Jd

**Name of the Vulnerable Software and Affected Versions** BOINC Server versions prior to 1.4.3 **Description** The issue is related to a Cross-Site Request Forgery (CSRF) problem. This allows for Cross-Site Request Forgery. **Recommendations** For versions prior to 1.4.3, update to version 1.4.3 or later to resolve the issue. As a temporary workaround, consider implementing additional validation for requests to prevent unauthorized actions. Restrict access to sensitive operations to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** PHP versions prior to 5.6.35 PHP versions 7.0.x prior to 7.0.29 PHP versions 7.1.x prior to 7.1.16 PHP versions 7.2.x prior to 7.2.4 **Description** The issue is related to the lack of protection for service data in PHP's FPM child processes, allowing an attacker to bypass opcache access controls. This could enable an attacker to gain unauthorized access to sensitive information. In a multiuser environment, one user can exploit this issue to obtain sensitive information from another user's PHP applications by running gcore on the PID of the PHP-FPM worker process. **Recommendations** For PHP versions prior to 5.6.35, update to version 5.6.35 or later. For PHP versions 7.0.x prior to 7.0.29, update to version 7.0.29 or later. For PHP versions 7.1.x prior to 7.1.16, update to version 7.1.16 or later. For PHP versions 7.2.x prior to 7.2.4, update to version 7.2.4 or later.

**Name of the Vulnerable Software and Affected Versions** Cisco WAP4410N access point versions 2.0.6.1 and earlier Cisco WRVS4400N router versions 1.1.13 and earlier, versions 2.0.2.1 and earlier Cisco RVS4000 router versions 2.0.3.2 and earlier **Description** The issue allows remote attackers to read credential and configuration data and execute arbitrary commands via requests to the test interface on TCP port 32764. **Recommendations** For Cisco WAP4410N access point versions 2.0.6.1 and earlier, update the firmware to a version later than 2.0.6.1. For Cisco WRVS4400N router versions 1.1.13 and earlier, update the firmware to a version later than 1.1.13. For Cisco WRVS4400N router versions 2.0.2.1 and earlier, update the firmware to a version later than 2.0.2.1. For Cisco RVS4000 router versions 2.0.3.2 and earlier, update the firmware to a version later than 2.0.3.2. As a temporary workaround, consider restricting access to the test interface on TCP port 32764 until a patch is available.