Kloxo version 5.75 suffers from multiple vulnerabilities including, but not limited to cross site scripting, SQL injection, symlink attacks, and file overwrite issues.
Core Security Technologies Advisory - CUPS versions 1.3.9 and below suffer from a handling flaw of the IPP_TAG_UNSUPPORTED tag that allows attackers to cause a remote pre-authentication denial of service.
Unclassified NewsBoard version 1.6.4 suffers from remote SQL injection, file disclosure, local file inclusion, and remote command execution vulnerabilities.
Netragard, L.L.C Advisory - The libxml library is prone to a heap-based buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary within the context of an application using the affected library. Failed exploit attempts will result in a denial-of-service vulnerability. Safari uses the vulnerable libxml library and can be attacked via the feed:// input vector. Versions below 3.2.3 are affected.