Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
7440c49c by Salvatore Bonaccorso at 2021-11-01T21:54:05+01:00
Process more NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -43586,15 +43586,15 @@ CVE-2021-25880
CVE-2021-25879
RESERVED
CVE-2021-25878 (AVideo/YouPHPTube 10.0 and prior is affected by multiple
reflected Cro ...)
- TODO: check
+ NOT-FOR-US: AVideo/YouPHPTube
CVE-2021-25877 (AVideo/YouPHPTube 10.0 and prior is affected by Insecure file
write. A ...)
- TODO: check
+ NOT-FOR-US: AVideo/YouPHPTube
CVE-2021-25876 (AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross
Script S ...)
- TODO: check
+ NOT-FOR-US: AVideo/YouPHPTube
CVE-2021-25875 (AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior has
multiple reflec ...)
- TODO: check
+ NOT-FOR-US: AVideo/YouPHPTube
CVE-2021-25874 (AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior is affected
by a SQ ...)
- TODO: check
+ NOT-FOR-US: AVideo/YouPHPTube
CVE-2021-25873
RESERVED
CVE-2021-25872
@@ -46039,7 +46039,7 @@ CVE-2021-24815
CVE-2021-24814
RESERVED
CVE-2021-24813 (The Events Made Easy WordPress plugin before 2.2.24 does not
sanitise ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2021-24812
RESERVED
CVE-2021-24811
@@ -46047,9 +46047,9 @@ CVE-2021-24811
CVE-2021-24810
RESERVED
CVE-2021-24809 (The BP Better Messages WordPress plugin before 1.9.9.41 does
not check ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2021-24808 (The BP Better Messages WordPress plugin before 1.9.9.41
sanitise (with ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2021-24807
RESERVED
CVE-2021-24806
@@ -46067,7 +46067,7 @@ CVE-2021-24801
CVE-2021-24800
RESERVED
CVE-2021-24799 (The Far Future Expiry Header WordPress plugin before 1.5 does
not have ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2021-24798
RESERVED
CVE-2021-24797
@@ -46077,9 +46077,9 @@ CVE-2021-24796
CVE-2021-24795
RESERVED
CVE-2021-24794 (The Connections Business Directory WordPress plugin before
10.4.3 does ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2021-24793 (The WPeMatico RSS Feed Fetcher WordPress plugin before 2.6.12
does not ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2021-24792
RESERVED
CVE-2021-24791
@@ -46087,7 +46087,7 @@ CVE-2021-24791
CVE-2021-24790
RESERVED
CVE-2021-24789 (The Flat Preloader WordPress plugin before 1.5.5 does not
escape some ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2021-24788
RESERVED
CVE-2021-24787
@@ -46103,7 +46103,7 @@ CVE-2021-24783
CVE-2021-24782
RESERVED
CVE-2021-24781 (The Image Source Control WordPress plugin before 2.3.1 allows
users wi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2021-24780
RESERVED
CVE-2021-24779 (The WP Debugging WordPress plugin before 2.11.0 has its
update_setting ...)
@@ -46119,13 +46119,13 @@ CVE-2021-24775
CVE-2021-24774 (The Check & Log Email WordPress plugin before 1.0.3 does
not valid ...)
NOT-FOR-US: WordPress plugin
CVE-2021-24773 (The WordPress Download Manager WordPress plugin before 3.2.16
does not ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2021-24772
RESERVED
CVE-2021-24771
RESERVED
CVE-2021-24770 (The Stylish Price List WordPress plugin before 6.9.1 does not
perform ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2021-24769 (The Permalink Manager Lite WordPress plugin before 2.2.13.1
does not v ...)
NOT-FOR-US: WordPress plugin
CVE-2021-24768
@@ -46151,7 +46151,7 @@ CVE-2021-24759
CVE-2021-24758
RESERVED
CVE-2021-24757 (The Stylish Price List WordPress plugin before 6.9.0 does not
perform ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2021-24756
RESERVED
CVE-2021-24755
@@ -46181,7 +46181,7 @@ CVE-2021-24744 (The WordPress Contact Forms by Cimatti
WordPress plugin before 1
CVE-2021-24743 (The Podcast Subscribe Buttons WordPress plugin before 1.4.2
allows use ...)
NOT-FOR-US: WordPress plugin
CVE-2021-24742 (The Logo Slider and Showcase WordPress plugin before 1.3.37
allows Edi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2021-24741 (The Support Board WordPress plugin before 3.3.4 does not
escape multip ...)
NOT-FOR-US: WordPress plugin
CVE-2021-24740 (The Tutor LMS WordPress plugin before 1.9.9 does not escape
some of it ...)
