ERPNext versions 12.18.0 and 13.0.0 suffer from reflective and persistent cross site scripting vulnerabilities.
Chevereto 3.17.1 – Cross Site Scripting (Stored)
Splinterware System Scheduler Professional 5.30 – Unquoted Service Path
PHP Timeclock version 1.04 suffers from multiple cross site scripting vulnerabilities.
PHP Timeclock version 1.04 suffers from a remote SQL injection vulnerability.
DHCP Broadband version 4.1.0.1503 suffers from an unquoted service path vulnerability.
BOOTP Turbo version 2.0.0.1253 suffers from an unquoted service path vulnerability.
TFTP Broadband version 4.3.0.1465 suffers from an unquoted service path vulnerability.
Backdoor.Win32.MotivFTP.12 malware suffers from bypass and code execution vulnerabilities.
Backdoor.Win32.Antilam.13.a malware suffers from a code execution vulnerability.