[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d05363e4 by security tracker role at 2025-09-08T20:13:00+00:00
automatic NOT-FOR-US entries update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,9 +1,9 @@
 CVE-2025-9114 (The Doccure theme for WordPress is vulnerable to Arbitrary User Passwo ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-9113 (The Doccure theme for WordPress is vulnerable to arbitrary file upload ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-9112 (The Doccure theme for WordPress is vulnerable to arbitrary file upload ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-5993 (ITCube CRM in versions from 2023.2 through 2025.2 is vulnerable to pat ...)
 	TODO: check
 CVE-2025-59033 (The Microsoft vulnerable driver block list is implemented as Windows D ...)
@@ -35,7 +35,7 @@ CVE-2025-52161 (Scholl Communications AG Weblication CMS Core v019.004.000.000 w
 CVE-2025-51586 (An issue was discoverd in file controllers/admin/AdminLoginController. ...)
 	TODO: check
 CVE-2025-43722 (Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an imprope ...)
-	TODO: check
+	NOT-FOR-US: Dell / EMC
 CVE-2025-40642 (Reflected Cross-Site Scripting (XSS) vulnerability in WebWork, which a ...)
 	TODO: check
 CVE-2025-40641 (Cross-site Scripting (XSS) vulnerability stored in Multi-Purpose Inven ...)
@@ -51,23 +51,23 @@ CVE-2025-36853 (A vulnerability (CVE-2025-21172) exists in msdia140.dlldue to in
 CVE-2025-22956 (OPSI before 4.3 allows any client to retrieve any ProductPropertyState ...)
 	TODO: check
 CVE-2025-10104 (A security vulnerability has been detected in code-projects Online Eve ...)
-	TODO: check
+	NOT-FOR-US: code-projects
 CVE-2025-10103 (A weakness has been identified in code-projects Online Event Judging S ...)
-	TODO: check
+	NOT-FOR-US: code-projects
 CVE-2025-10102 (A security flaw has been discovered in code-projects Online Event Judg ...)
-	TODO: check
+	NOT-FOR-US: code-projects
 CVE-2025-10100 (A vulnerability was detected in SourceCodester Simple Forum Discussion ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester
 CVE-2025-10099 (A weakness has been identified in Portabilis i-Educar up to 2.10. Affe ...)
-	TODO: check
+	NOT-FOR-US: Portabilis
 CVE-2025-10098 (A security flaw has been discovered in PHPGurukul User Management Syst ...)
-	TODO: check
+	NOT-FOR-US: PHPGurukul
 CVE-2025-10097 (A vulnerability was identified in SimStudioAI sim up to 1.0.0. This im ...)
 	TODO: check
 CVE-2025-10096 (A vulnerability was determined in SimStudioAI sim up to 1.0.0. This af ...)
 	TODO: check
 CVE-2025-10093 (A vulnerability was identified in D-Link DIR-852 up to 1.00CN B09. Aff ...)
-	TODO: check
+	NOT-FOR-US: D-Link
 CVE-2025-10092 (A vulnerability was found in Jinher OA up to 1.2. This impacts an unkn ...)
 	TODO: check
 CVE-2025-10091 (A vulnerability has been found in Jinher OA up to 1.2. This affects an ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d05363e40ade215f59bad67eb4cb3798cb3606cb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d05363e40ade215f59bad67eb4cb3798cb3606cb
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250908/a2788a7c/attachment.htm>