Jinson Varghese Behanan Genexis Platinum-4410 P4410-V2-1.28 - Broken Access Control and CSRF
webapps hardware CVE-2020-25015

bigger.wing Apache Flink 1.9.x - File Upload RCE (Unauthenticated)
webapps java

Ömer Tuygun Prey 1.9.6 - _CronService_ Unquoted Service Path
local windows

Matthew Aberegg Nagios XI 5.7.3 - 'mibs.php' Remote Command Injection (Authenticated)
webapps php CVE-2020-5791

Gurkirat Singh Sphider Search Engine 1.3.6 - 'word_upper_bound' RCE (Authenticated)
webapps php

Gurkirat Singh Sentrifugo 3.2 - File Upload Restriction Bypass (Authenticated)
webapps php CVE-2019-15813

Gurkirat Singh CMS Made Simple 2.1.6 - 'cntnt01detailtemplate' Server-Side Template Injection
webapps php CVE-2017-16783

nag0mez Ultimate Project Manager CRM PRO Version 2.0.5 - SQLi (Authenticated)
webapps php

Alperen Ergel Textpattern CMS 4.6.2 - Cross-site Request Forgery
webapps php

Matthew Aberegg Nagios XI 5.7.3 - 'SNMP Trap Interface' Authenticated SQL Injection
webapps php

Matthew Aberegg Nagios XI 5.7.3 - 'Manage Users' Authenticated SQL Injection
webapps php

Matthew Aberegg Nagios XI 5.7.3 - 'Contact Templates' Persistent Cross-Site Scripting
webapps php

Oğuz Türkgenç Company Visitor Management System (CVMS) 1.0 - Authentication Bypass
webapps php

George Tsimpidas Guild Wars 2 - Insecure Folder Permissions
local windows

Muhammed Eren Uygun NodeBB Forum 1.12.2-1.14.2 - Account Takeover
webapps multiple

George Tsimpidas Battle.Net 1.27.1.12428 - Insecure File Permissions
local windows