Vulnerability Summary for the ... Note

Vulnerability Summary for the Week of July 15, 2024

Here is a summary of the text in exactly 10 sentences:Multiple vulnerabilities have been discovered in various software products, including 1Panel, Apache Airflow, Apache CXF, and Cisco Secure Email. These vulnerabilities range from SQL injection and cross-site scripting to buffer overflow and remote code execution. The 1Panel web-based Linux server management control panel has been found to have multiple SQL injection vulnerabilities, which have been addressed in version 1.10.12-lts. Apache Airflow has a vulnerability that allows authenticated DAG authors to craft a doc_md parameter to execute arbitrary code in the scheduler context. Cisco Secure Email has a vulnerability that allows an unauthenticated, remote attacker to overwrite arbitrary files on the underlying operating system. The Brizy - Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file extension validation. The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' parameter. A vulnerability in the SMTP Listener of Secure Email Gateway from Cellopoint can be exploited to execute arbitrary system commands on the remote server. The codoc.Jp plugin has an Improper Neutralization of Input During Web Page Generation vulnerability that allows Stored XSS. Users are advised to upgrade to the latest versions of these software products to address these vulnerabilities.