Florian

**Nome do Software Vulnerável e Versões Afetadas** Formie versões anteriores a 2.2.21 Formie versões anteriores a 3.1.26 **Description** Usuários não autenticados podem modificar envios existentes ao enviar um ID de envio conhecido ou adivinhado para o endpoint 'formie/submissions/save-submission'. **Recommendations** Atualize para a versão 2.2.21. Atualize para a versão 3.1.26. Bloqueie o acesso não autenticado a 'actions/formie/submissions/save-submission'. Desative ou personalize a edição de envios no front-end.

**Name of the Vulnerable Software and Affected Versions** Firefox versões anteriores a 150 Firefox ESR versões anteriores a 140.10 Thunderbird versões anteriores a 150 Thunderbird versões anteriores a 140.10 **Description** Existem condições de limite incorretas no componente DOM: Device Interfaces. **Recommendations** Atualize o Firefox para a versão 150. Atualize o Firefox ESR para a versão 140.10. Atualize o Thunderbird para a versão 150. Atualize o Thunderbird para a versão 140.10.

**Name of the Vulnerable Software and Affected Versions** Crypto++ versions through 5.6.4 **Description** The issue concerns the lack of documentation for a compile-time definition that disables assert calls, potentially allowing attackers to obtain sensitive information from process memory after an assertion failure. This could be exploited by accessing a core dump after such a failure. **Recommendations** For Crypto++ versions through 5.6.4, define NDEBUG at compile-time to disable assert calls and prevent potential information disclosure.

**Name of the Vulnerable Software and Affected Versions** Huawei Mobile Broadband HL Service versions 22.001.25.00.03 and earlier **Description** The issue allows local users to gain SYSTEM privileges by modifying the VERSION.dll. This is due to a weak Access Control List (ACL) used for the MobileBrServ program data directory. **Recommendations** For versions 22.001.25.00.03 and earlier, consider restricting access to the MobileBrServ program data directory to prevent local users from modifying the VERSION.dll until a fix is available.

**Name of the Vulnerable Software and Affected Versions** libmodplug versions prior to 0.8.8.5 **Description** The issue affects the libmodplug package in Gentoo Linux and Debian GNU/Linux operating systems. It involves multiple vulnerabilities that can be exploited remotely, potentially leading to breaches of confidentiality, integrity, and availability of protected information. Specifically, an integer overflow in the `abc set parts` function in `load abc.cpp` can cause a denial of service and possibly allow the execution of arbitrary code via a crafted P header in an ABC file, triggering a heap-based buffer overflow. **Recommendations** For versions prior to 0.8.8.5, update to version 0.8.8.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the `abc set parts` function in `load abc.cpp` to minimize the risk of exploitation. Avoid using crafted P headers in ABC files until the issue is resolved.