Debian Linux Security Advisory 3801-1 – It was discovered that ruby-zip, a Ruby module for reading and writing zip files, is prone to a directory traversal vulnerability. An attacker can take advantage of this flaw to overwrite arbitrary files during archive extraction via a .. (dot dot) in an extracted filename.

CyberGhost version 6.0.4.2205 suffers from a privilege escalation vulnerability.

OpenElec versions 6.0.3 and 7.0.1 suffer from a remote code execution vulnerability.

Ettercap version 0.8.2 suffers from an out-of-bounds read vulnerability in Etterfilter.

Tcpreplay version 4.1.2 suffers from a buffer overflow vulnerability in tcpcapinfo.

Deluge version 1.3.13 suffers from a cross site request forgery vulnerability that can allow for remote code execution.