# Vulnerabilities published in 2019


- [openSUSE-SU-2019:2685-1](https://insights.sbomify.com/openSUSE-SU-2019-2685-1/): Security update for postgresql (not scored)
- [openSUSE-SU-2019:2631-1](https://insights.sbomify.com/openSUSE-SU-2019-2631-1/): Security update for ucode-intel (not scored)
- [openSUSE-SU-2019:2629-1](https://insights.sbomify.com/openSUSE-SU-2019-2629-1/): Security update for libxml2 (not scored)
- [openSUSE-SU-2019:2620-1](https://insights.sbomify.com/openSUSE-SU-2019-2620-1/): Security update for ucode-intel (not scored)
- [openSUSE-SU-2019:2612-1](https://insights.sbomify.com/openSUSE-SU-2019-2612-1/): Security update for libxml2 (not scored)
- [openSUSE-SU-2019:2607-1](https://insights.sbomify.com/openSUSE-SU-2019-2607-1/): Recommended update for openafs (not scored)
- [openSUSE-SU-2019:2477-1](https://insights.sbomify.com/openSUSE-SU-2019-2477-1/): Recommended update for bcm20702a1-firmware (not scored)
- [openSUSE-SU-2019:2185-1](https://insights.sbomify.com/openSUSE-SU-2019-2185-1/): Security update for links (not scored)
- [openSUSE-SU-2019:2175-1](https://insights.sbomify.com/openSUSE-SU-2019-2175-1/): Security update for util-linux and shadow (not scored)
- [openSUSE-SU-2019:2154-1](https://insights.sbomify.com/openSUSE-SU-2019-2154-1/): Security update for opera (not scored)
- [openSUSE-SU-2019:2121-1](https://insights.sbomify.com/openSUSE-SU-2019-2121-1/): Security update for util-linux and shadow (not scored)
- [openSUSE-SU-2019:2107-1](https://insights.sbomify.com/openSUSE-SU-2019-2107-1/): Recommended update for opera (not scored)
- [openSUSE-SU-2019:2017-1](https://insights.sbomify.com/openSUSE-SU-2019-2017-1/): Recommended update for putty (not scored)
- [openSUSE-SU-2019:2007-1](https://insights.sbomify.com/openSUSE-SU-2019-2007-1/): Recommended update for dkgpg, libTMCG (not scored)
- [openSUSE-SU-2019:1985-1](https://insights.sbomify.com/openSUSE-SU-2019-1985-1/): Recommended update for putty (not scored)
- [openSUSE-SU-2019:1951-1](https://insights.sbomify.com/openSUSE-SU-2019-1951-1/): Recommended update for dkgpg, libTMCG (not scored)
- [openSUSE-SU-2019:1854-1](https://insights.sbomify.com/openSUSE-SU-2019-1854-1/): Security update for GraphicsMagick (not scored)
- [openSUSE-SU-2019:1669-1](https://insights.sbomify.com/openSUSE-SU-2019-1669-1/): Security update for wireshark (not scored)
- [openSUSE-SU-2019:1623-1](https://insights.sbomify.com/openSUSE-SU-2019-1623-1/): Security update for GraphicsMagick (not scored)
- [openSUSE-SU-2019:1619-1](https://insights.sbomify.com/openSUSE-SU-2019-1619-1/): Security update for GraphicsMagick (not scored)
- [openSUSE-SU-2019:1507-1](https://insights.sbomify.com/openSUSE-SU-2019-1507-1/): Recommended update for GraphicsMagick (not scored)
- [openSUSE-SU-2019:1491-1](https://insights.sbomify.com/openSUSE-SU-2019-1491-1/): Recommended update for GraphicsMagick (not scored)
- [openSUSE-SU-2019:1246-1](https://insights.sbomify.com/openSUSE-SU-2019-1246-1/): Security update for blueman (not scored)
- [openSUSE-SU-2019:1084-1](https://insights.sbomify.com/openSUSE-SU-2019-1084-1/): Security update for ucode-intel (not scored)
