# Vulnerabilities published in 2019 - [CVE-2019-9168](https://insights.sbomify.com/CVE-2019-9168/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-9167](https://insights.sbomify.com/CVE-2019-9167/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-9166](https://insights.sbomify.com/CVE-2019-9166/): Privilege escalation in n/a (high 7.8) - [CVE-2019-9165](https://insights.sbomify.com/CVE-2019-9165/): SQL injection in n/a (critical 9.8) - [CVE-2019-9164](https://insights.sbomify.com/CVE-2019-9164/): Command injection in n/a (high 8.8) - [CVE-2019-9163](https://insights.sbomify.com/CVE-2019-9163/): Code injection in n/a (critical 9.8) - [CVE-2019-9162](https://insights.sbomify.com/CVE-2019-9162/): Memory corruption in n/a (high 7.8) - [CVE-2019-9161](https://insights.sbomify.com/CVE-2019-9161/): Command injection in n/a (critical 9.8) - [CVE-2019-9160](https://insights.sbomify.com/CVE-2019-9160/): Hardcoded credentials in n/a (critical 9.8) - [CVE-2019-9158](https://insights.sbomify.com/CVE-2019-9158/): Missing authorization in n/a (medium 5.7) - [CVE-2019-9157](https://insights.sbomify.com/CVE-2019-9157/): Path traversal in n/a (medium 5.7) - [CVE-2019-9156](https://insights.sbomify.com/CVE-2019-9156/): Command injection in n/a (high 8.0) - [CVE-2019-9155](https://insights.sbomify.com/CVE-2019-9155/): Invalid Curve Attack in openpgp (medium 5.9) - [CVE-2019-9154](https://insights.sbomify.com/CVE-2019-9154/): Improper Key Verification in openpgp (high 7.5) - [CVE-2019-9153](https://insights.sbomify.com/CVE-2019-9153/): Message Signature Bypass in openpgp (high 7.5) - [CVE-2019-9152](https://insights.sbomify.com/CVE-2019-9152/): Memory corruption in n/a (high 8.8) - [CVE-2019-9151](https://insights.sbomify.com/CVE-2019-9151/): Memory corruption in n/a (high 8.8) - [CVE-2019-9150](https://insights.sbomify.com/CVE-2019-9150/): Security feature bypass in n/a (medium 5.3) - [CVE-2019-9149](https://insights.sbomify.com/CVE-2019-9149/): Security feature bypass in n/a (medium 6.5) - [CVE-2019-9148](https://insights.sbomify.com/CVE-2019-9148/): Other in n/a (medium 4.3) - [CVE-2019-9147](https://insights.sbomify.com/CVE-2019-9147/): Mailvelope prior to 3.1.0 is vulnerable to a clickjacking attack against the settings page. (medium 4.3) - [CVE-2019-9146](https://insights.sbomify.com/CVE-2019-9146/): Command injection in n/a (high 7.5) - [CVE-2019-9145](https://insights.sbomify.com/CVE-2019-9145/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-9144](https://insights.sbomify.com/CVE-2019-9144/): Denial of service in n/a (high 8.8) - [CVE-2019-9143](https://insights.sbomify.com/CVE-2019-9143/): Denial of service in n/a (high 8.8) - [CVE-2019-9142](https://insights.sbomify.com/CVE-2019-9142/): Moderate severity vulnerability that affects org.b3log:symphony (medium 6.1) - [CVE-2019-9141](https://insights.sbomify.com/CVE-2019-9141/): Zoneplayer ActiveX Remote Code Execution vulnerability (high 8.8) - [CVE-2019-9140](https://insights.sbomify.com/CVE-2019-9140/): Happypoint mobile application information disclosure vulnerability (high 7.8) - [CVE-2019-9139](https://insights.sbomify.com/CVE-2019-9139/): Integer overflow in DaviewIndy (high 7.8) - [CVE-2019-9138](https://insights.sbomify.com/CVE-2019-9138/): Integer overflow in DaviewIndy (high 7.8) - [CVE-2019-9137](https://insights.sbomify.com/CVE-2019-9137/): Integer overflow in DaviewIndy (high 7.8) - [CVE-2019-9136](https://insights.sbomify.com/CVE-2019-9136/): Memory corruption in DaviewIndy (high 7.8) - [CVE-2019-9135](https://insights.sbomify.com/CVE-2019-9135/): Memory