XMLBlueprint 16.191112 – XML External Entity Injection
XMLBlueprint 16.191112 – XML External Entity Injection
Liferay CE Portal 6.0.2 – Remote Command Execution
Kibana 6.6.1 – CSV Injection
macOS/iOS ImageIO – Heap Corruption when Processing Malformed TIFF Image
Centreon 19.10.5 – Database Credentials Disclosure
Octeth Oempro 4.8 – ‘CampaignID’ SQL Injection
Adive Framework 2.0.8 – Cross-Site Request Forgery (Change Admin Password)
Centreon 19.10.5 – Remote Command Execution
Torrent 3GP Converter 1.51 – Stack Overflow (SEH)
Ricoh printer drivers for Windows suffer from a local privilege escalation vulnerability due to insecure file permissions. Many versions are affected.