>> ARCHIVE: 2017-05

Secure Auditor version 3.0 suffers from a directory traversal vulnerability.

Pegasus version 4.72 build 572 suffers from a mailto link remote code execution vulnerability.

Belden GarrettCom 6K and 10KT series suffer from suffers from buffer overflow, authentication bypass, information disclosure, and other vulnerabilities.

Kodak InSite versions 6.5. through 8.0 suffer from a cross site scripting vulnerability.

Ceragon FibeAir IP-10 versions 7.2.0 and below suffer from a hidden user backdoor vulnerability.

Microsoft Windows suffers from a running object table register ROTFLAGS_ALLOWANYCLIENT privilege escalation vulnerability.

Oracle PeopleSoft suffers from an XML external injection vulnerability that allows for SYSTEM remote code execution.