Vulnerability Summary for the ... Note

Vulnerability Summary for the Week of February 24, 2025

Multiple vulnerabilities have been discovered in various products, including jupyterhub-ltiauthenticator, MITRE Caldera, scriptsbundle Nokri Job Board WordPress Theme, Yukseloglu Filter B2B Login Platform, Infoblox NIOS, XIQ-SE, Draytek devices, Mautic, Vigor devices, NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus, XOne Web Monitor, Public Knowledge Project, yi_car_dashcam_firmware, DHVC Form, WooCommerce Ultimate Gift Card, WHMpress - WHMCS WordPress Integration Plugin, IBM Storage Virtualize, everest_forms, SetSail Membership, Alloggio Membership, Academist Membership, CIGES, and Mattermost.These vulnerabilities include high-severity issues such as remote code execution, SQL injection, privilege escalation, authentication bypass, and arbitrary file upload, read, and deletion.The affected products and versions are listed, along with the corresponding CVE numbers and CVSS scores.The vulnerabilities were discovered and reported between February 24, 2025, and March 1, 2025.Users of these products are advised to update to the latest versions or apply patches to mitigate the risks.In some cases, no workarounds are available, and users must upgrade to a fixed version to prevent exploitation.The vulnerabilities can be exploited by remote attackers, and some require authentication or specific conditions to be met.The impact of these vulnerabilities can be severe, including remote code execution, data breaches, and site takeovers.Users are urged to take immediate action to address these vulnerabilities and protect their systems and data.The full list of affected products and details can be found in the original text.