- [openSUSE-SU-2019:1050-1](https://insights.sbomify.com/openSUSE-SU-2019-1050-1/): Security update for blueman (not scored)
- [SUSE-SU-2019:3212-1](https://insights.sbomify.com/SUSE-SU-2019-3212-1/): Security update for postgresql (not scored)
- [SUSE-SU-2019:3090-1](https://insights.sbomify.com/SUSE-SU-2019-3090-1/): Security update for ucode-intel (not scored)
- [SUSE-SU-2019:3089-1](https://insights.sbomify.com/SUSE-SU-2019-3089-1/): Security update for ucode-intel (not scored)
- [SUSE-SU-2019:3087-1](https://insights.sbomify.com/SUSE-SU-2019-3087-1/): Security update for libxml2 (not scored)
- [SUSE-SU-2019:3085-1](https://insights.sbomify.com/SUSE-SU-2019-3085-1/): Security update for libxml2 (not scored)
- [SUSE-SU-2019:2982-1](https://insights.sbomify.com/SUSE-SU-2019-2982-1/): Security update for enigmail (not scored)
- [SUSE-SU-2019:2562-1](https://insights.sbomify.com/SUSE-SU-2019-2562-1/): This update for ansible1, ardana-ansible, ardana-cluster, ardana-db, ardana-extensions-nsx, ardana-glance, ardana-input-model, ardana-instal (not scored)
- [SUSE-SU-2019:2392-1](https://insights.sbomify.com/SUSE-SU-2019-2392-1/): Security update for util-linux and shadow (not scored)
- [SUSE-SU-2019:2307-1](https://insights.sbomify.com/SUSE-SU-2019-2307-1/): Security update for util-linux and shadow (not scored)
- [SUSE-SU-2019:2258-1](https://insights.sbomify.com/SUSE-SU-2019-2258-1/): Recommended update for NetworkManager (not scored)
- [SUSE-SU-2019:1610-1](https://insights.sbomify.com/SUSE-SU-2019-1610-1/): Security update for wireshark (not scored)
- [SUSE-SU-2019:1607-1](https://insights.sbomify.com/SUSE-SU-2019-1607-1/): Security update for wireshark (not scored)
- [SUSE-SU-2019:14179-1](https://insights.sbomify.com/SUSE-SU-2019-14179-1/): Security update for libxml2 (not scored)
- [SUSE-SU-2019:1141-1](https://insights.sbomify.com/SUSE-SU-2019-1141-1/): Security update for openssl-1_1 (not scored)
- [SUSE-SU-2019:1136-1](https://insights.sbomify.com/SUSE-SU-2019-1136-1/): Security update for openssl (not scored)
- [SUSE-SU-2019:1124-1](https://insights.sbomify.com/SUSE-SU-2019-1124-1/): Security update for openssl (not scored)
- [SUSE-SU-2019:0736-1](https://insights.sbomify.com/SUSE-SU-2019-0736-1/): Security update for ucode-intel (not scored)
- [SUSE-SU-2019:0712-1](https://insights.sbomify.com/SUSE-SU-2019-0712-1/): Security update for ucode-intel (not scored)
- [SUSE-SU-2019:0512-1](https://insights.sbomify.com/SUSE-SU-2019-0512-1/): Security update for openssl-1_1 (not scored)
- [SUSE-SU-2019:0128-1](https://insights.sbomify.com/SUSE-SU-2019-0128-1/): Security update for PackageKit (not scored)
- [RUSTSEC-2019-0040](https://insights.sbomify.com/RUSTSEC-2019-0040/): `boxfnonce` obsolete with release of Rust 1.35.0 (not scored)
- [RUSTSEC-2019-0032](https://insights.sbomify.com/RUSTSEC-2019-0032/): crust repo has been archived; use libp2p instead (not scored)
- [RUSTSEC-2019-0024](https://insights.sbomify.com/RUSTSEC-2019-0024/): Test advisory with associated example crate (not scored)
- [PSF-2019-17](https://insights.sbomify.com/PSF-2019-17/): http.cookiejar: Incorrect validation of path (not scored)
- [PSF-2019-16](https://insights.sbomify.com/PSF-2019-16/): Email header injection in Address objects (not scored)
