diff --git a/2019/11xxx/CVE-2019-11369.json b/2019/11xxx/CVE-2019-11369.json
index 8b31e8f05bd..dd3c0eae061 100644
--- a/2019/11xxx/CVE-2019-11369.json
+++ b/2019/11xxx/CVE-2019-11369.json
@@ -61,6 +61,11 @@
                 "refsource": "MISC",
                 "name": "https://github.com/nepenthe0320/cve_poc/blob/master/CVE-2019-11369",
                 "url": "https://github.com/nepenthe0320/cve_poc/blob/master/CVE-2019-11369"
+            },
+            {
+                "refsource": "FULLDISC",
+                "name": "20191031 [RT-SA-2019-013] Unsafe Storage of Credentials in Carel pCOWeb HVAC",
+                "url": "http://seclists.org/fulldisclosure/2019/Oct/45"
             }
         ]
     }
diff --git a/2019/13xxx/CVE-2019-13549.json b/2019/13xxx/CVE-2019-13549.json
index 23963b636a1..820787981de 100644
--- a/2019/13xxx/CVE-2019-13549.json
+++ b/2019/13xxx/CVE-2019-13549.json
@@ -48,6 +48,11 @@
                 "refsource": "MISC",
                 "name": "https://www.us-cert.gov/ics/advisories/icsa-19-297-01",
                 "url": "https://www.us-cert.gov/ics/advisories/icsa-19-297-01"
+            },
+            {
+                "refsource": "FULLDISC",
+                "name": "20191031 [RT-SA-2019-014] Unauthenticated Access to Modbus Interface in Carel pCOWeb HVAC",
+                "url": "http://seclists.org/fulldisclosure/2019/Oct/46"
             }
         ]
     },
diff --git a/2019/13xxx/CVE-2019-13553.json b/2019/13xxx/CVE-2019-13553.json
index a6ec1231177..e11ae833774 100644
--- a/2019/13xxx/CVE-2019-13553.json
+++ b/2019/13xxx/CVE-2019-13553.json
@@ -48,6 +48,11 @@
                 "refsource": "MISC",
                 "name": "https://www.us-cert.gov/ics/advisories/icsa-19-297-01",
                 "url": "https://www.us-cert.gov/ics/advisories/icsa-19-297-01"
+            },
+            {
+                "refsource": "FULLDISC",
+                "name": "20191031 [RT-SA-2019-013] Unsafe Storage of Credentials in Carel pCOWeb HVAC",
+                "url": "http://seclists.org/fulldisclosure/2019/Oct/45"
             }
         ]
     },