>> ARCHIVE: 2020-10

aptdaemon versions prior to 1.1.1 suffer from a file existence disclosure vulnerability.

Blueman versions prior to 2.1.4 suffer from a local privilege escalation vulnerability that achieves root.

Nagios XI version 5.7.3 mibs.php remote command injection exploit.

CSE Bookstore version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

God Kings version 0.60.1 suffers from an improper authorization issue allowing for in-game notification spoofing.

Oracle Business Intelligence Enterprise Edition versions 5.5.0.0.0, 12.2.1.3.0, and 12.2.1.4.0 suffer from local file inclusion and directory traversal vulnerabilities.

FreeType suffers from a heap buffer overflow vulnerability due to integer truncation in Load_SBit_Png.