Several high vulnerabilities have been reported in various products, including MaxKB, Woocommerce Envato Affiliates, and Acrel Electrical's EEMS Enterprise Power Operation and Maintenance Cloud Platform. The MaxKB vulnerability allows unauthenticated attackers to invoke webhook triggers and execute bound tasks, while the Woocommerce Envato Affiliates vulnerability allows access to functionality not properly constrained by ACLs. Acrel Electrical's EEMS Enterprise Power Operation and Maintenance Cloud Platform has multiple vulnerabilities, including SQL injection and path traversal vulnerabilities. Other products with reported vulnerabilities include AgataSoft Auto PingMaster, which contains a stack-based buffer overflow vulnerability, and agno, which contains a SQL injection vulnerability in the ClickHouse vector database backend. AiOPMSD Final has multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries. The airjp73 rvf library has a prototype pollution vulnerability that allows attackers to set arbitrary properties on Object.prototype of the running server process. The amir20 dozzle library has a vulnerability that allows attackers to send an HTTP POST to a supplied URL with attacker-controlled request headers. Arjun Thakur's Duplicate Page and Post has an improper neutralization of special elements used in an SQL command vulnerability, while auth0's auth0.js has a vulnerability that may improperly return user profile information using a valid access token when a specifically crafted invalid ID token is provided. Autodesk's 3ds Max has multiple vulnerabilities, including out-of-bounds write and memory corruption vulnerabilities. Avaiga's taipy has a path traversal vulnerability that allows unauthenticated attackers to escape the intended module directory, while B&R Industrial Automation GmbH's PPT30 Operating System has an allocation of resources without limits or throttling vulnerability. Babel has a vulnerability that can cause it to generate output code that executes arbitrary code, and bentoml's BentoML has multiple vulnerabilities, including a vulnerability that allows malicious bento.yaml files to smuggle arbitrary Dockerfile directives into the generated Dockerfile. These vulnerabilities can be exploited by attackers to gain unauthorized access, execute arbitrary code, or cause other malicious effects, and users are advised to update to the latest versions of the affected products to mitigate these risks. The CVSS scores for these vulnerabilities range from 7.1 to 8.8, indicating a high level of severity.