Joomla Zoo by YooTheme component version 3.3.10 suffers from database disclosure and remote SQL injection vulnerabilities.
libxpc on MacOS version 10.14.1 suffers from an arbitrary mach port name deallocation in XPC services due to invalid mach message parsing in _xpc_serializer_unpack.
iOS and MacOS suffers from sandbox escape vulnerabilities due to type confusions and memory safety issues in iohideventsystem.
XNU suffers from a copy-on-write behavior bypass via partial-page truncation of file.
XNU vm_map_copy optimization which requires atomicity is not atomic. This violates the semantics of mach message OOL memory, and leads to TOCTOU issues which can lead to memory corruption.
iOS and MacOS suffer from a kernel heap overflow in PF_KEY due to lack of bounds checking when retrieving statistics.
R i386 version 3.5.0 local buffer overflow SEH exploit.
AnyBurn x86 version 4.3 suffers from a denial of service vulnerability.
UltraISO version 9.7.1.3519 local buffer overflow SEH exploit.
WeBid version 1.2.2 suffers from multiple cross site scripting vulnerabilities.