Gila CMS version 1.9.1 suffers from a cross site scripting vulnerability.

Netartmedia PHP Mall version 4.1 suffers from a remote SQL injection vulnerability.

eNdonesia Portal version 8.7 suffers from remote SQL injection and iframe injection vulnerabilities.

There appears to be a race condition in the destruction of the ExtensionsGuestViewMessageFilter if the ProcessIdToFilterMap is modified concurrently in Chrome.

Advanced Host Monitor version 11.92 Beta suffers from a buffer overflow vulnerability.

Chrome suffers from a use-after-free vulnerability in FileSystemOperationRunner.

Chrome suffers from a use-after-free vulnerability in MidiManagerWin.

MSHTML only checks for the CLSID associated with VBScript when blocking in the Internet Zone, but doesn’t check other VBScript CLSIDs which allow a web page to bypass the security…

There’s a race condition in the destruction of the BindingState for bindings to the StoragePartitionService in Chrome. It looks like the root cause of the issue is that since we…

The SAML SSO addon in JFrog Artifactory version 6.5.9 does not properly validate the XML signature in the SAMLResponse field send to the URL /webapp/saml/loginResponse. An attacker can use this…