>> CATEGORY: Security

Microsoft Internet Explorer 8/11 and WPAD service ‘Jscript.dll’ – Use-After-Free

Firefox 72 IonMonkey – JIT Type Confusion

Splinterware System Scheduler Professional 5.30 – Unquoted Service Path

Chevereto 3.17.1 – Cross Site Scripting (Stored)

Odoo 12.0.20190101 – ‘nssm.exe’ Unquoted Service Path

Human Resource Information System 0.1 – ‘First Name’ Persistent Cross-Site Scripting (Authenticated)

DHCP Broadband 4.1.0.1503 – ‘dhcpt.exe’ Unquoted Service Path

BOOTP Turbo 2.0.0.1253 – ‘bootpt.exe’ Unquoted Service Path

TFTP Broadband 4.3.0.1465 – ‘tftpt.exe’ Unquoted Service Path

PHP Timeclock 1.04 – ‘Multiple’ Cross Site Scripting (XSS)