Multiple laser printers and MFPs (multifunction printers) which implement Ricoh Web Image Monitor contain a reflected cross-site scripting vulnerability.

The installer for Pupsman provided by Fuji Electric Co.,Ltd. contains multiple vulnerabilities.

Jena Fuseki provided by The Apache Software Foundation contains a path traversal vulnerability.

Web Config embedded in SEIKO EPSON multiple printers and scanners contains a cross-site request forgery vulnerability.

SkyBridge MB-A100/MB-A110 provided by Seiko Solutions Inc. contains an OS command injection vulnerability.

RPG MAKER MV and MZ provided by Gotcha Gotcha Games Inc. contain an OS command injection vulnerability.

DGM3103SCT provided by AVTECH Security Corporation contains an OS command injection vulnerability.

Fluentd provided by Fluentd Project contains multiple vulnerabilities.

ExpressUpdate Agent for Windows provided by NEC Corporation configures its named pipe with an improper access restriction.

Generic IO & Memory Access driver for PCs provided by TOSHIBA CORPORATION and Dynabook Inc. exposes its IOCTL with insufficient access control.