GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a huge amount of memory, resulting in insufficient memory or program crash.

A use-after-free in Busybox 1.35-x’s awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.

ftcms <=2.1 was discovered to be vulnerable to Arbitrary File Read via tp.php

ftcms <=2.1 was discovered to be vulnerable to directory traversal attacks via the parameter tp.