>> ARCHIVE: 2016-05

Graphite2 suffers from a heap-based over-read in TtfUtil::CmapSubtable4NextCodepoint.

Graphite2 suffers from multiple heap-based out-of-bounds reads in NameTable::getName.

HP Data Protector version A.09.00 suffers from an arbitrary command execution vulnerability.

EduSec version 4.2.5 suffers from multiple remote SQL injection vulnerabilities.

Real Estate Portal version 4.1 suffers from a remote code execution vulnerability via a remote shell upload.

Real Estate Portal version 4.1 suffers from multiple persistent cross site scripting vulnerabilities.

Micro Focus Rumba+ version 9.4 suffers from multiple stack buffer overflow vulnerabilities.

Versions 2.9.36 to 2.9.42 of the Ninja Forms plugin contain an unauthenticated file upload vulnerability, allowing guests to upload arbitrary PHP code that can be executed in the context of…