Armadito suffers from a remote arbitrary file write due to a man-in-the-middle issue.

Craft CMS versions prior to build 2791 suffer from a server-side template injection vulnerability.

Kagao version 3.0 suffers from cross site scripting and remote SQL injection vulnerabilities.

PspInitializeFullProcessImageName does not correctly handle a NULL pointer being passed to it leading to a dereference at NULL for a file object which might be exploitable on 32 bit systems for elevation of privilege.

Untangle NGFW versions 12.1.0 Beta and below execEvil() authentication root command injection exploit.

Ubuntu Security Notice 3017-2 – Jesse Hertz and Tim Newsham discovered that the Linux netfilter implementation did not correctly perform validation when handling 32 bit compatibility IPT_SO_SET_REPLACE events on 64 bit platforms. A local unprivileged attacker could use this to cause a denial of service (system crash) or execute arbitrary code with administrative privileges. Kangjie Lu discovered an information leak in the core USB implementation in the Linux kernel. A local attacker could use this to obtain potentially sensitive information from kernel memory. Various other issues were also addressed.