Daniel Santos

**Name of the Vulnerable Software and Affected Versions** The product name cannot be determined (affected versions not specified) **Description** An authenticated administrator without super-user privileges can inject a JavaScript payload when creating a maintenance period. This payload is executed when any user opens the tooltip for that specific maintenance period within the Host navigator widget, potentially allowing the attacker to perform unauthorized actions based on the permissions of the user who triggers the tooltip. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Azure MCP Server (affected versions not specified) **Description** An authorized attacker can exploit a server-side request forgery (SSRF) condition in Azure MCP Server to gain elevated privileges on a network. SSRF occurs when an application makes requests to an unintended location, potentially allowing an attacker to access sensitive resources or perform actions on behalf of the server. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Azure OpenAI (affected versions not specified) **Description** An elevation of privilege issue exists in Azure OpenAI. Successful exploitation could allow an attacker to gain elevated privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Azure Machine Learning (affected versions not specified) **Description** Missing authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Azure Machine Learning (affected versions not specified) **Description** Improper authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Azure Machine Learning (affected versions not specified) **Description** Weak authentication in Azure Machine Learning allows an authorized attacker to elevate privileges over a network. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Zohocorp ManageEngine OpManager and Remote Monitoring and Management versions 128329 and below **Description** The issue concerns an authenticated remote code execution vulnerability in the deploy agent option. This allows for potential exploitation, but specific details about real-world incidents or the estimated number of affected devices are not provided. **Recommendations** For versions 128329 and below, consider disabling the deploy agent option as a temporary workaround until a patch is available. Restrict access to the deploy agent functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Vditor versions prior to 3.8.7 **Description** Vditor is a browser-side Markdown editor. The issue at hand is a copy-paste cross-site scripting (XSS) problem. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. **Recommendations** For versions prior to 3.8.7, update to version 3.8.7 to resolve the issue. As a temporary workaround, consider restricting the use of the text editor until the patch is applied.

**Name of the Vulnerable Software and Affected Versions** textAngular versions 1.5.16 and prior **Description** The issue is related to copy-paste cross-site scripting (XSS) in textAngular, a text editor for Angular.js. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. **Recommendations** For versions 1.5.16 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microweber versions 1.2.12 and prior **Description** The issue concerns a copy-paste cross-site scripting (XSS) flaw. This type of XSS requires the victim to be tricked into copying a malicious payload into the text editor. **Recommendations** For versions 1.2.12 and prior, update to a version that includes a complete fix for the copy-paste XSS issue, as the fixes attempted in versions 1.2.9 and 1.2.12 are incomplete. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Editor.js versions prior to 2.26.0 **Description** The issue concerns a code injection vulnerability via pasted input in Editor.js, a block-style editor. The `processHTML` method is vulnerable as it passes pasted input into the wrapper's `innerHTML`. This allows for potential code injection attacks. **Recommendations** For versions prior to 2.26.0, update to version 2.26.0 to resolve the issue. As a temporary workaround, consider disabling the `processHTML` method until the patch is applied. Restrict access to pasted input to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** NVIDIA GPU Display Driver for Windows (affected versions not specified) **Description** The issue is related to insufficient input validation in the NVIDIA GPU Display Driver, allowing an unprivileged user to access or modify system files, potentially leading to code execution, denial of service, escalation of privileges, information disclosure, or data tampering. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Jodit Editor (affected versions not specified) **Description** Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. It is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Toast UI Grid versions prior to 4.21.3 **Description** The issue concerns cross-site scripting attacks that can occur when pasting specially crafted content into editable cells. This can be exploited by attackers to execute malicious scripts. **Recommendations** For versions prior to 4.21.3, update to version 4.21.3 to resolve the issue. At the moment, there are no known workarounds for this issue.

Name of the Vulnerable Software and Affected Versions: OpenProject versions 12.0.0 through 12.0.3 Description: OpenProject is a web-based project management software. The software is vulnerable to a SQL injection in the budgets module. For authenticated users with the "Edit budgets" permission, the request to reassign work packages to another budget insufficiently sanitizes user input in the `reassign to id` parameter. Recommendations: For OpenProject versions 12.0.0 through 12.0.3, upgrade to at least version 12.0.4 to resolve the issue. If you are unable to upgrade in a timely fashion, consider applying a patch to fix the vulnerability. As a temporary workaround, consider restricting access to the budgets module for users with the "Edit budgets" permission until a patch is applied. Avoid using the `reassign to id` parameter in the affected API endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Microsoft Visual Studio (affected versions not specified) **Description** The issue is related to errors in the representation of information by the user interface. It may allow a remote attacker to conduct spoofing attacks using a specially crafted request. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 88 Firefox ESR versions prior to 78.10 Thunderbird versions prior to 78.10 Description: The issue is related to errors in handling newline characters in FTP URLs, such as %0A or %0D. This can allow a remote attacker to send arbitrary commands to an FTP server. When a user clicks on an FTP URL containing encoded newline characters, the newlines are interpreted, enabling the sending of arbitrary commands to the FTP server. Recommendations: For Firefox versions prior to 88, update to version 88 or later. For Firefox ESR versions prior to 78.10, update to version 78.10 or later. For Thunderbird versions prior to 78.10, update to version 78.10 or later.

**Name of the Vulnerable Software and Affected Versions** Tridium Niagara Enterprise Security versions prior to 2.3.118.6 Tridium Niagara AX versions prior to 3.8.401.1 Tridium Niagara 4.4 versions prior to 4.4.93.40.2 Tridium Niagara 4.6 versions prior to 4.6.96.28.4 **Description** A cross-site scripting issue has been identified that may allow a remote attacker to inject code into some web pages, affecting confidentiality. **Recommendations** For Tridium Niagara Enterprise Security versions prior to 2.3.118.6, update to version 2.3.118.6 or later. For Tridium Niagara AX versions prior to 3.8.401.1, update to version 3.8.401.1 or later. For Tridium Niagara 4.4 versions prior to 4.4.93.40.2, update to version 4.4.93.40.2 or later. For Tridium Niagara 4.6 versions prior to 4.6.96.28.4, update to version 4.6.96.28.4 or later.