>> ARCHIVE: 2016-04

Patron Info System suffers from a remote SQL injection vulnerability.

Hi Technology and Services CMS suffers from a remote SQL injection vulnerability.

Docker UI version 0.10.0 suffers from multiple client-side cross site request forgery vulnerabilities.

Docker UI version 0.10.0 suffers from a persistent cross site scripting vulnerability.

Cades 2016Q1 suffers from a remote SQL injection vulnerability.

Dorsa Web CMS from 2016 Q1 suffers from a remote SQL injection vulnerability.

TrendMicro’s SSO suffers from a redirection and session theft vulnerability.

Python 2.7 iOS application version 1.5.4 suffers from a filter bypass issue that allows malicious script code to get inserted client-side.

A crash was identified due to a heap-based out-of-bounds read in dissect_pktc_rekey in an ASAN build of Wireshark (current git master).

If Color.setTransform in Adobe Flash is set to a transform that deletes the field it is called on, a use-after-free occurs.