PNPSCADA version 2.200816204020 suffers from a remote SQL injection vulnerability.

ElkarBackup version 1.3.3 suffers from a persistent cross site scripting vulnerability.

Joomla Adagency component version 6.1.2 suffers from a cross site scripting vulnerability.

WordPress NAB Transact WooCommerce plugin version 2.1.0 suffers from a payment bypass vulnerability.

OX App Suite and OX Documents suffer from access control bypass, cross site scripting, and improper input validation vulnerabilities. Multiple version ranges are affected.

Seowon SlC 130 Router suffers from a remote code execution vulnerability.

The handling of KTM logs does not limit Registry Key operations to the loading hive leading to elevation of privilege.

The handling of KTM logs when initializing a Registry Hive contains no bounds checks which results in privilege escalation.

Eibiz i-Media Server Digital Signage version 3.8.0 suffers from an unauthenticated configuration disclosure vulnerability.