4images versions 1.7.11 and below suffer from a persistent cross site scripting vulnerability.

Junos Pulse Secure Meeting version 8.0.5 allows an attacker to enter “secure” meetings without knowledge of the password and the invitation link using the java fat client (meetingAppSun.jar).

VuFind version 1.0 suffers from a cross site scripting vulnerability.

The Good Mobile Device Management solution suffers from an insecure application-coupling vulnerability.

WinRaR SFX remote code execution exploit that just requires a malicious file to get loaded.

X2Engine version 4.2 suffers from multiple cross site scripting vulnerabilities.

X2Engine version 4.2 suffers from a remote arbitrary file upload vulnerability.