LiquidWorm Smartwares HOME easy 1.0.9 - Database Backup Information Disclosure
webapps hardware

LiquidWorm Smartwares HOME easy 1.0.9 - Client-Side Authentication Bypass
webapps hardware

Ivan Marmolejo QNAP NetBak Replicator 4.5.6.0607 - 'QVssService' Unquoted Service Path
local windows

Marcos Antonio León Wacom WTabletService 6.6.7-3 - 'WTabletServicePro' Unquoted Service Path
local windows

Google Security Research macOS XNU - Missing Locking in checkdirs_callback() Enables Race with fchdir_common()
dos macos

Google Security Research WebKit - Universal XSS in JSObject::putInlineSlow and JSValue::putToPrimitive
dos multiple

Google Security Research JavaScriptCore - Type Confusion During Bailout when Reconstructing Arguments Objects
dos multiple CVE-2019-8820

Fabian Mosch_ Nick Theisinger SD.NET RIM 4.7.3c - 'idtyp' SQL Injection
webapps aspx 80

Diego Armando Buztamante Rico Blue Stacks App Player 2.4.44.62.57 - _BstHdLogRotatorSvc_ Unquote Service Path
local windows

Gustavo Briseño Launch Manager 6.1.7600.16385 - 'DsiWMIService' Unquoted Service Path
local windows

Luis Martínez OpenVPN Connect 3.0.0.272 - 'agent_ovpnconnect' Unquoted Service Path
local windows

Ozer Goker ownCloud 10.3.0 stable - Cross-Site Request Forgery
webapps linux

Sainadh Jamalpur OpenVPN Private Tunnel 2.8.4 - 'ovpnagent' Unquoted Service Path
local windows

Princy Edward WordPress Plugin Google Review Slider 6.1 - 'tid' SQL Injection
webapps php

Google Security Research JavaScriptCore - GetterSetter Type Confusion During DFG Compilation
dos multiple CVE-2019-8765

Daniel Ortiz Linux/x86 - execve(/bin/sh) + NOT|ROT+8 Encoded + Null-Free Shellcode (47 bytes)
linux_x86 47