>> ARCHIVE: 2016-02

The Vulnerability Laboratory Core Research Team discovered multiple vulnerabilities in the official Mobile Drive Free iOS mobile web-application.

The Vulnerability Laboratory Research team discovered an application-side input validation web vulnerability in the official Getpdp online service web-application.

Equibase.com suffers from an html injection vulnerability that may allow for cross site scripting.

Atutor version 2.2 suffers from a cross site scripting vulnerability.

yTree version 1.94-1.1 suffers from a buffer overflow vulnerability.

D-Link DVG-N5402SP suffers from path traversal, weak credential management, and information leakage vulnerabilities.

Opendocman version 1.3.4 suffers from an html injection vulnerability.

Opendocman version 1.3.4 suffers from a cross site request forgery vulnerability.

MailPoet Newsletters version 2.6.19 suffers from a cross site scripting vulnerability.

Mezzanine version 4.1.0 suffers from a cross site scripting vulnerability.