GitLab version 11.4.7 authenticated remote code execution exploit.

Grav CMS version 1.6.30 with Admin plugin version 1.9.18 suffers from a persistent cross site scripting vulnerability.

Raysync version 3.3.3.8 suffers form a remote code execution vulnerability.

Magic Home Pro version 1.5.1 suffers from an authentication bypass vulnerability.

PrestaShop ProductComments version 4.2.0 suffers from a remote blind SQL injection vulnerability.

There is an out-of-bounds write vulnerability when decoding a malformed PICT image on macOS. The vulnerability has been confirmed on the latest stable macOS version.