leediay153 from Viettel Post

QloApps through 1.7.0 Reflected XSS via Book Now Search Parameters

ClipBucket v5 through 5.5.3-#197 SQL Injection via language_id Parameter

ClipBucket v5 through 5.5.3-#197 SQL Injection via videoid Parameter

ZoneMinder before 1.38.4 Incorrect Authorization in frames API index

ZoneMinder before 1.38.4 Buffer Overflow via HTTP Camera Response

Sylius 2.x before 2.1.16 and 2.2.9 Payment Amount Overwrite

Sylius before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 JWT Audience Confusion Allows Admin API Authentication

Sylius before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 Admin Password Reset Poisoning via Host Header

Sylius 2.x before 2.1.16 and 2.2.9 Arbitrary Payment Action via Shop API

ClipBucket v5 before 5.5.3-#197 Path Traversal via template_editor.php