>> TAG: #0day

Webkit JSC: JIT – Uninitialized Variable Access in ArgumentsEliminationPhase::transform

SQLiteManager 1.2.0 / 1.2.4 – Blind SQL Injection

Jobberbase 2.0 CMS – ‘jobs-in’ SQL Injection

Outlook Password Recovery 2.10 – Denial of Service

Tableau – XML External Entity

LSoft ListServ < 16.5-2018a – Cross-Site Scripting

openITCOCKPIT 3.6.1-2 – Cross-Site Request Forgery

WordPress Plugin Import Export WordPress Users 1.3.1 – CSV Injection

WordPress Plugin UserPro 4.9.32 – Cross-Site Scripting

Exim 4.87 / 4.91 – Local Privilege Escalation (Metasploit)