- [PSF-2019-15](https://insights.sbomify.com/PSF-2019-15/): Remove newline characters from uu encoding methods (not scored)
- [PSF-2019-14](https://insights.sbomify.com/PSF-2019-14/): Regular Expression Denial of Service in http.cookiejar (not scored)
- [PSF-2019-13](https://insights.sbomify.com/PSF-2019-13/): ssl.match_hostname() ignores extra string after whitespace in IPv4 address (not scored)
- [GHSA-xrmp-99wj-p6jc](https://insights.sbomify.com/GHSA-xrmp-99wj-p6jc/): Prototype Pollution in deap (not scored)
- [GHSA-xm7f-x4wx-wmgv](https://insights.sbomify.com/GHSA-xm7f-x4wx-wmgv/): Out-of-bounds Read in byte (not scored)
- [GHSA-xm28-fw2x-fqv2](https://insights.sbomify.com/GHSA-xm28-fw2x-fqv2/): Denial of Service in foreman (not scored)
- [GHSA-xf5p-87ch-gxw2](https://insights.sbomify.com/GHSA-xf5p-87ch-gxw2/): Marked ReDoS due to email addresses being evaluated in quadratic time (not scored)
- [GHSA-xc7v-wxcw-j472](https://insights.sbomify.com/GHSA-xc7v-wxcw-j472/): Memory Exposure in tunnel-agent (not scored)
- [GHSA-x9p2-fxq6-2m5f](https://insights.sbomify.com/GHSA-x9p2-fxq6-2m5f/): Reverse Tabnapping in swagger-ui (not scored)
- [GHSA-wxhq-pm8v-cw75](https://insights.sbomify.com/GHSA-wxhq-pm8v-cw75/): Regular Expression Denial of Service in clean-css (not scored)
- [GHSA-wrw9-m778-g6mc](https://insights.sbomify.com/GHSA-wrw9-m778-g6mc/): Memory Exposure in bl (not scored)
- [GHSA-wfp9-vr4j-f49j](https://insights.sbomify.com/GHSA-wfp9-vr4j-f49j/): NoSQL Injection in sequelize (not scored)
- [GHSA-w7q7-vjp8-7jv4](https://insights.sbomify.com/GHSA-w7q7-vjp8-7jv4/): SQL Injection in typeorm (not scored)
- [GHSA-vpq5-4rc8-c222](https://insights.sbomify.com/GHSA-vpq5-4rc8-c222/): Denial of Service in canvas (not scored)
- [GHSA-vmhw-fhj6-m3g5](https://insights.sbomify.com/GHSA-vmhw-fhj6-m3g5/): Path Traversal in angular-http-server (not scored)
- [GHSA-vfv3-9w6v-23jp](https://insights.sbomify.com/GHSA-vfv3-9w6v-23jp/): typemap is Unmaintained (not scored)
- [GHSA-vc6r-4x6g-mmqc](https://insights.sbomify.com/GHSA-vc6r-4x6g-mmqc/): Path Traversal in m-server (not scored)
- [GHSA-v6cj-r88p-92rm](https://insights.sbomify.com/GHSA-v6cj-r88p-92rm/): Buffer Overflow in centra (not scored)
- [GHSA-v2p6-4mp7-3r9v](https://insights.sbomify.com/GHSA-v2p6-4mp7-3r9v/): Regular Expression Denial of Service in underscore.string (not scored)
- [GHSA-rv49-54qp-fw42](https://insights.sbomify.com/GHSA-rv49-54qp-fw42/): Path Traversal in servey (not scored)
- [GHSA-rch7-f4h5-x9rj](https://insights.sbomify.com/GHSA-rch7-f4h5-x9rj/): Identity Spoofing in libp2p-secio (not scored)
- [GHSA-qx4v-6gc5-f2vv](https://insights.sbomify.com/GHSA-qx4v-6gc5-f2vv/): Regular Expression Denial of Service (not scored)
- [GHSA-q42p-pg8m-cqh6](https://insights.sbomify.com/GHSA-q42p-pg8m-cqh6/): Prototype Pollution in handlebars (not scored)
- [GHSA-pm52-wwrw-c282](https://insights.sbomify.com/GHSA-pm52-wwrw-c282/): Command Injection in wiki-plugin-datalog (not scored)
- [GHSA-pgr8-jg6h-8gw6](https://insights.sbomify.com/GHSA-pgr8-jg6h-8gw6/): Cross-Site Scripting in webpack-bundle-analyzer (not scored)
- [GHSA-pgcr-7wm4-mcv6](https://insights.sbomify.com/GHSA-pgcr-7wm4-mcv6/): Sensitive Data Exposure in pem (not scored)
