Flow-Flow Social Stream <= 3.0.71 – Unauthenticated Cross-Site Scripting (XSS)
More info:
https://wpvulndb.com/vulnerabilities/9142
DSA-4334 mupdf – security update
Multiple vulnerabilities were discovered in MuPDF, a PDF, XPS, and e-bookviewer which could result in denial of service or the execution ofarbitrary code if malformed documents are opened.
More info:
https://www.debian.org/security/2018/dsa-4334
Calendar <= 1.3.10 – Authenticated Stored Cross-Site Scripting (XSS)
https://wpvulndb.com/vulnerabilities/9141
More info:
https://wpvulndb.com/vulnerabilities/9141
DSA-4333 icecast2 – security update
Nick Rolfe discovered multiple buffer overflows in the Icecast multimediastreaming server which could result in the execution of arbitrary code.
More info:
https://www.debian.org/security/2018/dsa-4333