>> ARCHIVE: 2018-09

Joomla CW Article Attachments extension version 1.0.6 suffers from a remote SQL injection vulnerability.

EE 4GEE Mini suffers from a unquoted service path local privilege escalation vulnerability.

Joomla! Micro Deal Factory component version 2.4.0 suffers from a remote SQL injection vulnerability.

Joomla! Auction Factory component version 4.5.5 suffers from a remote SQL injection vulnerability.

Postman versions 6.3.0 and below suffer from a man-in-the-middle vulnerability due to improper certificate validation.

The RICOH MP C406Z printer suffers from cross site scripting and html injection vulnerabilities.

The RICOH MP C1803 JPN printer suffers from cross site scripting and html injection vulnerabilities.

The RICOH MP C6503 Plus printer suffers from cross site scripting and html injection vulnerabilities.

The RICOH Aficio MP 301 printer suffers from cross site scripting and html injection vulnerabilities.

The RICOH MP C307 printer suffers from cross site scripting and html injection vulnerabilities.