>> ARCHIVE: 2015-12

YesWiki versions 1 and 2 suffers from remote arbitrary file upload and directory traversal vulnerabilities.

SumatraPDF suffers from multiple DLL hijacking vulnerabilities.

The executable installer for the VideoLAN Client suffers from DLL hijacking vulnerabilities.

The executable installer for Nullsoft Scriptable Install System suffers from DLL hijacking vulnerabilities.

JRSoft InnoSetup executable installers suffer from a DLL hijacking vulnerability.

PHP Utility Belt suffers from a remote code execution vulnerability.

sysPass versions 1.1.2.23 and below suffer from a cross site scripting vulnerability.

OpenMRS version 2.3 (1.11.4) suffers from a local file disclosure vulnerability.

OpenMRS version 2.3 (1.11.4) suffers from multiple cross site scripting vulnerabilities.

OpenMRS version 2.3 (1.11.4) suffers from an expression language injection vulnerability that can lead to arbitrary java code being executed.