>> CATEGORY: Security

ASUS DisplayWidget Software 3.4.0.036 – ‘ASUSDisplayWidgetService’ Unquoted Service Path

iFunbox 4.2 – ‘Apple Mobile Device Service’ Unquoted Service Path

Wise Care 365 5.6.7.568 – ‘WiseBootAssistant’ Unquoted Service Path

Solaris SunSSH 11.0 x86 – libpam Remote Root (3)

OpenEMR 5.0.1.7 – ‘fileName’ Path Traversal (Authenticated)

Node.JS – ‘node-serialize’ Remote Code Execution (3)

Dlink DSL2750U – ‘Reboot’ Command Injection

ICE Hrm 29.0.0.OS – ‘xml upload’ Stored Cross-Site Scripting (XSS)

ICE Hrm 29.0.0.OS – ‘Account Takeover’ Cross-Site Request Forgery (CSRF)

ICE Hrm 29.0.0.OS – ‘Account Takeover’ Cross-Site Scripting and Session Fixation