CMS Made Simple version 2.1.6 suffers from a server-side template injection vulnerability.
PDW File Browser versions 1.3 and below suffer from a cross site scripting vulnerability.
InoERP version 0.7.2 suffers from an unauthenticated remote code execution vulnerability.
Online Health Care System version 1.0 suffers from multiple persistent cross site scripting vulnerabilities.
The Genexis Platinum-4410 router suffers from a persistent cross site scripting vulnerability.
Sphider Search Engine 1.3.6 – ‘word_upper_bound’ RCE (Authenticated)
Client Management System 1.0 – ‘searchdata’ SQL injection
Sentrifugo 3.2 – File Upload Restriction Bypass (Authenticated)
Adtec Digital Multiple Products – Default Hardcoded Credentials Remote Root
TDM Digital Signage PC Player 4.1 – Insecure File Permissions