DIGIT CENTRIS 4 ERP suffers from a remote SQL injection vulnerability.

GOautodial version 4.0 suffers from a persistent cross site scripting vulnerability in the CreateEvent flow.

LayerBB version 1.1.3 suffers from a cross site request forgery vulnerability.

Hisilicon HiIpcam V100R003 suffers from a remote credential disclosure vulnerability.

macOS version 18.7.0 kernel local privilege escalation exploit that may only work on Macs before 2016.

Western Digital My Book World II NAS versions 1.02.12 and below have a hard-coded ssh credential that allows for remote command execution.

Oracle Mojarra JSF included in Java EE 7 and Eclipse Mojarra JSF versions 2.2 and 2.3 suffer from a cross site scripting vulnerability.

Hospital-Management version 1.26 suffers from a remote SQL injection vulnerability.