Authenticated WordPress Options Change vulnerability in Biplob018 Shortcode Addons plugin <= 3.1.2 at WordPress.
WASM3 v0.5.0 was discovered to contain a segmentation fault via the component Compile_Memory_CopyFill.
Sims v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /uploadServlet. This vulnerability allows attackers to escalate privileges and execute arbitrary commands via a crafted file.
Sims v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /addNotifyServlet. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the notifyInfo parameter.
Sims v1.0 was discovered to allow path traversal when downloading attachments.
NULL Pointer Dereference in GitHub repository gpac/gpac prior to v2.1.0-DEV.
OS Command Injection in GitHub repository hestiacp/hestiacp prior to 1.6.5.
OX App Suite through 7.10.6 allows XSS by forcing block-wise read.
OX App Suite through 7.10.6 allows OS Command Injection via Documentconverter (e.g., through an email attachment).
OX App Suite through 7.10.6 allows XSS via appHandler in a deep link in an e-mail message.