Several critical vulnerabilities have been publicly disclosed and are potentially exploitable. The 1000 Projects Sales Management System, version 1.0, is affected by multiple SQL injection vulnerabilities in various PHP files, allowing remote attacks. 2100 Technology's Official Document Management System has a critical authentication bypass flaw, enabling unauthenticated users to obtain connection tokens and gain access. The Assistant for NextGEN Gallery WordPress plugin has a directory deletion vulnerability, potentially causing complete loss of availability. ABB products, including ASPECT and ABB AbilityTM zenon, exhibit various issues such as code injection, improperly protected credentials, authorization bypass, and missing authentication for critical functions. Acato's WP REST Cache has a PHP Remote File Inclusion vulnerability. Adobe Commerce versions prior to specific patches are susceptible to Cross-Site Request Forgery and stored Cross-Site Scripting, with potential for privilege escalation and data compromise. Adobe Commerce also faces improper input validation leading to denial-of-service and incorrect authorization allowing security bypass. Multiple Adobe products, including Framemaker, Animate, Illustrator, InCopy, and InDesign Desktop, have various memory corruption vulnerabilities like Use After Free, out-of-bounds writes, and buffer overflows. These Adobe vulnerabilities generally require user interaction, often through opening malicious files, to achieve arbitrary code execution. The overall severity of these disclosed vulnerabilities is high, with CVSS scores ranging significantly.