Multiple vulnerabilities have been discovered in various software products, including 202ecommerce, ABB, Absolute Security, Acronis, Adrian Tobey, Ankitects, argoproj, Berqier Ltd, Bi Admin 2020, Canonical Ltd, cBioPortal, ChurchCRM, ckp267, danocmx, davidanderson, Designinvento, dnsjava, duckdb, F-logic, and FishAudio. These vulnerabilities include logical weaknesses, improper privilege management, elevation of privilege, remote command execution, SQL injection, arbitrary script execution, reflected XSS, denial of service, server-side request forgery, and arbitrary file deletion. The affected products and versions include 202ecommerce PayPal Official for PrestaShop 7+ prior to version 6.4.2, ABB Advant MOD 300 AdvaBuild from 3.0 through 3.7 SP2, Absolute Secure Access prior to version 13.07, Acronis Cyber Infrastructure before build 5.0.1-61, Adrian Tobey FormLift for Infusionsoft Web Forms from n/a through 7.5.17, Ankitects Anki 24.04, argoproj Argo CD prior to version 2.11.6, Berqier Ltd BerqWP from n/a through 1.7.5, Bi Admin 2020 UiPress lite from n/a through 3.4.06, Canonical Ltd Ubuntu Desktop Provision prior to version 0.1.5, cBioPortal cbioportal prior to version 6.0.12, ChurchCRM prior to version 5.9.2, ckp267 MaxiBlocks prior to version 1.9.2, danocmx node-tf2-item-format prior to version 5.9.14, davidanderson Redux Framework from 4.4.12 to 4.4.17, Designinvento DirectoryPress from n/a through 3.6.10, dnsjava dnsjava prior to version 3.6.0, duckdb duckdb prior to version 1.1.0, F-logic DataCube3 1.0, and FishAudio Bert-VITS2 2.3 and earlier.The CVSS scores for these vulnerabilities range from 7.2 to 9.8, indicating high to critical severity. Users are advised to update their software to the latest versions and apply patches to mitigate these vulnerabilities.