baserCMS plugin "BcAddonMigrator" provided by baserCMS Users Community contains a vulnerability due to inclusion of functionality from untrusted control sphere.
Smartphone application Tohoku Electric Power "Yorisou e Net" provided by Tohoku Electric Power Company, Incorporated uses a hard-coded cryptographic key.
Android application "YAMAP -Social Trekking GPS App" provided by YAMAP INC. contains an improper access control vulnerability related to its WebView implementation.