0Xd0Ff9

**Name of the Vulnerable Software and Affected Versions** Oracle WebLogic Server versions 10.3.6.0.0 through 14.1.1.0.0 **Description** The issue is related to a vulnerability in the Oracle WebLogic Server product, specifically in the Console component. This vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the Oracle WebLogic Server, potentially resulting in a takeover. The vulnerability is easily exploitable and can impact the confidentiality, integrity, and availability of the server. It is associated with errors in code generation management and can be exploited using HTTP requests. **Recommendations** For versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0, update to a version that includes the emergency patch released by Oracle to fix this critical flaw. As a temporary workaround, consider restricting access to the Console component until a patch is applied. Avoid using the vulnerable Console component in the affected Oracle WebLogic Server versions until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** FUEL CMS version 1.4.1 **Description** The issue allows for PHP code evaluation, potentially leading to pre-authentication remote code execution. This can be achieved via the `filter` parameter in the "pages/select/" endpoint or the `data` parameter in the "preview/" endpoint. **Recommendations** For FUEL CMS version 1.4.1, consider restricting access to the `pages/select/` and `preview/` endpoints to minimize the risk of exploitation. Avoid using the `filter` and `data` parameters in these endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** IceWarp Mail Server version 12.0.3 **Description** A cross-site scripting (XSS) issue affects the webdav/ticket/ URIs, allowing remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized actions on the affected system. **Recommendations** For IceWarp Mail Server version 12.0.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Xfce Thunar version 1.6.15 **Description** The issue arises when Xfce Thunar 1.6.15 is used with Xfce 4.12, specifically with the IBus-Unikey input method for file searches within the File Manager. This mishandling leads to an out-of-bounds read and results in a segmentation fault (SEGV). An arbitrary local user could potentially exploit this by creating files in the /tmp directory before the victim uses the IBus-Unikey input method. **Recommendations** For Xfce Thunar version 1.6.15, consider disabling the IBus-Unikey input method for file searches within the File Manager as a temporary workaround until a patch is available. Restrict access to the /tmp directory to minimize the risk of exploitation.