Spencer McIntyre NetWin SurgeFTP - (Authenticated) Admin Command Injection (Metasploit)
remote multiple OSVDB-89105

Metasploit Splunk 5.0 - Custom App Remote Code Execution (Metasploit)
remote multiple OSVDB-88496

Metasploit Adobe IndesignServer 5.5 - SOAP Server Arbitrary Script Execution (Metasploit)
remote multiple OSVDB-87548

SEC Consult FirePass SSL VPN - Local File Inclusion
webapps multiple OSVDB-88091

Ben Williams Symantec Messaging Gateway 9.5.3-3 - Cross-Site Request Forgery
webapps multiple CVE-2012-0308;OSVDB-84897

kingcope MySQL - Remote User Enumeration
remote multiple CVE-2012-5615;OSVDB-88067

LiquidWorm Oracle OpenSSO 8.0 - Multiple Cross-Site Scripting POST Injection Vulnerabilities
webapps multiple OSVDB-88053;OSVDB-88052

Joseph Sheridan Forescout CounterACT - 'a' Open Redirection
webapps multiple CVE-2012-4982;OSVDB-87893

Nahuel Grisolia Websense Proxy - Filter Bypass
dos multiple OSVDB-87867

AkaStep Greenstone - Multiple Vulnerabilities
remote multiple

Vulnerability-Lab SonicWALL CDP 5040 6.x - Multiple Vulnerabilities
webapps multiple OSVDB-87640;OSVDB-87639;OSVDB-87638

Alexander Klink Splunk 4.3.1 - Denial of Service
dos multiple

X-Cisadane Media Player Classic (MPC) 1.5 - WebServer Request Handling Remote Denial of Service
dos multiple OSVDB-87549

Metasploit Java Applet - JAX-WS Remote Code Execution (Metasploit)
remote multiple CVE-2012-5076;OSVDB-86363;CVE-2012-5067;OSVDB-86350

anonymous ESRI ArcGIS for Server - 'where' SQL Injection
webapps multiple CVE-2012-4949;OSVDB-87277

Mario Heiderich Cryptocat 2.0.22 - Arbitrary Script Injection
remote multiple CVE-2013-4103;OSVDB-95007