Sid

**Name of the Vulnerable Software and Affected Versions** QNAP QTS versions prior to 4.2.4 Build 20170313 **Description** The issue allows local users to obtain sensitive Domain Administrator password information by reading data in an XOR format within the /etc/config/uLinux.conf configuration file. **Recommendations** For versions prior to 4.2.4 Build 20170313, update to version 4.2.4 Build 20170313 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Veeam Backup & Replication versions prior to 8.0 update 3 **Description** The issue allows local users to obtain sensitive information by reading log files with world-readable permissions, where local administrator credentials are stored. This is due to the storage of credentials in log files by VeeamVixProxy. **Recommendations** For versions prior to 8.0 update 3, update to version 8.0 update 3 or later to resolve the issue. As a temporary workaround, consider restricting access to the log files to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** ISC DHCP versions 4.1 before 4.1.1-P1 ISC DHCP versions 4.0 before 4.0.2-P1 **Description** The issue is related to insufficient input validation, allowing remote attackers to cause a denial of service via a specially crafted request containing a zero-length client ID. This can lead to a server exit. **Recommendations** For ISC DHCP version 4.1 before 4.1.1-P1, update to version 4.1.1-P1 or later. For ISC DHCP version 4.0 before 4.0.2-P1, update to version 4.0.2-P1 or later.

Name of the Vulnerable Software and Affected Versions: WordPress versions 2.1.2 and earlier Description: A SQL injection issue exists, allowing remote authenticated users to execute arbitrary SQL commands. This is related to the `post id` variable in an XML RPC `mt.setPostCategories` method call. Recommendations: For WordPress versions 2.1.2 and earlier, update to a version that contains a fix for this issue.