>> ARCHIVE: 2015-10

Pligg CMS version 2.0.2 suffers from code execution and cross site request forgery vulnerabilities.

Pligg CMS version 2.0.2 suffers from a directory traversal vulnerability.

Pligg CMS version 2.0.2 suffers from multiple remote SQL injection vulnerabilities.

eBay Magento CE versions 1.9.2.1 and below and eBay Magento EE versions 1.14.2.1 and below suffer from an XXE injection vulnerability.

PHP Server Monitor version 3.1.1 suffers from a cross site request forgery vulnerability.

PHP Server Monitor version 3.1.1 suffers from a privilege escalation vulnerability.

Mozilla’s SETUP.exe suffers from a classic DLL injection vulnerability.

The Joomla JNews component suffers from a remote SQL injection vulnerability.

Oxwall version 1.7.4 suffers from a cross site request forgery vulnerability.

Libstagefright integer overflow checks can be bypassed with extended chunk lengths.