>> CATEGORY: exploit

WSO2 SOA Enablement server suffers from a cross site scripting vulnerability.

gdi32.dll in Microsoft Windows suffers from a denial of service issue due to an attacker controlling the Size argument in the gdi32!GdiComment() function.

gdi32.dll in Microsoft Windows suffers from information disclosure issues via the EMF CREATECOLORSPACEW record handling.

Cisco ASA software IKEv1 and IKEv2 remote buffer overflow exploit.

Adobe Flash suffers from a type confusion vulnerability in the FileReference constructor.

Adobe Flash suffers from an out-of-bounds read when placing an object.

Adobe Flash suffers from an out-of-bounds read in JXR processing.

Microsoft Excel 2010 suffers from a read access error that can allow for denial of service attacks.

Merit LILIN IP cameras suffer from cross site request forgery, cross site scripting, hard-coded credential, and various other vulnerabilities.

Adobe Flash suffers from a use-after-free vulnerability in addProperty.