Nicolai Grødum

**Name of the Vulnerable Software and Affected Versions** NPort 5100A Series versions prior to 1.6 **Description** The issue exists due to the failure to protect the web page structure, allowing a remote attacker to escalate privileges. The vulnerability is caused by not correctly neutralizing user-controllable input before placing it in output, which may allow malicious users to obtain sensitive information and escalate privileges. **Recommendations** For versions prior to 1.6, upgrade to version 1.6 or later to protect sensitive data and prevent privilege escalation. As a temporary workaround, consider restricting access to the web server to minimize the risk of exploitation. Avoid using user-controllable input in the affected web server until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Neo4J Graph database versions 4.0.0 through 4.3.6 Neo4J Graph database versions prior to 3.5.17 Neo4J Graph database versions prior to 4.2.10 Neo4J Graph database versions prior to 4.3.0.4 Neo4J Graph database versions prior to 4.4.0.1 **Description** A directory traversal vulnerability in the Apoc plugins in Neo4J Graph database allows attackers to read local files, and sometimes create local files. The attacker can retrieve and download files from outside the configured directory on the affected server. **Recommendations** For Neo4J Graph database version 3.5, update to version 3.5.17 or later. For Neo4J Graph database version 4.2, update to version 4.2.10 or later. For Neo4J Graph database version 4.3, update to version 4.3.0.4 or later. For Neo4J Graph database version 4.4, update to version 4.4.0.1 or later. As a temporary workaround, consider controlling the allowlist of the functions that can be used in your system by configuring the `dbms.security.procedures.allowlist` setting.

**Name of the Vulnerable Software and Affected Versions** Mitel MiContact Center Enterprise versions prior to 9.4 **Description** The issue is related to insufficient access control in the Enterprise License Manager portal, allowing a user to access restricted files and folders. A successful exploit could enable an attacker to view and modify application data via Directory Traversal. **Recommendations** For versions prior to 9.4, update to version 9.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the Enterprise License Manager portal to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 10.1 iOS versions prior to 10.3 **Description** The issue is related to insufficient access control in the WebKit component of the Safari browser and iOS operating system. It allows remote attackers to bypass a Content Security Policy protection mechanism via unspecified vectors. **Recommendations** For Safari versions prior to 10.1, update to version 10.1 or later to resolve the issue. For iOS versions prior to 10.3, update to version 10.3 or later to resolve the issue.