Packet Storm

Ivanti ADC version 9.9 suffers from an authentication bypass vulnerability.

Genexus Protection Server version 9.7.2.10 suffers from an unquoted service path vulnerability.

Devika version 1 suffers from a path traversal vulnerability.

Debian Linux Security Advisory 5736-1 - Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in denial of service, information disclosure or bypass of Java sandbox restrictions.

e107 version 2.3.3 suffers from a cross site scripting vulnerability.

Codeprojects E-Commerce version 1.0 suffers from an ignored default credential vulnerability.

Ubuntu Security Notice 6895-4 - It was discovered that the ATA over Ethernet driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. It was discovered that the HugeTLB file system component of the Linux Kernel contained a NULL pointer dereference vulnerability. A privileged attacker could possibly use this to to cause a denial of service.

Blog Site version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Best Courier Management System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Appointment Scheduler version 4.0 suffers from an insecure direct object reference vulnerability.