Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d6cdb9a1 by Salvatore Bonaccorso at 2025-10-03T22:22:14+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -73,41 +73,41 @@ CVE-2025-7721 (The JoomSport \u2013 for Sports: Team &
League, Football, Hockey
CVE-2025-6388 (The Spirit Framework plugin for WordPress is vulnerable to
authenticat ...)
NOT-FOR-US: WordPress plugin
CVE-2025-61593 (Cursor is a code editor built for programming with AI. In
versions 1.7 ...)
- TODO: check
+ NOT-FOR-US: Cursor
CVE-2025-61592 (Cursor is a code editor built for programming with AI. In
versions 1.7 ...)
- TODO: check
+ NOT-FOR-US: Cursor
CVE-2025-61591 (Cursor is a code editor built for programming with AI. In
versions 1.7 ...)
- TODO: check
+ NOT-FOR-US: Cursor
CVE-2025-61590 (Cursor is a code editor built for programming with AI.
Versions 1.6 an ...)
- TODO: check
+ NOT-FOR-US: Cursor
CVE-2025-60787 (MotionEye v0.43.1b4 and before is vulnerable to OS Command
Injection i ...)
- TODO: check
+ NOT-FOR-US: MotionEye
CVE-2025-60454 (A stored Cross-Site Scripting (XSS) vulnerability has been
discovered ...)
- TODO: check
+ NOT-FOR-US: MetInfo CMS
CVE-2025-60453 (A stored Cross-Site Scripting (XSS) vulnerability has been
discovered ...)
- TODO: check
+ NOT-FOR-US: MetInfo CMS
CVE-2025-60452 (A stored Cross-Site Scripting (XSS) vulnerability has been
discovered ...)
- TODO: check
+ NOT-FOR-US: MetInfo CMS
CVE-2025-60451 (A stored Cross-Site Scripting (XSS) vulnerability has been
discovered ...)
- TODO: check
+ NOT-FOR-US: MetInfo CMS
CVE-2025-60450 (A stored Cross-Site Scripting (XSS) vulnerability has been
discovered ...)
- TODO: check
+ NOT-FOR-US: MetInfo CMS
CVE-2025-60449 (An information disclosure vulnerability has been discovered in
SeaCMS ...)
- TODO: check
+ NOT-FOR-US: SeaCMS
CVE-2025-60448 (A stored Cross-Site Scripting (XSS) vulnerability has been
discovered ...)
- TODO: check
+ NOT-FOR-US: Emlog Pro
CVE-2025-60447 (A stored Cross-Site Scripting (XSS) vulnerability has been
discovered ...)
- TODO: check
+ NOT-FOR-US: Emlog Pro
CVE-2025-60445 (A stored Cross-Site Scripting (XSS) vulnerability has been
discovered ...)
- TODO: check
+ NOT-FOR-US: XunRuiCMS
CVE-2025-59829 (Claude Code is an agentic coding tool. Versions below 1.0.120
failed t ...)
- TODO: check
+ NOT-FOR-US: Claude Code
CVE-2025-59489 (Unity Runtime before 2025-10-02 on Android, Windows, macOS,
and Linux ...)
- TODO: check
+ NOT-FOR-US: Unity
CVE-2025-57714 (An unquoted search path or element vulnerability has been
reported to ...)
NOT-FOR-US: QNAP
CVE-2025-57423 (A SQL injection vulnerability was discovered in the /articles
endpoint ...)
- TODO: check
+ NOT-FOR-US: MyClub
CVE-2025-56551 (An issue in DirectAdmin v1.680 allows unauthorized attackers
to manipu ...)
TODO: check
CVE-2025-55972 (A TCL Smart TV running a vulnerable UPnP/DLNA MediaRenderer
implementa ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d6cdb9a107fac40256a74749235e352dcb8856cf
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d6cdb9a107fac40256a74749235e352dcb8856cf
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
