Shrew Soft VPN Client version 2.2.2 suffers from an unquoted service path vulnerability.

iOS suffers from a sandbox escape vulnerability due to an integer overflow in mediaserverd.

WordPress Social Gallery plugin version 1.0 suffers from a remote code execution vulnerability.

TP-Link Archer VR300 version 1 suffers from a persistent cross site scripting vulnerability.

Raritan CommandCenter Secure Gateway versions prior to 8.0.0 suffer from a cross site scripting vulnerability.

FreeRadius versions 3.0.19 and below suffer from a privilege escalation vulnerability via insecure logrotate use.

SMPlayer version 19.5.0 suffers from a buffer overflow vulnerability that can trigger a denial of service condition.

oXygen XML Editor version 21.1.1 suffers from an XML external entity injection vulnerability.

Xfilesharing versions 2.5.1 and below suffer from local file inclusion and remote shell upload vulnerabilities.