Sebastian Neef

**Name of the Vulnerable Software and Affected Versions** Popup Builder WordPress plugin versions prior to 4.2.6 **Description** The issue concerns a lack of validation for a parameter, which could allow users with the administrator role to perform a Server-Side Request Forgery (SSRF) attack in Multisite WordPress configurations. This could potentially lead to file read vulnerabilities. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited. **Recommendations** For versions prior to 4.2.6, update to version 4.2.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable parameter to minimize the risk of exploitation. Avoid using the vulnerable parameter in Multisite WordPress configurations until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** SiteOrigin Widgets Bundle WordPress plugin versions prior to 1.51.0 **Description** The issue allows users with the administrator role to perform Local File Inclusion (LFI) attacks in the context of Multisite WordPress sites. This is due to the plugin not validating user input before using it to generate paths passed to include function/s. **Recommendations** For versions prior to 1.51.0, update to version 1.51.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the plugin's functionality for users with the administrator role until the update is applied.

**Name of the Vulnerable Software and Affected Versions** S. Siedle & Soehne SG 150-0 Smart Gateway versions prior to 1.2.4 **Description** The issue allows remote code execution via the backup functionality in the web frontend. An attacker with network access can exploit this to gain root access on the gateway. **Recommendations** For versions prior to 1.2.4, update to version 1.2.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the backup functionality in the web frontend until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Gira TKS-IP-Gateway version 4.0.7.7 **Description** The issue allows for unauthenticated path traversal, enabling an attacker to download the application database. This can potentially be combined with other exploits for further access. **Recommendations** For version 4.0.7.7, consider restricting access to sensitive database files until a patch is available. As a temporary workaround, limit the ability to download the application database to authorized users only. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Gira TKS-IP-Gateway version 4.0.7.7 **Description** The issue allows for authenticated remote code execution through the backup functionality of the web frontend. **Recommendations** For version 4.0.7.7, consider disabling the backup functionality in the web frontend as a temporary workaround until a patch is available.

**Name of the Vulnerable Software and Affected Versions** S. Siedle & Soehne SG 150-0 Smart Gateway versions prior to 1.2.4 **Description** The issue allows local privilege escalation via a race condition in logrotate. An attacker with access to the network can exploit this to gain root access on the gateway. **Recommendations** For versions prior to 1.2.4, update to version 1.2.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the logrotate function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** S. Siedle & Soehne SG 150-0 Smart Gateway versions prior to 1.2.4 **Description** The issue allows an attacker with network access to gain root access on the gateway by exploiting a passwordless ftp ssh user through an exploit chain. **Recommendations** For versions prior to 1.2.4, update to version 1.2.4 or later to resolve the issue. As a temporary workaround, consider restricting network access to the gateway until the update can be applied.

**Name of the Vulnerable Software and Affected Versions** netfilter iptables version 1.8.2 **Description** A buffer overflow issue exists, potentially allowing an attacker to crash the program or gain code execution through a specially crafted file. This issue is related to the `add param to argv` function in `xshared.c`. **Recommendations** For netfilter iptables version 1.8.2, update to a newer version that contains a fix for this issue to prevent potential code execution or program crashes due to specially crafted files.

Name of the Vulnerable Software and Affected Versions: nanosvg library versions after commit c1f6e209c16b18b46aa9f45d7e619acf42c29726 Description: The issue affects the nanosvg library, which is part of an SVG processing library. It is caused by a buffer overflow in the `nsvg parseColorRGB` function, located in src/nanosvg.h at line 1227. This can lead to memory corruption, resulting in at least a denial of service (DoS). The attack vector depends on the library's usage, and if input is passed from the network, network connectivity is sufficient for an attack. Most likely, an attack will require opening a specially crafted .svg file. Recommendations: For versions after commit c1f6e209c16b18b46aa9f45d7e619acf42c29726, as a temporary workaround, consider disabling the `nsvg parseColorRGB` function until a patch is available. Restrict access to the library when processing untrusted SVG files to minimize the risk of exploitation. Avoid using the library to process .svg files from untrusted sources until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** atvise scada versions prior to 3.0 **Description** A Cross-Site Scripting issue was discovered in atvise scada, which may allow remote code execution. **Recommendations** For versions prior to 3.0, update to version 3.0 or later to resolve the issue.