smart TV running a vulnerable UPnP/DLNA MediaRenderer implementa ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d6cdb9a107fac40256a74749235e352dcb8856cf

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d6cdb9a107fac40256a74749235e352dcb8856cf
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251003/f012e232/attachment-0001.htm>