mm0r1 PHP 7.1 < 7.3 - 'json serializer' disable_functions Bypass
webapps multiple

Sainadh Jamalpur Gila CMS < 1.11.1 - Local File Inclusion
webapps multiple CVE-2019-16679

xerubus Enigma NMS 65.0.0 - SQL Injection
webapps multiple 80 CVE-2019-16065

xerubus Enigma NMS 65.0.0 - OS Command Injection
webapps multiple CVE-2019-16072

xerubus Enigma NMS 65.0.0 - Cross-Site Request Forgery
webapps multiple CVE-2019-16068

Justin Wagner Pulse Secure 8.1R15.1/8.2/8.3/9.0 SSL VPN - Remote Code Execution
remote multiple CVE-2019-11539

Bhadresh Patel Wolters Kluwer TeamMate 3.1 - Cross-Site Request Forgery
webapps multiple

Aetsu Alkacon OpenCMS 10.5.x - Local File inclusion
webapps multiple CVE-2019-13237

Aetsu Alkacon OpenCMS 10.5.x - Cross-Site Scripting (2)
webapps multiple CVE-2019-13236

Aetsu Alkacon OpenCMS 10.5.x - Cross-Site Scripting
webapps multiple CVE-2019-13235;CVE-2019-13234

Google Security Research Webkit JSC: JIT - Uninitialized Variable Access in ArgumentsEliminationPhase::transform
dos multiple CVE-2019-8689

Jarad Kopf Tableau - XML External Entity
webapps multiple CVE-2019-15637

MaYaSeVeN Nimble Streamer 3.0.2-2 < 3.5.4-9 - Directory Traversal
webapps multiple CVE-2019-11013

Pedro Ribeiro Cisco UCS Director_ Cisco Integrated Management Controller Supervisor and Cisco UCS Director Express for Big Data - Multiple Vulnerabilities
remote multiple

LoadLow LibreOffice < 6.2.6 Macro - Python Code Execution (Metasploit)
remote multiple CVE-2019-9851

Alyssa Herrera Pulse Secure 8.1R15.1/8.2/8.3/9.0 SSL VPN - Arbitrary File Disclosure (Metasploit)
webapps multiple CVE-2019-11510