>> ARCHIVE: 2017-06

MyBB versions 1.8.12 and prior is vulnerable to a cross site scripting bug which can allow a moderator to take over an administrator’s account and upload a webshell, or perform…

Atlassian Confluence versions 4.3.0 through 6.1.1 suffers from an access restriction bypass vulnerability.

LG suffers from missing bounds-checking in AVI stream parsing.

LG suffers from an out-of-bounds read in CAVIFileParser::Destroy resulting in an invalid free.

LG has a memcpy in ASFParser::ParseHeaderExtensionObjects that does not check that the size of the copy is smaller than the size of the source buffer, resulting in an out-of-bounds heap…

Disk Pulse version 9.7.26 suffers from an add directory local buffer overflow vulnerability.