Worm.Win32.Runfer.bpo malware suffers from an unquoted service path vulnerability.

WordPress Duplicator plugin version 1.3.26 suffers from an unauthenticated arbitrary file read vulnerability.

Trojan-Proxy.Win32.Ranky.z malware suffers from an unauthenticated open proxy vulnerability.

Engineers Online Portal version 1.0 suffers from remote SQL injection vulnerabilities.

Virus.Win32.Ipamor.c malware suffers from an unauthenticated remote system reboot vulnerability.

Mitsubishi Electric and INEA SmartRTU suffer from a cross site scripting vulnerability.

Mitsubishi Electric and INEA SmartRTU suffer from a source code disclosure vulnerability.

Backdoor.Win32.LanFiltrator.11.b malware suffers from a code execution vulnerability.

Backdoor.Win32.LanaFTP.k malware suffers from a heap corruption vulnerability.