HDD Health version 4.2.0.112 suffers from an unquoted service path vulnerability.

SugarSync version 4.1.3 suffers from an unquoted service path vulnerability.

Tapo C310 RTSP server version 1.3.0 suffers from an unauthorized video stream access vulnerability.

BoxBilling versions 4.22.1.55 and below suffer from a remote code execution vulnerability.

Subrion CMS version 4.2.1 suffers from a persistent cross site scripting vulnerability.

X-Skipper-Proxy version 0.13.237 suffers from a server-side request forgery vulnerability.

Label Studio versions 1.5.0 and below suffer from a server-side request forgery vulnerability.

OPSWAT Metadefender Core version 4.21.1 suffers from a privilege escalation vulnerability.

Tunnel Interface Driver suffers from a denial of service vulnerability.

Moodle LMS version 4.0 suffers from a cross site scripting vulnerability.