Category: Security

[webapps] Bacula-Web < 8.0.0-rc2 – SQL Injection

[dos] Memcached 1.5.5 – 'Memcrashed ' Insufficient Control of Network Message Volume Denial of Service With Shodan API

[webapps] antMan 0.9.0c – Authentication Bypass

[webapps] Redaxo CMS Addon MyEvents 2.2.1 – SQL Injection

[dos] Softros Network Time System Server 2.3.4 – Denial of Service

[dos] Chrome V8 JIT – Empty BytecodeJumpTable Out-of-Bounds Read

[dos] Chrome V8 JIT – 'GetSpecializationContext' Type Confusion

[dos] Chrome V8 JIT – Simplified-lowererer IrOpcode::kStoreField, IrOpcode::kStoreElement Optimization Bug

[local] Dup Scout Enterprise 10.5.12 – 'Share Username' Local Buffer Overflow

[local] Sophos UTM 9.410 – 'loginuser' 'confd' Service Privilege Escalation