Adobe's Acrobat Reader version 127.0.2651.105 and earlier versions are affected by an out-of-bounds write vulnerability that could lead to arbitrary code execution. This issue requires user interaction, such as opening a malicious file. A patch is available in version 127.0.2651.105. Apollo Router and Gateway versions 2.0.0 to 2.8.5 are vulnerable to a denial-of-service attack due to improper input neutralization. This can be triggered by a low-privileged attacker, and upgrading to version 2.8.5 or above can mitigate the issue.The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin is vulnerable to PHP Object Injection via deserialization of untrusted input through the _ultimate_store_kit_wishlist cookie in versions up to and including 2.0.3. This allows an unauthenticated attacker to inject a PHP Object, potentially leading to file deletion, data retrieval, or code execution if a POP chain is present.Beckhoff's IPC Diagnostics package in TwinCAT/BSD is vulnerable to local authentication bypass and improper input neutralization, which can be exploited by a low-privileged local attacker. The vulnerabilities can be mitigated by applying the latest patches.Brain Information Technologies Inc.'s Brain Low-Code is susceptible to SQL Injection in versions before 2.1.0 due to improper neutralization of special elements used in an SQL command. This vulnerability can be exploited remotely and has been patched in version 2.1.0.Chartist 1.x through 1.3.0 is vulnerable to SQL Injection due to improper neutralization of special elements used in an SQL command. This issue affects ListingPro from an unknown version through 2.9.4.CIGESv2 by ATISolutions is vulnerable to SQL Injection in versions lower than 2.15.5. This vulnerability allows a remote attacker to send a specially crafted SQL query to the /modules/ajaxServiciosCentro.php endpoint in the idCentro parameter and retrieve all database information.Cisco's NX-OS Software has a vulnerability in the DHCPv6 relay agent that could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. This is due to improper handling of specific fields in a DHCPv6 RELAY-REPLY message. An attacker can exploit this by sending a crafted DHCPv6 packet to any IPv6 address configured on an affected device, causing the dhcp_snoop process to crash and reload multiple times, resulting in a denial of service condition.