Microsoft Edge Chakra – Cross Context Use-After-Free
>> ARCHIVE: 2018-05
Microsoft Edge Chakra – Cross Context Use-After-Free
SAP Internet Transaction Server 6200.x – Session Fixation / Cross-Site Scripting
Skia and Firefox – Integer Overflow in SkTDArray Leading to Out-of-Bounds Write
Oracle WebCenter FatWire Content Server < 7 – Improper Access Control
Oracle WebCenter Sites 11.1.1.8.0/12.2.1.x – Cross-Site Scripting
KomSeo Cart 1.3 – ‘my_item_search’ SQL Injection
Nordex N149/4.0-4.5 Wind Turbine Web Server suffers from a remote SQL injection vulnerability.
Siemens SIMATIC S7-1200 suffers from a CPU functionality related cross site request forgery vulnerability.
ERPnext version 11.x.x suffers from a cross site scripting vulnerability.
Teradek Cube version 7.3.6 suffers from a stream disclosure vulnerability in snapshot.cgi.