Microsoft DirectWrite / AFDKO – Stack Corruption in OpenType Font Handling due to Out-of-Bounds cubeStackDepth
Mozilla Spidermonkey – Unboxed Objects Uninitialized Memory Access
Microsoft Windows – Font Subsetting DLL Heap-Based Out-of-Bounds Read in MergeFonts
TP-Link TL-WR940N and TL-WR941ND suffer from brute force and cross site request forgery vulnerabilities.
WordPress Like Button plugin version 1.6.0 suffers from an authentication bypass vulnerability.
Cisco Data Center Network Manager (DCNM) versions 11.1(1) and below suffer from authentication bypass, arbitrary file upload, arbitrary file download, and information disclosure vulnerabilities.
Sony BRAVIA Smart TVs suffer from multiple denial of service vulnerabilities.
Firefox 67.0.4 – Denial of Service
An independent vulnerability laboratory researcher discovered a remote code execution vulnerability in the Mobatek MobaX…
…