Kai

**Name of the Vulnerable Software and Affected Versions** Uniweb/SoliPACS WebServer versions (affected versions not specified) **Description** The Uniweb/SoliPACS WebServer developed by EBM Technologies has a missing authentication control. This allows unauthenticated remote attackers to access a specific page and retrieve user group names. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 6.6.74 **Description** A use-after-free issue was encountered in the Linux kernel, specifically in the net/smc component. This issue manifested as the LGR/link refcnt reaching 0 early and entering the clear process, making resource access unsafe. The problem is caused by repeated release of LGR/link refcnt, potentially due to smc conn free() being called repeatedly without sock lock protection. **Recommendations** Update to Linux kernel version 6.6.74 or later to resolve the issue. As a temporary workaround, consider adding sock lock protection in the smc listen work() path to prevent repeated release of LGR/link refcnt.

**Name of the Vulnerable Software and Affected Versions** 4images versions 1.7 through 1.7.7 **Description** The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via vectors related to the `url` variable. **Recommendations** For versions 1.7 through 1.7.7, update to a version that contains a fix for this issue.