>> ARCHIVE: 2016-05

WordPress Event Registration plugin version 6.02.02 suffers from cross site scripting and remote SQL injection vulnerabilities.

manager.skype.com suffered from a filter bypass vulnerability.

Microsoft Windows blue screen of death exploit that leverages a privilege escalation vulnerability as defined in CVE-2016-0051.

Dell SonicWall Scrutinizer versions 11.0.1 and below setUserSkin/deleteTab SQL injection / remote code execution exploit that leverages a vulnerability found by Brandon Perry in July of 2014.

Certec EDV atvise SCADA server version 2.5.9 suffers from a privilege escalation vulnerability.

Notes version 4.5 for iOS suffers from an arbitrary file upload vulnerability.

Stanford suffered from a remote SQL injection vulnerability.

Trend Micro Direct Pass suffers from bypass and cross site scripting vulnerabilities.

WordPress BulletProof Security version 53.3 suffers from a cross site scripting vulnerability.

Joomla Event Manager component version 2.x suffers from a cross site scripting vulnerability.