A crash can occurs due to a heap-based buffer overflow in the ASAN build of Wireshark (current git master), by feeding a malformed file to tshark.
>> AUTHOR: deepcore
Ubiquiti Networks UniFi version 3.2.10 suffers from a cross site request forgery vulnerability.
ManageEngine Firewall Analyzer version 8.5 SP-5.0 suffers from multiple cross site scripting vulnerabilities.
GTA Firewall GB-OS version 6.2.02 suffers from a local malicious script insertion vulnerability.
eFront Learning CMS version 3.6.15.6 suffers from a persistent cross site scripting vulnerability in the message attachment.
eFront Learning CMS version 3.6.15.6 suffers from a persistent cross site scripting vulnerability in the forum functionality.
InstallShield suffers from a DLL hijacking vulnerability.
WordPress CSV Import plugin version 1.0 suffers from a cross site scripting vulnerability.
OpenAM versions 9 through 9.5.5 and 10.0.0 through 10.0.2 suffer from a cross site scripting vulnerability.
Magento versions 1.9.2.2 and below suffer from an information disclosure vulnerability in their RSS feed.