Jim Rush

**Name of the Vulnerable Software and Affected Versions** FarCry Core framework versions prior to 7.2.14 **Description** The issue allows attackers to access sensitive information in the "/facade" directory. **Recommendations** For versions prior to 7.2.14, update to version 7.2.14 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** FarCry Core framework versions prior to 7.2.14 **Description** The issue allows attackers to execute arbitrary code via uploading a crafted .cfm file to the /fileupload/upload.cfm endpoint. **Recommendations** For versions prior to 7.2.14, update to version 7.2.14 or later to resolve the issue. As a temporary workaround, consider restricting access to the /fileupload/upload.cfm endpoint until a patch is available.

**Name of the Vulnerable Software and Affected Versions** KramerAV VIA GO² versions prior to 4.0.1.1326 **Description** The issue allows for unauthenticated arbitrary file read. **Recommendations** For versions prior to 4.0.1.1326, update to version 4.0.1.1326 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** KramerAV VIA GO² versions prior to 4.0.1.1326 **Description** The issue allows for unauthenticated file upload, resulting in Remote Code Execution (RCE). **Recommendations** For versions prior to 4.0.1.1326, update to version 4.0.1.1326 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** KramerAV VIA GO² versions prior to 4.0.1.1326 **Description** The issue is related to SQL Injection. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited. **Recommendations** For versions prior to 4.0.1.1326, update to version 4.0.1.1326 or later to resolve the issue.