Inbit Messenger versions 4.6.0 through 4.9.0 suffer from an unauthenticated remote command execution vulnerability.

Uniview NVR301-04S2-P4 suffers from a cross site scripting vulnerability.

Helmet Store Showroom version 1.0 suffers from a remote SQL injection vulnerability that allows for login bypass.

Dreamer CMS version 4.0.0 suffers from a remote SQL injection vulnerability.

myBB forums version 1.8.26 suffers from a persistent cross site scripting vulnerability.

DSL-124 Wireless N300 ADSL2+ suffers from a backup disclosure vulnerability.

Covenant version 0.5 suffers from a remote code execution vulnerability.

Virtual Reception version 1.0 suffers from a directory traversal vulnerability.

Lavasoft version 4.1.0.409 suffers from an unquoted service path vulnerability.

CrowdStrike Falcon Agent version 6.44.15806 has an uninstall bypass flaw that works without an installation token.