1. A vulnerability in Academy LMS allows an unauthenticated remote attacker to obtain sensitive information and impact confidentiality and integrity, with a CVSS score of 7.1. 2. A critical vulnerability in Brevo for WooCommerce Sendinblue for WooCommerce allows an unauthenticated remote attacker to execute arbitrary code, with a CVSS score of 8.5. 3. A vulnerability in Brocade SANnav versions before 2.3.0a allows an unauthenticated local attacker to gain access to sensitive data inside the PostgreSQL database, with a CVSS score of 7.8. 4. A vulnerability in Codesys Development System V2.3 allows an unauthenticated local attacker to execute arbitrary code or crash the system, with a CVSS score of 7.8. 5. A vulnerability in Delta Electronics DIAEnergie v1.10.1.8610 and prior allows a malicious user to impact confidentiality and integrity via Configuration Dictionary, with a CVSS score of 8.8. 6. A local root exploit in dnf5daemon-server before 5.1.17 allows a malicious user to impact confidentiality and integrity via Configuration Dictionary, with a CVSS score of 7.5. 7. A vulnerability in Fermyon Spin before 2.4.3 allows an unauthenticated remote attacker to induce a request to an arbitrary host, with a CVSS score of 9.1. 8. A vulnerability in GLPI before 10.0.15 allows an authenticated user to exploit a SQL injection vulnerability in the saved searches feature to alter another user's account data, with a CVSS score of 7.1. 9. A vulnerability in GLPI before 10.0.15 allows an authenticated user to exploit a SQL injection vulnerability from map search, with a CVSS score of 7.7. 10. A vulnerability in Hoppscotch before 0.8.0 allows an unauthenticated remote attacker to escape the sandbox and execute arbitrary code, with a CVSS score of 8.3.