abcd-community: Two vulnerabilities in ABCD ABCD2 allow path traversal via manipulation of the image or sitio argument, with a CVSS score of 7.5.actions/artifact: Arbitrary file write vulnerability in actions/artifact versions before 2.1.7 due to crafted artifacts containing path traversal filenames, with a CVSS score of 7.3.alf.io: Race condition in alf.io prior to version 2.0-M5 allows bypassing promo code limits, with a CVSS score of 7.5.angeljudesuarez/event_management_system: SQL Injection in Sourcecodehero Event Management System 1.0 via the username parameter, with a critical CVSS score of 9.8.apache/ofbiz: Server-Side Request Forgery and Direct Request vulnerabilities in Apache OFBiz before 18.12.16, with CVSS scores of 9.8 and 7.5 respectively.Arm Ltd/Bifrost GPU Kernel Driver: Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, and Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver, with a CVSS score of 7.8.Authenticator-Extension/Authenticator: Weak encryption keys in Authenticator versions 7.0.0 and below, with a CVSS score of 8.8.bitpressadmin/Bit File Manager: Remote Code Execution vulnerability in Bit File Manager for WordPress versions 6.0 to 6.5.5, with a CVSS score of 8.1.blakeembrey/js-template: Code injection vulnerability in @blakeembrey/template before version 1.2.0, with a CVSS score of 7.3.chrisbadgett/LifterLMS: Blind SQL Injection in LifterLMS - WP LMS for eLearning, Online Courses, & Quizzes versions up to 7.7.5, with a CVSS score of 7.2.Cisco/Cisco Smart License Utility: Unauthenticated remote login and sensitive information disclosure vulnerabilities, with CVSS scores of 9.8 and 7.5 respectively.code-projects/Hospital Management System: SQL Injection vulnerability in Hospital Management System 1.0 via the username parameter, with a CVSS score of 7.3.containers/aardvark-dns: Denial of Service vulnerability in Aardvark-dns versions 1.12.0 and 1.12.1, with a CVSS score of 7.5.contrid/Newsletters: Privilege escalation vulnerability in Newsletters for WordPress versions up to 4.9.9.2, with a CVSS score of 8.8.Dell/SmartFabric OS10 Software: Command Injection and Use of Hard-coded Password vulnerabilities, with CVSS scores of 7.5 and 7.9 respectively.dlink/di-8400_firmware: Command Injection vulnerability in D-Link DI-8400 16.07.26A1, with a critical CVSS score of 9.8.dotonpaper/Pinpoint Booking System: SQL Injection vulnerability in Pinpoint Booking System - #1 WordPress Booking Plugin versions up to 2.9.9.5.0, with a CVSS score of 8.8.easytest/easytest_online_test_platform: Multiple SQL Injection vulnerabilities in Easytest Online Test Platform ver.24E01 and earlier, with CVSS scores ranging from 8.8 to 9.8.