Microsoft’s CMD.EXE suffers from an integer overflow vulnerability that can cause a denial of service.

ManageEngine ADSelfService Plus build 6118 suffers from an NTLMv2 hash exposure vulnerability.

TCQ suffers from an unquoted service path vulnerability related to ITeCProteccioAppServer.exe.

UDisk Monitor Z5 Phone version 2.0.3.0 suffers from an unquoted service path vulnerability.

Anuko Time Tracker version 1.20.0.5640 suffers from a remote SQL injection vulnerability.

Navigate CMS version 2.9.4 suffers from a server-side request forgery vulnerability.

Google Chrome version 78.0.3904.70 suffers from a use-after-free vulnerability that allows for remote code execution.

PyScript version 2022-05-04-Alpha suffers from a source code disclosure vulnerability.

DLINK DAP-1620 A1 version 1.01 suffers from a directory traversal vulnerability.

Beehive Forum version 1.5.2 suffers from an account takeover vulnerability.