Photubias VMware vCenter Server 6.7 - Authentication Bypass
webapps multiple CVE-2020-3952

Raphael Karger WordPress Plugin BBPress 2.5 - Unauthenticated Privilege Escalation
webapps php CVE-2020-13693

Halis Duraki Crystal Shard http-protection 0.2.0 - IP Spoofing Bypass
webapps multiple

UnD3sc0n0c1d0 WordPress Plugin Multi-Scheduler 1.0.0 - Cross-Site Request Forgery (Delete User)
webapps php

Th3GundY QNAP QTS and Photo Station 6.0.3 - Remote Command Execution
webapps php

China Banking and Insurance Information Technology Management Co. EyouCMS 1.4.6 - Persistent Cross-Site Scripting
webapps php

Berk Dusunur Online-Exam-System 2015 - 'fid' SQL Injection
webapps php

Berk Dusunur NOKIA VitalSuite SPM 2020 - 'UserName' SQL Injection
webapps multiple

VulnSpy OXID eShop 6.3.4 - 'sorting' SQL Injection
webapps php

China Banking and Insurance Information Technology Management Co. Kuicms PHP EE 2.0 - Persistent Cross-Site Scripting
webapps php

Matthew Aberegg osTicket 1.14.1 - 'Saved Search' Persistent Cross-Site Scripting
webapps php

Matthew Aberegg osTicket 1.14.1 - 'Ticket Queue' Persistent Cross-Site Scripting
webapps php

Matthew Aberegg LimeSurvey 4.1.11 - 'Permission Roles' Persistent Cross-Site Scripting
webapps php

that faceless coder Online Marriage Registration System 1.0 - Persistent Cross-Site Scripting
webapps php

Austin Martin WordPress Plugin Drag and Drop File Upload Contact Form 1.3.3.2 - Remote Code Execution
webapps php

Photubias Pi-hole 4.4.0 - Remote Code Execution (Authenticated)
webapps linux CVE-2020-11108