>> ARCHIVE: 2019-02

Drupal Pubdlcnt module version 7.x-1.2 suffers from an open redirection vulnerability.

Joomla AdsManager component version 3.2.0 suffers from cross site request forgery, database disclosure, remote file inclusion, and remote SQL injection vulnerabilities.

Typo3 CMS Modern Guestbook tx_veguestbook_pi1 version 3.3.0 suffers from a remote SQL injection vulnerability.

WordPress Village theme version 5.0 suffers from cross site request forgery, backdoor access, and remote SQL injection vulnerabilities.

Medical Store Script version 3.0.3 suffers from a cross site scripting vulnerability.

AirDrop version 2.0 suffers from a denial of service vulnerability.

Virtual VCR Max version .0a suffers from a buffer overflow vulnerability.

C4G Basic Laboratory Information System (BLIS) version 3.4 suffers from a remote SQL injection vulnerability.

ScreenStream version 3.0.15 suffers from a denial of service vulnerability.

MikroTik RouterOS versions prior to 6.43.12 (stable) and 6.42.12 (long-term) firewall and NAT bypass exploit.