D4NB4R Joomla! Component com_tag - 'tag' SQL Injection
webapps php OSVDB-86789

D4NB4R Joomla! Component com_fss 1.9.1.1447 - SQL Injection
webapps php OSVDB-86499

xistence ManageEngine Security Manager Plus 5.5 build 5505 - Remote SYSTEM SQL Injection (Metasploit)
remote windows OSVDB-86562

xistence ManageEngine Security Manager Plus 5.5 build 5505 - Remote Root/SYSTEM SQL Injection
remote multiple OSVDB-86562

xistence ManageEngine Security Manager Plus 5.5 build 5505 - Directory Traversal
webapps multiple OSVDB-86563

MustLive WordPress Plugin Wordfence Security - Cross-Site Scripting
webapps php

Nikita Tarakanov Broadcom WIDCOMM Bluetooth - 'btkrnl.sys' Driver Privilege Escalation
local windows

cr4wl3r Amateur Photographer's Image Gallery - 'fullscreen.php?albumid' SQL Injection
webapps php OSVDB-92070

cr4wl3r Amateur Photographer's Image Gallery - 'plist.php?albumid' Cross-Site Scripting
webapps php OSVDB-91935

cr4wl3r Amateur Photographer's Image Gallery - 'plist.php?albumid' SQL Injection
webapps php OSVDB-92069

cr4wl3r Amateur Photographer's Image Gallery - 'force-download.php?File' Information Disclosure
webapps php OSVDB-92068

cr4wl3r BSW Gallery - 'uploadpic.php' Arbitrary File Upload
webapps php OSVDB-92067

Ashiyane Digital Security Team WordPress Plugin FireStorm Professional Real Estate 2.06.01 - SQL Injection
webapps php OSVDB-86686

Mike Eduard OTRS 3.1 - Persistent Cross-Site Scripting
webapps windows CVE-2012-4751;CVE-2012-4600;OSVDB-85074

Esteban Martinez Fayo Oracle Database - Protocol Authentication Bypass
local multiple CVE-2012-3137;OSVDB-85863

High-Tech Bridge jCore - '/admin/index.php?path' Cross-Site Scripting
webapps php CVE-2012-4231;OSVDB-86495