[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
929f45f8 by Salvatore Bonaccorso at 2026-10-02T09:41:39+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5,19 +5,19 @@ CVE-2026-97317 (The Giveaways and Contests by RafflePress  WordPress plugin befo
 CVE-2026-97219 (The MStore API WordPress plugin before 4.22.1 does not restrict which  ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-96780 (figlet.js is a FIG driver written in JavaScript that aims to implement ...)
-	TODO: check
+	NOT-FOR-US: figlet.js
 CVE-2026-94298 (The BuildKit  WordPress plugin before 1.0.29 does not properly sanitis ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-93832 (A component of one of the Motorola system applications was exported wi ...)
 	NOT-FOR-US: Lenovo
 CVE-2026-93698 (Insufficient validation allows arbitrary commands to be executed via t ...)
-	TODO: check
+	NOT-FOR-US: Webpros cPanel
 CVE-2026-93697 (There is a stored XSS vulnerability allowing arbitrary code execution  ...)
-	TODO: check
+	NOT-FOR-US: Webpros cPanel
 CVE-2026-93367 (The Visitors Traffic Real Time Statistics Pro plugin for WordPress is  ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-93029 (There is a stored XSS vulnerability allowing arbitrary code execution  ...)
-	TODO: check
+	NOT-FOR-US: Webpros cPanel
 CVE-2026-92924 (The Unlimited Elements for Elementor WordPress plugin before 2.0.21 do ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-92820 (The Ninja Forms - File Uploads plugin for WordPress is vulnerable to a ...)
@@ -51,9 +51,9 @@ CVE-2026-84925 (The Avada | Website Builder For WordPress & WooCommerce theme fo
 CVE-2026-84740 (The Events Calendar WordPress plugin before 6.17.5.1 does not validate ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-82358 (RT-Labs AB C-Open CANopen contains a write protection bypass in the SD ...)
-	TODO: check
+	NOT-FOR-US: RT-Labs AB C-Open CANopen
 CVE-2026-82357 (RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the L ...)
-	TODO: check
+	NOT-FOR-US: RT-Labs AB C-Open CANopen
 CVE-2026-81740 (The Paytm Payment Gateway WordPress plugin before 2.8.9 does not verif ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-79618 (The WP User Frontend WordPress plugin before 4.3.12 does not enforce i ...)
@@ -61,7 +61,7 @@ CVE-2026-79618 (The WP User Frontend WordPress plugin before 4.3.12 does not enf
 CVE-2026-78471 (The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Sit ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-71542 (GetSimple CMS is a content management system (CMS), and GetSimple CMS  ...)
-	TODO: check
+	NOT-FOR-US: GetSimple CMS
 CVE-2026-71454 (Improper neutralization of input during web page generation ('cross-si ...)
 	NOT-FOR-US: Johnson Controls
 CVE-2026-71453 (- External Control of File Name or Path vulnerability in Johnson Contr ...)
@@ -75,9 +75,9 @@ CVE-2026-71449 (: Use of Hard-coded Cryptographic Key vulnerability in Johnson C
 CVE-2026-71448 (: Insecure Default Initialization of Resource vulnerability in Johnson ...)
 	NOT-FOR-US: Johnson Controls
 CVE-2026-71426 (GetSimple CMS is a content management system (CMS), and GetSimple CMS  ...)
-	TODO: check
+	NOT-FOR-US: GetSimple CMS
 CVE-2026-70650 (GetSimple CMS is a content management system (CMS), and GetSimple CMS  ...)
-	TODO: check
+	NOT-FOR-US: GetSimple CMS
 CVE-2026-64893 (- Cleartext Transmission of Sensitive Information vulnerability in Joh ...)
 	NOT-FOR-US: Johnson Controls
 CVE-2026-64892 (- Exposure of Sensitive Information vulnerability in Johnson Controls  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/929f45f85b004cb1e2b355c057bee1aaba807040

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/929f45f85b004cb1e2b355c057bee1aaba807040
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261002/7193d76a/attachment.htm>