>> ARCHIVE: 2019-02

Oracle Java Runtime Environment – Heap Out-of-Bounds Read During OTF Font Rendering in glyph_CloseContour

Comodo Dome Firewall 2.7.0 – Cross-Site Scripting

Apache CouchDB 2.3.0 – Cross-Site Scripting

ArangoDB Community Edition 3.4.2-1 – Cross-Site Scripting

M/Monit 3.7.2 – Privilege Escalation

Webiness Inventory 2.3 – ‘ProductModel’ Arbitrary File Upload

CMSsite 1.0 – ‘post’ SQL Injection

NBMonitor 1.6.5.0 – ‘Key’ Denial of Service (PoC)

Master IP CAM 01 3.3.4.2103 – Remote Command Execution

MISP 2.4.97 – SQL Command Execution via Command Injection in STIX Module