wityCMS version 0.6.1 suffers from a cross site scripting vulnerability.

Joomla jCart for OpenCart component version 2.3.0.2 suffers from a cross site request forgery vulnerability.

www.engelvoelkers.com suffers from a cross site scripting vulnerability.

DomainMod version 4.09.03 suffers from multiple cross site scripting vulnerabilities.

TP-Link TL-WR840N and TL-WR841N suffer from an authentication bypass vulnerability.

Joomla JoomOCShop component version 1.0 suffers from a cross site request forgery vulnerability.

Joomla Full Social extension version 1.1.0 suffers from a remote SQL injection vulnerability.

WordPress Events Calendar plugin version 1.0 suffers from a remote SQL injection vulnerability.

The mobi_parse_mobiheader function in read.c in libmobi version 0.3 allows remote attackers to cause an information disclosure (heap-buffer-overflow out-of-bounds read) via a crafted mobi file.

Appnitro MachForm suffers from remote file upload, remote SQL injection, and path traversal vulnerabilities.