eBrigade ERP version 4.5 suffers from an arbitrary file download vulnerability.
PEAR Archive_Tar versions prior to 1.4.4 suffers from a php object injection vulnerability.
A file upload vulnerability exists in the CKEditor of Adobe ColdFusion 11 (Update 14 and earlier).
Blob Studio 2.17 – Denial of Service (PoC)
Luminance Studio 2.17 – Denial of Service (PoC)
Adapt Inventory Management System 1.0 – SQL Injection
Code Blocks 17.12 – Local Buffer Overflow (SEH) (Unicode)
Liquid Studio 2.17 – Denial of Service (PoC)
Pixel Studio 2.17 – Denial of Service (PoC)