1. Apache SeaTunnel Web has a vulnerability that allows an attacker to execute arbitrary code or cause a Denial of Service (DoS) due to a prototype pollution issue in the _assign() method.2. D-Link DIR-820LW REVA FIRMWARE PATCH 2.03.B01 and DIR-860L REVA FIRMWARE PATCH 1.10..B04 have hardcoded credentials in the Telnet service, allowing unauthenticated remote attackers to log in and perform arbitrary commands.3. A SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the id parameter to php-lfis/admin/categories/manage_category.php.4. XWiki Platform has a vulnerability that allows a user to execute JavaScript snippets on the side of another user, compromising the confidentiality, integrity, and availability of the whole XWiki installation.5. Elektra, an Openstack Dashboard for Operators and Consumers of Openstack Services, has a code injection vulnerability in the live search functionality, allowing an authenticated user to craft a search term containing Ruby code that is later executed.6. FOG Project's FOG Server 1.5.10.41.2 can leak AD username and password when registering a computer, which is fixed in versions 1.5.10.41.3 and 1.6.0-beta.1395.7. Softnext's SN OS 12.1 has a vulnerability in the web services of Mail SQR Expert and Mail Archiving Expert, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the remote server.8. The WpStickyBar WordPress plugin through 2.1.0 has a SQL injection vulnerability due to improper sanitization and escaping of a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users.9. The CZ Loan Management WordPress plugin before 3.11.8 has improper authorization, allowing unauthenticated users to upload media files via the async upload functionality of WP.10. The User Profile Builder WordPress plugin before 3.11.8 has a vulnerability that allows an attacker to gain administrative access without having any kind of account on the targeted site and perform unauthorized actions due to improper logic flow on the user registration process.