WordPress Caldera Forms plugin version 1.5.9.1 suffers from a cross site scripting vulnerability.

Lutron Quantum versions 2.0 through 3.2.243 suffer from an information disclosure vulnerability.

Digital Guardian Management Console version 7.1.2.0015 suffer from a server-side request forgery vulnerability.

Digital Guardian Management Console version 7.1.2.0015 suffers from an XML external entity injection vulnerability.

Joomla jDownloads component version 3.2.58 suffers from a cross site scripting vulnerability.

AMD Plays.tv version 1.27.5.0 suffers from a plays_service.exe arbitrary file execution vulnerability.

CloudMe Sync version 1.11.0 suffers from a local buffer overflow vulnerability.

Sophos Cyberoam UTM CR25iNG version 10.6.3 MR-5 suffers from an insecure direct object reference vulnerability.