phpMyAdmin versions 4.8.0 prior to 4.8.0-1 suffer from a cross site request forgery vulnerability.

WordPress WD Instagram Feed version 1.3.0 suffers from multiple cross site scripting vulnerabilities.

R version 3.4.4 suffers from a local buffer overflow vulnerability.

Kaspersky KSN suffers from a remote code execution vulnerability.

MyBB Threads to Link plugin version 1.3 suffers from a cross site scripting vulnerability.

Wuzhi CMS version 4.1.0 suffers from a cross site request forgery vulnerability.

WordPress UK Cookie Consent plugin version 2.3.9 suffers from a persistent cross site scripting vulnerability.

WSO2 Identity Sever version 5.3.0 suffers from multiple persistent cross site scripting vulnerabilities.

Zyxel ZyWALL ZLD versions 4.30 and below suffer from a cross site scripting vulnerability.

VLC Media Player/Kodi/PopcornTime versions prior to 2.2.5 Red Chimera memory corruption proof of concept exploit.