Vulnerability Summary for the ... Note

Vulnerability Summary for the Week of June 10, 2024

- actpro: Missing Authorization in extra_product_options_for_woocommerce. - adfinis: Remote code execution in Document Merge Service. - Adobe Commerce: Improper Restriction of XML External Entity Reference ('XXE'), Improper Input Validation, Improper Authentication, Improper Authorization, and Unrestricted Upload of File with Dangerous Type. - Adobe Experience Manager: Improper Access Control. - Adobe Framemaker Publishing Server: Improper Authentication and Information Exposure. - Adobe ColdFusion: Improper Access Control. - Adobe Photoshop Desktop: Out-of-bounds read. - Adobe Substance3D - Stager: Out-of-bounds write. - aimeos: Unauthorized file upload in aimeos-core. - Apple macOS: Memory corruption, out-of-bounds read, and access issues. - arraytics: Unauthorized data modification in WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin. - Aruphash: Missing Authentication for Critical Function in Crafthemes Demo Import. - arwebdesign: Missing Authorization in Dashboard To-Do List. - ASUS: Upload functionality vulnerabilities, buffer overflow, and authentication bypass in Download Master, DSL-N17U, ZenWiFi XT8. - avast: Privilege escalation in antivirus repair function. - awplife: Missing Authorization in Image Gallery and Slider Responsive Slideshow. - awslabs: Cross-site scripting (XSS) in AWS Deployment Framework.