Adobe Experience Manager versions 6.5.23 and earlier are vulnerable to misconfiguration allowing arbitrary code execution and XXE leading to file system reads. ADOdb versions 5.22.9 and below have an SQL injection vulnerability in specific methods when used with SQLite. The Eventin WordPress plugin, up to version 4.0.34, allows privilege escalation through account takeover. Autodesk 3ds Max is susceptible to arbitrary code execution from crafted RBG and TGA files due to out-of-bounds write and memory corruption. Belkin F9K1009 and F9K1010 versions 2.00.04/2.00.09 contain critical hard-coded credentials in their web interface. Burk Technology ARC Solo devices allow unauthenticated attackers to change the administrator password. The react-native-bottom-tabs library, up to version 0.9.2, has a workflow vulnerability enabling arbitrary code execution and secret exfiltration. GLPI-screenshot-plugin versions below 2.0.2 allow authenticated users to leak files or use PHP wrappers. CesiumLab Web up to version 4.0 has a critical SQL injection vulnerability affecting its lodmodels component. CleverReach WP plugin for WordPress, up to version 1.5.20, is vulnerable to time-based SQL injection via the 'title' parameter. Code-projects Online Medicine Guide 1.0 and Simple Art Gallery 1.0 both suffer from critical SQL injection vulnerabilities. CODESYS Control RTE (SL) allows low-privileged attackers to read and write certificates and keys, and also has a NULL pointer dereference vulnerability. Cursor code editor versions below 1.3.9 can allow attackers to write to workspace files without approval, potentially leading to RCE. The Assemblyline 4 Service Client, before version 4.6.1.dev138, is vulnerable to path traversal. LibreChat versions 0.0.6 through 0.7.7-rc1 expose a testing endpoint allowing arbitrary chat reading. DELMIA Apriso releases 2020 through 2025 have missing authorization and code injection vulnerabilities. Dell Avamar versions prior to 19.12 have a server-side trusting HTTP permission methods vulnerability. Dell Digital Delivery versions prior to 5.6.1.0 have insufficiently protected credentials. Dell ECS versions prior to 3.8.1.5 and ObjectScale 4.0.0.0 use hard-coded cryptographic keys. Dell Enterprise SONiC OS version 4.5.0 has a cryptographic key vulnerability in SSH. Dell PowerProtect Data Domain and DD OS versions have an authentication bypass by spoofing vulnerability.