Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
4154c3cc by Salvatore Bonaccorso at 2025-12-05T22:18:50+01:00
Add CVE-2025-13654/duc
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -150,7 +150,9 @@ CVE-2025-13682 (The Trail Manager plugin for WordPress is
vulnerable to Stored C
CVE-2025-13678 (The Thai Lottery Widget plugin for WordPress is vulnerable to
Stored C ...)
NOT-FOR-US: WordPress plugin
CVE-2025-13654 (A stack buffer overflow vulnerability exists in the buffer_get
functio ...)
- TODO: check
+ - duc <unfixed>
+ NOTE: Fixed by:
https://github.com/zevv/duc/commit/8638c4365ffd9e1966bdef8af6339dbee8c17e66
(1.4.6)
+ NOTE:
https://hackingbydoing.wixsite.com/hackingbydoing/post/stack-buffer-overflow-in-duc
CVE-2025-13620 (The Wp Social Login and Register Social Counter plugin for
WordPress i ...)
NOT-FOR-US: WordPress plugin
CVE-2025-13614 (The Cool Tag Cloud plugin for WordPress is vulnerable to
Stored Cross- ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4154c3ccc9a61c002b2a29d0c0337d54af6aba5c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4154c3ccc9a61c002b2a29d0c0337d54af6aba5c
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
