Oracle WebCenter versions 7.x prior to 11gR1 suffer from multiple cross site scripting vulnerabilities.

Tim Balitbang Depdiknas version 3.5 suffers from a persistent cross site scripting vulnerability.

Tim Balitbang Depdiknas version 3.5 suffers from a remote SQL injection vulnerability.

Android OS did not use the FLAG_SECURE flag for sensitive settings, potentially exposing sensitive data to other applications on the same device with the screen capture permissions. The vendor (Google)…

NewsBee CMS version 1.4 suffers from a cross site scripting vulnerability.

Symfony versions 2.7.0 up to but not including 4.0.10 suffer from a denial of service vulnerability.

Wchat Fully Responsive PHP AJAX Chat Script version 1.5 suffers from a remote shell upload vulnerability.

KomSeo Cart version 1.3 suffers from a remote SQL injection vulnerability.

MyBB Moderator Log Notes plugin version 1.1 suffers from a cross site scripting vulnerability.

SAP Internet Transaction Server 6200.x suffers from session fixation and cross site scripting vulnerabilities.