Dell KACE System Management Appliance (SMA) versions prior to 9.0.270 patch SEC2018_20180410 suffers from cross site scripting and remote SQL injection vulnerabilities.

AUO Solar Data Recorder versions prior to 1.3.0 suffer from an incorrect access control vulnerability.

dotCMS version 5.1.1 suffers from cross site scripting and open redirection vulnerabilities.

NUUO NVRMini 2 version 3.9.1 suffers from an sscanf stack overflow vulnerability.

Cisco RV130W version 1.0.3.44 suffers from a remote stack overflow vulnerability.

DVD X Player version 5.5 Pro suffers from a local buffer overflow vulnerability.

IceWarp versions 10.4.4 and below suffer from a local file inclusion vulnerability.

Zoho ManageEngine ServiceDesk Plus version 9.3 suffers from multiple cross site scripting vulnerabilities.

Google Chrome suffers from a use-after-free vulnerability in WasmMemoryObject::Grow.

This Metasploit module exploits a command injection vulnerability in the open source network management software known as LibreNMS. The community parameter used in a POST request to the addhost functionality…