>> ARCHIVE: 2019-09

AVCON6 Systems Management Platform suffers from a remote root command execution vulnerability.

WordPress SlickQuiz plugin version 1.3.7.1 suffers from a persistent cross site scripting vulnerability.

WordPress SlickQuiz plugin version 1.3.7.1 suffers from a remote SQL injection vulnerability.

OpenEdx Ironwood.1 suffers from multiple cross site scripting vulnerabilities.

eWON Flexy with firmware version 13.0 suffers from an authentication bypass vulnerability.

Microsoft DirectWrite suffers from an invalid read in SplicePixel while processing OTF fonts.

Microsoft DirectWrite suffers from an out-of-bounds read in sfac_GetSbitBitmap while processing TTF fonts.