The vulnerability laboratory core research team discovered multiple client-side cross site scripting vulnerabilities in …
Polygonize PC version 1.1 suffers from a remote command execution vulnerability.
Microsoft Edge Chakra JIT suffers from a missing integer overflow check in Lowerer::LowerSetConcatStrMultiItem.
Muviko version 1.1 suffers from a remote SQL injection vulnerability.
WordPress Events Calendar plugin version 1.0 suffers from a remote SQL injection vulnerability.
Android hardware service manager suffers from an arbitrary service replacement issue due to getpidcon.
WordPress Service Finder Booking plugin versions prior to 3.2 suffer from a file disclosure vulnerability.
DiskBoss Enterprise version 8.8.16 suffers from a buffer overflow vulnerability.
WordPress Download Manager plugin version 2.9.60 suffers from a cross site request forgery vulnerability.
Sangoma NetBorder / Vega Session Controller versions prior to 2.3.12-80-GA allows remote unauthenticated attackers to execute arbitrary commands via the web interface.