Marcin Noga

اسم البرنامج المعرض للخطر والإصدارات المتأثرة: Observium CE الإصدار 24.4.13528 الوصف: توجد ثغرة أمنية من نوع البرمجة النصية عبر المواقع (XSS) في الصفحة `add alert check`، مما يسمح للمهاجم بتنفيذ تعليمات برمجية JavaScript عشوائية عبر طلب HTTP مصمم خصيصًا. ويحتاج المستخدم المصادق عليه إلى النقر على رابط ضار يقدمه المهاجم لاستغلال هذه الثغرة. التوصيات: بالنسبة إلى Observium CE الإصدار 24.4.13528، كحل بديل مؤقت، يُنصح بتقييد الوصول إلى الصفحة `add alert check` حتى يتوفر تصحيح. تجنب النقر على الروابط المشبوهة الواردة من مصادر غير موثوقة لتقليل مخاطر الاستغلال. في الوقت الحالي، لا توجد معلومات عن إصدار أحدث يحتوي على تصحيح لهذه الثغرة الأمنية.

اسم البرنامج المعرض للخطر والإصدارات المتأثرة: Observium CE الإصدار 24.4.13528 الوصف: توجد ثغرة أمنية تتعلق بحقن كود HTML في قسم إدارة شبكات VLAN في Observium CE. يمكن للمهاجم استغلال هذه المشكلة عن طريق إرسال طلب HTTP مصمم خصيصًا لهذا الغرض، مما قد يؤدي إلى تنفيذ كود HTML تعسفي. ولكي ينجح الهجوم، يتعين على المستخدم المصادق عليه النقر على رابط ضار يقدمه المهاجم. التوصيات: بالنسبة للإصدار 24.4.13528 من Observium CE، يُنصح بتعطيل وظيفة إدارة شبكات VLAN حتى يتوفر تصحيح لمنع أي هجمات محتملة لحقن كود HTML. قم بتقييد الوصول إلى وحدة إدارة شبكات VLAN لتقليل مخاطر الاستغلال. تجنب استخدام وظيفة إدارة شبكات VLAN في Observium CE حتى يتم حل المشكلة. في الوقت الحالي، لا توجد معلومات عن إصدار أحدث يحتوي على تصحيح لهذه الثغرة الأمنية.

توجد ثغرة أمنية من نوع البرمجة النصية عبر المواقع (XSS) في وظيفة محرر الخرائط الجوية. يمكن استغلال هذه الثغرة من خلال طلب HTTP مصمم خصيصًا، مما يؤدي إلى تنفيذ تعليمات برمجية JavaScript تعسفية. يحتاج المستخدم المصادق عليه إلى النقر على رابط ضار يقدمه المهاجم لتفعيل الثغرة.

The issue allows an authenticated user to use a specially crafted HTTP request, which can lead to information disclosure.

Name of the Vulnerable Software and Affected Versions: WhatsUp Gold versions prior to 2023.1.3 Description: A vulnerability exists in the TestController functionality, allowing a specially crafted unauthenticated HTTP request to disclose sensitive information. Recommendations: For versions prior to 2023.1.3, update to version 2023.1.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the TestController functionality until a patch is available.

Name of the Vulnerable Software and Affected Versions: WhatsUp Gold versions prior to 2023.1.3 Description: The issue is related to an uncontrolled resource consumption vulnerability. A specially crafted unauthenticated HTTP request to the "TestController Chart" functionality can lead to denial of service. Recommendations: For versions prior to 2023.1.3, update to version 2023.1.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the TestController Chart functionality to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: WhatsUp Gold versions prior to 2023.1.3 Description: A path traversal issue exists, allowing information disclosure through a specially crafted unauthenticated HTTP request to the AppProfileImport endpoint. Recommendations: For versions prior to 2023.1.3, update to version 2023.1.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the AppProfileImport endpoint until a patch is applied.

Name of the Vulnerable Software and Affected Versions: Microsoft High Definition Audio Bus Driver version 10.0.19041.3636 Description: A mishandling of IRP requests vulnerability exists in the HDAudBus DMA interface of Microsoft High Definition Audio Bus Driver. This vulnerability can be exploited by a specially crafted application issuing multiple IRP Complete requests, leading to a local denial-of-service. An attacker can execute malicious script/application to trigger this vulnerability, potentially allowing the execution of arbitrary code or causing a denial-of-service. Recommendations: For Microsoft High Definition Audio Bus Driver version 10.0.19041.3636, patch the driver to mitigate the local attack risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

A directory traversal vulnerability exists in the uploadMib functionality, allowing an attacker to send a malicious MiB file and trigger the vulnerability, potentially leading to arbitrary file creation. This issue is related to incorrect restriction of a directory path name with limited access. Exploitation of the vulnerability may allow a remote attacker to execute arbitrary code. Approximately 6,971 devices are potentially affected, mainly distributed in China and the United States.

The issue is related to an uninitialized pointer use in the functionality that handles Data elements in an Excel file. This can be exploited by providing a specially crafted malformed file, potentially leading to remote code execution. An attacker can trigger this issue by providing a malicious file.

A use-after-free vulnerability exists in the MediaRecorder API of WebKitGTK, which can be exploited by a specially crafted web page to cause memory corruption and potentially arbitrary code execution. A user would need to visit a malicious webpage to trigger this vulnerability.

A use-after-free issue exists in the footerr functionality. This can be triggered by a specially crafted .doc file, potentially allowing an attacker to exploit the vulnerability by tricking a user into opening a malformed file.

The issue is related to the use of memory after it has been freed due to insufficient input validation when processing an ElementType element. This can allow an attacker to execute arbitrary code or cause a denial of service by opening a specially crafted malicious file. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

The issue is related to insufficient input validation in Microsoft Excel, allowing an attacker to execute arbitrary code using a specially crafted file. This can enable remote attackers to affect the system.

A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality. This issue is related to incorrect restriction of XML links to external objects. Exploitation of this vulnerability may allow a remote attacker to perform a Server-Side Request Forgery (SSRF) attack. A specially crafted XML file can lead to SSRF. An attacker can serve a malicious XML payload to trigger this vulnerability.

A directory traversal issue exists in the HelpdeskActions.aspx edittemplate functionality. This can be triggered by a specially-crafted HTTP request, potentially leading to arbitrary file upload. An attacker can exploit this by sending a crafted HTTP request.

A cross-site scripting (xss) sanitization vulnerability bypass exists in the SanitizeHtml functionality. This allows an attacker to send a specially-crafted HTTP request, leading to arbitrary Javascript code injection.

A stored cross-site scripting issue exists in the HdConfigActions.aspx altertextlanguages functionality. This allows an attacker to inject arbitrary Javascript code using a specially-crafted HTTP request. The vulnerability can be triggered by sending a malicious HTTP request.

A directory traversal issue exists in the TicketTemplateActions.aspx GetTemplateAttachment functionality. This allows an attacker to send a specially-crafted HTTP request, potentially leading to arbitrary file read.

A directory traversal issue exists in the KnowledgebasePageActions.aspx ImportArticles functionality. This can be triggered by a specially-crafted HTTP request, leading to arbitrary file read. An attacker can exploit this by sending a crafted HTTP request.