Oracle Hyperion Planning version 11.1.2.3 suffer from an XML external entity injection vulnerability.
WebIncorp ERP – SQL injection
Ultimate Loan Manager 2.0 – Cross-Site Scripting
JSC suffers from a data mishandling bug in ytecodeGenerator::emitEqualityOpImpl.
A bug in JSC YarrJIT initParenContextFreeList allows for bytes to be overwritten.
Amcrest Cameras version 2.520.AC00.18.R suffers from an authentication bypass vulnerability allowing an attacker to retrieve audio streams.
WordPress WP Fastest Cache plugin versions 0.8.9.5 and below suffer from a directory traversal vulnerability.
iMessage suffers from a vulnerability where NSKeyedUnarchiver deserialization allows file backed NSData objects.
iMessage suffers from a vulnerability where NSArray deserialization can invoke a subclass that does not retain references.
iMessage suffers from a memory corruption vulnerability when decoding NSKnownKeysDictionary1.