>> AUTHOR: deepcore

SAP NetWeaver version 7.4 suffers from an XML external entity injection vulnerability.

Celoxis versions 9.5 and below suffer from a cross site scripting vulnerability.

Apache Flex BlazeDS versions 4.7.0 and 4.7.1 suffer from a server-side request forgery vulnerability.

vBulletin version 5.x suffers from a code execution vulnerability.

SAP Mobile Platform version 2.3 suffers from an XML external entity injection vulnerability.

An independent vulnerability laboratory researcher discovered a remote code execution exploit for the vbulletin v5.x forum web-application.

An independent vulnerability laboratory researcher discovered a code execution vulnerability in the official Switch v4.68 software.

An independent vulnerability laboratory researcher discovered a code execution vulnerability in the official SoundTap v2.27 software.