leediay153 from Viettel Post

Sylius 2.x before 2.1.16 and 2.2.9 Payment Amount Overwrite

Sylius before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 JWT Audience Confusion Allows Admin API Authentication

Sylius before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 Admin Password Reset Poisoning via Host Header

Sylius 2.x before 2.1.16 and 2.2.9 Arbitrary Payment Action via Shop API

ClipBucket v5 before 5.5.3-#197 Path Traversal via template_editor.php

UVdesk core-framework before 1.1.7 Privilege Escalation via editAgent

UVdesk core-framework before 1.1.7 Authorization Bypass via Saved Reply

UVdesk core-framework before 1.1.7 Stored XSS via SwiftMailer

ZoneMinder 1.37.x Path Traversal via files view

QloApps through 1.7.0 Authorization Bypass via ajaxProcessBulkUpdateRooms