>> ARCHIVE: 2021-02

Remote Desktop Web Access suffers form an authentication timing attack vulnerability.

Zenphoto CMS versions 1.5.7 and below suffer from a remote shell upload vulnerability.

Triconsole version 3.75 suffers from a cross site scripting vulnerability.

VisualWare MyConnection Server version 11.x suffers from a remote code execution vulnerability.

Online Catering Reservation System version 1.0 suffers from a remote SQL injection vulnerability.

Trojan-Dropper.Win32.Daws.etlm malware suffers from a remote unauthenticated system reboot vulnerability.

Doctor Appointment System version 1.0 suffers from multiple cross site scripting vulnerabilities.

Trojan-Proxy.Win32.Delf.ai malware suffers from a buffer overflow vulnerability.

Chrome suffers from an out-of-bounds read vulnerability in network DataElement struct traits.

Microsoft DirectWrite suffers from a heap-based buffer overflow vulnerability in fsg_ExecuteGlyph while processing variable TTF fonts.