Tag: 0day

[local] Microsoft Windows Text Services Framework MSCTF – Multiple Vulnerabilities

[dos] NSKeyedUnarchiver – Info Leak in Decoding SGBigUTF8String

[dos] Adobe Acrobat CoolType (AFDKO) – Memory Corruption in the Handling of Type 1 Font load/store Operators

[dos] Adobe Acrobat CoolType (AFDKO) – Call from Uninitialized Memory due to Empty FDArray in Type 1 Fonts

[dos] Microsoft Font Subsetting – DLL Returning a Dangling Pointer via MergeFontPackage

[dos] Microsoft Font Subsetting – DLL Heap-Based Out-of-Bounds read in GetGlyphIdx

[webapps] SugarCRM Enterprise 9.0.0 – Cross-Site Scripting

[webapps] Joomla! Component JS Jobs (com_jsjobs) 1.2.5 – 'customfields.php' SQL Injection

[dos] Windows PowerShell – Unsanitized Filename Command Execution

[webapps] WordPress Plugin Download Manager 2.5 – Cross-Site Request Forgery