- [GHSA-p72p-rjr2-r439](https://insights.sbomify.com/GHSA-p72p-rjr2-r439/): Server-Side Request Forgery in terriajs-server (not scored)
- [GHSA-mxjr-xmcg-fg7w](https://insights.sbomify.com/GHSA-mxjr-xmcg-fg7w/): Arbitrary Code Injection in mobile-icon-resizer (not scored)
- [GHSA-mgv2-57vj-99xc](https://insights.sbomify.com/GHSA-mgv2-57vj-99xc/): Low severity vulnerability that affects eye.js (not scored)
- [GHSA-mc84-xr9p-938r](https://insights.sbomify.com/GHSA-mc84-xr9p-938r/): High severity vulnerability that affects generator-jhipster (not scored)
- [GHSA-m8fw-534v-xm85](https://insights.sbomify.com/GHSA-m8fw-534v-xm85/): Cross-Site Scripting (XSS) in cloudcmd (not scored)
- [GHSA-m734-r4g6-34f9](https://insights.sbomify.com/GHSA-m734-r4g6-34f9/): NoSQL Injection in loopback-connector-mongodb (not scored)
- [GHSA-m5ff-3wj3-8ph4](https://insights.sbomify.com/GHSA-m5ff-3wj3-8ph4/): HTTP Request Smuggling: Invalid whitespace characters in headers in Waitress (not scored)
- [GHSA-jj6g-7j8p-7gf2](https://insights.sbomify.com/GHSA-jj6g-7j8p-7gf2/): Cross-Site Scripting in bracket-template (not scored)
- [GHSA-j9f8-8h89-j69x](https://insights.sbomify.com/GHSA-j9f8-8h89-j69x/): Remote Code Execution in node-os-utils (not scored)
- [GHSA-j59f-6m4q-62h6](https://insights.sbomify.com/GHSA-j59f-6m4q-62h6/): Improper Key Verification in ipns (not scored)
- [GHSA-j4mr-9xw3-c9jx](https://insights.sbomify.com/GHSA-j4mr-9xw3-c9jx/): Out-of-bounds Read in base64-url (not scored)
- [GHSA-hxcm-v35h-mg2x](https://insights.sbomify.com/GHSA-hxcm-v35h-mg2x/): Prototype Pollution in querystringify (not scored)
- [GHSA-hpfq-8wx8-cgqw](https://insights.sbomify.com/GHSA-hpfq-8wx8-cgqw/): Cross-Site Scripting in ids-enterprise (not scored)
- [GHSA-h6ch-v84p-w6p9](https://insights.sbomify.com/GHSA-h6ch-v84p-w6p9/): Regular Expression Denial of Service (ReDoS) (not scored)
- [GHSA-gm9g-2g8v-fvxj](https://insights.sbomify.com/GHSA-gm9g-2g8v-fvxj/): Prototype Pollution in upmerge (not scored)
- [GHSA-gc94-6w89-hpqr](https://insights.sbomify.com/GHSA-gc94-6w89-hpqr/): Command Injection in fs-path (not scored)
- [GHSA-g8m7-qhv7-9h5x](https://insights.sbomify.com/GHSA-g8m7-qhv7-9h5x/): Path Traversal in serve-here.js (not scored)
- [GHSA-g74r-ffvr-5q9f](https://insights.sbomify.com/GHSA-g74r-ffvr-5q9f/): Memory Exposure in concat-stream (not scored)
- [GHSA-f7r3-p866-q9qr](https://insights.sbomify.com/GHSA-f7r3-p866-q9qr/): ircdkit vulnerable to Denial of Service due to unhandled connection end event (not scored)
- [GHSA-f7qw-5pvg-mmwp](https://insights.sbomify.com/GHSA-f7qw-5pvg-mmwp/): Prototype Pollution in lutils-merge (not scored)
- [GHSA-f698-m2v9-5fh3](https://insights.sbomify.com/GHSA-f698-m2v9-5fh3/): Command Injection in opencv (not scored)
- [GHSA-cxw4-9qv9-vx5h](https://insights.sbomify.com/GHSA-cxw4-9qv9-vx5h/): High severity vulnerability that affects PeterO.Cbor (not scored)
- [GHSA-crfx-5phg-hmw9](https://insights.sbomify.com/GHSA-crfx-5phg-hmw9/): Cross-Site Scripting in ids-enterprise (not scored)
- [GHSA-cgjv-rghq-qhgp](https://insights.sbomify.com/GHSA-cgjv-rghq-qhgp/): Path Traversal in algo-httpserv (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/