Payara Micro Community 5.2021.6 and below allows Directory Traversal.

Insecure permissions in Update Manager

DLL hijacking in Panda Agent

An information disclosure vulnerability exists in the WiFi Smart Mesh functionality of D-LINK DIR-3040 1.13B03. A specially-crafted network request can lead to command execution. An attacker can connect to the MQTT service to trigger this vulnerability.

OpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script or HTML via the web login page URL.

Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in WordPress Popular Posts plugin (versions

Null pointer dereference in SuiteLink server while processing commands 0x03/0x10

Heap-based buffer overflow in SuiteLink server while processing commands 0x05/0x06

Null pointer dereference in SuiteLink server while processing command 0x07

Improper handling of exceptional conditions in SuiteLink server while processing command 0x01