Jd

**Nome do Software Vulnerável e Versões Afetadas** Versões do BOINC Server anteriores à 1.4.3 **Descrição** O problema está relacionado a uma vulnerabilidade de Cross-Site Request Forgery (CSRF). Isso permite a realização de Cross-Site Request Forgery. **Recomendações** Para versões anteriores à 1.4.3, atualize para a versão 1.4.3 ou posterior para resolver o problema. Como solução temporária, considere implementar validação adicional para solicitações a fim de prevenir ações não autorizadas. Restrinja o acesso a operações sensíveis para minimizar o risco de exploração.

**Name of the Vulnerable Software and Affected Versions** PHP versions prior to 5.6.35 PHP versions 7.0.x prior to 7.0.29 PHP versions 7.1.x prior to 7.1.16 PHP versions 7.2.x prior to 7.2.4 **Description** The issue is related to the lack of protection for service data in PHP's FPM child processes, allowing an attacker to bypass opcache access controls. This could enable an attacker to gain unauthorized access to sensitive information. In a multiuser environment, one user can exploit this issue to obtain sensitive information from another user's PHP applications by running gcore on the PID of the PHP-FPM worker process. **Recommendations** For PHP versions prior to 5.6.35, update to version 5.6.35 or later. For PHP versions 7.0.x prior to 7.0.29, update to version 7.0.29 or later. For PHP versions 7.1.x prior to 7.1.16, update to version 7.1.16 or later. For PHP versions 7.2.x prior to 7.2.4, update to version 7.2.4 or later.

**Name of the Vulnerable Software and Affected Versions** Cisco WAP4410N access point versions 2.0.6.1 and earlier Cisco WRVS4400N router versions 1.1.13 and earlier, versions 2.0.2.1 and earlier Cisco RVS4000 router versions 2.0.3.2 and earlier **Description** The issue allows remote attackers to read credential and configuration data and execute arbitrary commands via requests to the test interface on TCP port 32764. **Recommendations** For Cisco WAP4410N access point versions 2.0.6.1 and earlier, update the firmware to a version later than 2.0.6.1. For Cisco WRVS4400N router versions 1.1.13 and earlier, update the firmware to a version later than 1.1.13. For Cisco WRVS4400N router versions 2.0.2.1 and earlier, update the firmware to a version later than 2.0.2.1. For Cisco RVS4000 router versions 2.0.3.2 and earlier, update the firmware to a version later than 2.0.3.2. As a temporary workaround, consider restricting access to the test interface on TCP port 32764 until a patch is available.