valen Microsoft Windows - 'WSReset' UAC Protection Bypass (Registry)
local windows

Mohammed Abdul Raheem Craft CMS 2.7.9/3.2.5 - Information Disclosure
webapps php CVE-2019-14280

Bhadresh Patel Wolters Kluwer TeamMate 3.1 - Cross-Site Request Forgery
webapps multiple

NF Kaseya VSA agent 9.5 - Privilege Escalation
local windows

Aetsu Alkacon OpenCMS 10.5.x - Local File inclusion
webapps multiple CVE-2019-13237

Aetsu Alkacon OpenCMS 10.5.x - Cross-Site Scripting (2)
webapps multiple CVE-2019-13236

Aetsu Alkacon OpenCMS 10.5.x - Cross-Site Scripting
webapps multiple CVE-2019-13235;CVE-2019-13234

Todor Donev IntelBras TELEFONE IP TIP200/200 LITE 60.61.75.15 - Arbitrary File Read
remote hardware

MTK WordPress Plugin Event Tickets 4.10.7.1 - CSV Injection
webapps php

Jonathan Crosby ChaosPro 3.1 - SEH Buffer Overflow
local windows

Jonathan Crosby ChaosPro 2.1 - SEH Buffer Overflow
local windows

Jonathan Crosby ChaosPro 2.0 - SEH Buffer Overflow
local windows

Nipun Somani Opencart 3.x - Cross-Site Scripting
webapps php CVE-2019-15081

James Bercegay Webmin < 1.920 - 'rpc.cgi' Remote Code Execution (Metasploit)
webapps linux

Todor Donev Cisco Email Security Appliance (IronPort) C160 - 'Host' Header Injection
remote hardware

James Chamberlain VX Search Enterprise 10.4.16 - 'User-Agent' Denial of Service
dos windows