>> AUTHOR: deepcore

Moodle Jmol Filter 6.1 – Directory Traversal / Cross-Site Scripting

WordPress Plugin WPGraphQL 0.2.3 – Multiple Vulnerabilities

Oracle CTI Web Service – ‘EBS_ASSET_HISTORY_OPERATIONS’ XML Entity Injection

macOS < 10.14.5 / iOS < 12.3 DFG JIT Compiler – 'HasIndexedProperty' Use-After-Free

Brocade Network Advisor 14.4.1 – Unauthenticated Remote Code Execution

macOS < 10.14.5 / iOS < 12.3 JavaScriptCore – Loop-Invariant Code Motion (LICM) in DFG JIT Leaves Stack Variable Uninitialized

macOS < 10.14.5 / iOS < 12.3 JavaScriptCore – AIR Optimization Incorrectly Removes Assignment to Register

macOS < 10.14.5 / iOS < 12.3 XNU – Wild-read due to bad cast in stf_ioctl