Daniel Santos

An authenticated administrator without super-user privileges can inject a JavaScript payload when creating a maintenance period. This payload is executed when any user opens the tooltip for that specific maintenance period within the Host navigator widget, potentially allowing the attacker to perform unauthorized actions based on the permissions of the user who triggers the tooltip.

An authorized attacker can exploit a server-side request forgery (SSRF) condition in Azure MCP Server to gain elevated privileges on a network. SSRF occurs when an application makes requests to an unintended location, potentially allowing an attacker to access sensitive resources or perform actions on behalf of the server.

An elevation of privilege issue exists in Azure OpenAI. Successful exploitation could allow an attacker to gain elevated privileges.

Missing authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network.

Improper authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network.

Weak authentication in Azure Machine Learning allows an authorized attacker to elevate privileges over a network.

The issue concerns an authenticated remote code execution vulnerability in the deploy agent option. This allows for potential exploitation, but specific details about real-world incidents or the estimated number of affected devices are not provided.

Vditor is a browser-side Markdown editor. The issue at hand is a copy-paste cross-site scripting (XSS) problem. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor.

The issue is related to copy-paste cross-site scripting (XSS) in textAngular, a text editor for Angular.js. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor.

The issue concerns a copy-paste cross-site scripting (XSS) flaw. This type of XSS requires the victim to be tricked into copying a malicious payload into the text editor.

The issue concerns a code injection vulnerability via pasted input in Editor.js, a block-style editor. The `processHTML` method is vulnerable as it passes pasted input into the wrapper's `innerHTML`. This allows for potential code injection attacks.

The issue is related to insufficient input validation in the NVIDIA GPU Display Driver, allowing an unprivileged user to access or modify system files, potentially leading to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. It is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds.

The issue concerns cross-site scripting attacks that can occur when pasting specially crafted content into editable cells. This can be exploited by attackers to execute malicious scripts.

Name of the Vulnerable Software and Affected Versions: OpenProject versions 12.0.0 through 12.0.3 Description: OpenProject is a web-based project management software. The software is vulnerable to a SQL injection in the budgets module. For authenticated users with the "Edit budgets" permission, the request to reassign work packages to another budget insufficiently sanitizes user input in the `reassign to id` parameter. Recommendations: For OpenProject versions 12.0.0 through 12.0.3, upgrade to at least version 12.0.4 to resolve the issue. If you are unable to upgrade in a timely fashion, consider applying a patch to fix the vulnerability. As a temporary workaround, consider restricting access to the budgets module for users with the "Edit budgets" permission until a patch is applied. Avoid using the `reassign to id` parameter in the affected API endpoint until the issue is resolved.

The issue is related to errors in the representation of information by the user interface. It may allow a remote attacker to conduct spoofing attacks using a specially crafted request.

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 88 Firefox ESR versions prior to 78.10 Thunderbird versions prior to 78.10 Description: The issue is related to errors in handling newline characters in FTP URLs, such as %0A or %0D. This can allow a remote attacker to send arbitrary commands to an FTP server. When a user clicks on an FTP URL containing encoded newline characters, the newlines are interpreted, enabling the sending of arbitrary commands to the FTP server. Recommendations: For Firefox versions prior to 88, update to version 88 or later. For Firefox ESR versions prior to 78.10, update to version 78.10 or later. For Thunderbird versions prior to 78.10, update to version 78.10 or later.

A cross-site scripting issue has been identified that may allow a remote attacker to inject code into some web pages, affecting confidentiality.