>> ARCHIVE: 2018-10

xorg-x11-server versions prior to 1.20.3 local privilege escalation exploit.

xorg-x11-server versions prior to 1.20.3 local root exploit.

Linux has an issue with systemd where overlong input to fgets() during reexec state injection can lead to line splitting.

Linux suffers from an issue with systemd where chown_one() can dereference symlinks.

libtiff up to and including 4.0.9 decodes arbitrarily-sized JBIG into a buffer, ignoring the buffer size.

Open STA Manager version 2.3 suffers from an arbitrary file download vulnerability.

Quick Count version 2.0 suffers from a remote SQL injection vulnerability.

MPS Box version 0.1.8.0 suffers from an arbitrary file upload vulnerability.

PHPTPoint Mailing Server Using File Handling version 1.0 suffers from an arbitrary file read vulnerability.

Oracle Hyperion Planning version 11.1.2.4 suffers from a cross site scripting vulnerability.