A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in the x86_emulate_insn in arch/x86/kvm/emulate.c. This flaw occurs while executing an illegal instruction in guest in the Intel CPU.

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

Path Traversal in GitHub repository filegator/filegator prior to 7.8.0.

Session Fixation in GitHub repository filegator/filegator prior to 7.8.0.

The Rotating Posts WordPress plugin through 1.11 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack