1. 8theme's XStore Core and XStore have path traversal vulnerabilities that allow PHP local file inclusion, affecting versions up to 5.3.8 and 9.3.8, respectively. 2. ABB and Busch-Jaeger's FTS Display and BCU have a vulnerability that allows an attacker to take control via access to the local KNX bus system. 3. CodePeople's Directus has a denial of service vulnerability due to a memory issue in random string generation utility, affecting versions before 10.11.2. 4. Dell's CPG BIOS has a missing support for integrity check vulnerability, allowing an attacker with physical access to bypass security mechanisms. 5. Dell's PowerScale OneFS has a hard-coded credentials vulnerability, affecting versions 8.2.x through 9.8.0.x, which could lead to information disclosure and denial of service. 6. Denoland's Evmos has an "infinite money glitch" vulnerability, allowing contracts to double the supply of Evmos after each transaction, affecting versions before V18.1.0. 7. Envoyproxy's Envoy has a crash vulnerability due to how it invokes the nlohmann JSON library, affecting versions with incomplete UTF-8 strings. 8. Expresstech's Quiz and Survey Master plugin for WordPress is vulnerable to SQL Injection via the 'question_id' parameter, affecting versions up to 9.0.1. 9. Chanjet's Dextaz Ping has a command injection vulnerability, affecting versions up to 0.65. 10. Cisco's Finesse has a denial of service vulnerability due to incorrect calculation of buffer size, affecting versions with Brotli filter.