Category: Security

[local] H2 Database – 'Alias' Arbitrary Code Execution

[dos] CyberArk Password Vault < 9.7 / < 10 – Memory Disclosure

[local] Sophos Endpoint Protection 10.7 – Tamper-Protection Bypass

[local] Sophos Endpoint Protection Control Panel 10.7 – Weak Password Encryption

[webapps] FiberHome VDSL2 Modem HG 150-UB – Authentication Bypass

[remote] LineageOS 14.1 Blueborne – Remote Code Execution

[webapps] Cobub Razor 0.7.2 – Cross Site Request Forgery

[webapps] DotNetNuke DNNarticle Module 11 – Directory Traversal

[webapps] Joomla! Component JS Jobs 1.2.0 – Cross-Site Scripting

[webapps] MyBB Plugin Downloads 2.0.3 – Cross-Site Scripting