@@ -46219,9 +46219,9 @@ CVE-2021-24725 (The Comment Link Remove and Other
Comment Tools WordPress plugin
CVE-2021-24724 (The Timetable and Event Schedule by MotoPress WordPress plugin
before ...)
NOT-FOR-US: WordPress plugin
CVE-2021-24723 (The WP Reactions Lite WordPress plugin before 1.3.6 does not
properly ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2021-24722 (The Restaurant Menu by MotoPress WordPress plugin through
2.4.0 does n ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2021-24721
RESERVED
CVE-2021-24720 (The GeoDirectory Business Directory WordPress plugin before
2.1.1.3 wa ...)
@@ -46231,11 +46231,11 @@ CVE-2021-24719 (The Enfold Enfold WordPress theme
before 4.8.4 was vulnerable to
CVE-2021-24718
RESERVED
CVE-2021-24717 (The AutomatorWP WordPress plugin before 1.7.6 does not perform
capabil ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2021-24716 (The Modern Events Calendar Lite WordPress plugin before 5.22.3
does no ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2021-24715 (The WP Sitemap Page WordPress plugin before 1.7.0 does not
properly sa ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2021-24714
RESERVED
CVE-2021-24713
@@ -46295,13 +46295,13 @@ CVE-2021-24687 (The Modern Events Calendar Lite
WordPress plugin before 5.22.2 d
CVE-2021-24686
RESERVED
CVE-2021-24685 (The Flat Preloader WordPress plugin before 1.5.4 does not
enforce nonc ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2021-24684 (The WordPress PDF Light Viewer Plugin WordPress plugin before
1.4.12 a ...)
NOT-FOR-US: WordPress plugin
CVE-2021-24683 (The Weather Effect WordPress plugin before 1.3.4 does not have
any CSR ...)
NOT-FOR-US: WordPress plugin
CVE-2021-24682 (The Cool Tag Cloud WordPress plugin before 2.26 does not
escape the st ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2021-24681 (The Duplicate Page WordPress plugin through 4.4.2 does not
sanitise or ...)
NOT-FOR-US: WordPress plugin
CVE-2021-24680
@@ -46417,7 +46417,7 @@ CVE-2021-24626
CVE-2021-24625
RESERVED
CVE-2021-24624 (The MP3 Audio Player for Music, Radio & Podcast by Sonaar
WordPres ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2021-24623 (The WordPress Advanced Ticket System, Elite Support Helpdesk
WordPress ...)
NOT-FOR-US: WordPress plugin
CVE-2021-24622 (The Customer Service Software & Support Ticket System
WordPress pl ...)
@@ -46521,11 +46521,11 @@ CVE-2021-24574 (The Simple Banner WordPress plugin
before 2.10.4 does not saniti
CVE-2021-24573
RESERVED
CVE-2021-24572 (The Accept Donations with PayPal WordPress plugin before 1.3.1
provide ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2021-24571 (The HD Quiz WordPress plugin before 1.8.4 does not escape some
of its ...)
NOT-FOR-US: WordPress plugin
CVE-2021-24570 (The Accept Donations with PayPal WordPress plugin before 1.3.1
offers ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2021-24569 (The Cookie Notice & Compliance for GDPR / CCPA WordPress
plugin be ...)
NOT-FOR-US: WordPress plugin
CVE-2021-24568 (The AddToAny Share Buttons WordPress plugin before 1.7.46 does
not san ...)
@@ -46587,7 +46587,7 @@ CVE-2021-24541 (The Wonder PDF Embed WordPress plugin
before 1.7 does not escape
CVE-2021-24540 (The Wonder Video Embed WordPress plugin before 1.8 does not
escape par ...)
NOT-FOR-US: WordPress plugin
CVE-2021-24539 (The Coming Soon, Under Construction & Maintenance Mode By
Dazzler ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2021-24538 (The Current Book WordPress plugin through 1.0.1 does not
sanitize user ...)
NOT-FOR-US: WordPress plugin
CVE-2021-24537
@@ -64300,7 +64300,7 @@ CVE-2020-28704
CVE-2020-28703
RESERVED
CVE-2020-28702 (A SQL injection vulnerability in TopicMapper.xml of PybbsCMS
v5.2.1 al ...)
- TODO: check
+ NOT-FOR-US: PybbsCMS
CVE-2020-28701
RESERVED
CVE-2020-28700
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7440c49cb6280cfec3e871b96c512810df82f542
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7440c49cb6280cfec3e871b96c512810df82f542
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