corruption in DaviewIndy (high 7.8) - [CVE-2019-9134](https://insights.sbomify.com/CVE-2019-9134/): Memory corruption in Architectural Information System (high 7.4) - [CVE-2019-9133](https://insights.sbomify.com/CVE-2019-9133/): KMPlayer Subtitles parser Heap Overflow Vulnerability (high 7.8) - [CVE-2019-9132](https://insights.sbomify.com/CVE-2019-9132/): Code injection in Kakaotalk Windows PC Messenger (high 8.8) - [CVE-2019-9126](https://insights.sbomify.com/CVE-2019-9126/): Information disclosure in n/a (high 7.5) - [CVE-2019-9125](https://insights.sbomify.com/CVE-2019-9125/): Memory corruption in n/a (critical 9.8) - [CVE-2019-9124](https://insights.sbomify.com/CVE-2019-9124/): Auth bypass in n/a (critical 9.8) - [CVE-2019-9123](https://insights.sbomify.com/CVE-2019-9123/): Hardcoded credentials in n/a (critical 9.8) - [CVE-2019-9122](https://insights.sbomify.com/CVE-2019-9122/): Command injection in n/a (high 8.8) - [CVE-2019-9121](https://insights.sbomify.com/CVE-2019-9121/): Command injection in n/a (critical 9.8) - [CVE-2019-9120](https://insights.sbomify.com/CVE-2019-9120/): Command injection in n/a (critical 9.8) - [CVE-2019-9119](https://insights.sbomify.com/CVE-2019-9119/): Command injection in n/a (critical 9.8) - [CVE-2019-9118](https://insights.sbomify.com/CVE-2019-9118/): Command injection in n/a (critical 9.8) - [CVE-2019-9117](https://insights.sbomify.com/CVE-2019-9117/): Command injection in n/a (critical 9.8) - [CVE-2019-9116](https://insights.sbomify.com/CVE-2019-9116/): Other in n/a (high 7.8) - [CVE-2019-9115](https://insights.sbomify.com/CVE-2019-9115/): irisnet-crypto RCE Vulnerability (critical 9.8) - [CVE-2019-9114](https://insights.sbomify.com/CVE-2019-9114/): Memory corruption in n/a (high 8.8) - [CVE-2019-9113](https://insights.sbomify.com/CVE-2019-9113/): Null dereference in n/a (high 8.8) - [CVE-2019-9112](https://insights.sbomify.com/CVE-2019-9112/): Integer overflow in n/a (medium 5.5) - [CVE-2019-9111](https://insights.sbomify.com/CVE-2019-9111/): Integer overflow in n/a (medium 5.5) - [CVE-2019-9110](https://insights.sbomify.com/CVE-2019-9110/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-9109](https://insights.sbomify.com/CVE-2019-9109/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-9108](https://insights.sbomify.com/CVE-2019-9108/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-9107](https://insights.sbomify.com/CVE-2019-9107/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-9106](https://insights.sbomify.com/CVE-2019-9106/): Path traversal in n/a (critical 9.8) - [CVE-2019-9105](https://insights.sbomify.com/CVE-2019-9105/): Missing authorization in n/a (high 7.5) - [CVE-2019-9104](https://insights.sbomify.com/CVE-2019-9104/): Hardcoded credentials in n/a (critical 9.8) - [CVE-2019-9103](https://insights.sbomify.com/CVE-2019-9103/): Information disclosure in n/a (medium 5.3) - [CVE-2019-9102](https://insights.sbomify.com/CVE-2019-9102/): Cross-site request forgery in n/a (medium 6.5) - [CVE-2019-9101](https://insights.sbomify.com/CVE-2019-9101/): Information disclosure in n/a (high 8.8) - [CVE-2019-9099](https://insights.sbomify.com/CVE-2019-9099/): Memory corruption in n/a (high 7.5) - [CVE-2019-9098](https://insights.sbomify.com/CVE-2019-9098/): Integer overflow in n/a (high 7.5) - [CVE-2019-9097](https://insights.sbomify.com/CVE-2019-9097/): Denial of service in n/a (high 7.5) - [CVE-2019-9096](https://insights.sbomify.com/CVE-2019-9096/): Weak cryptography in n/a (critical 9.8) - [CVE-2019-9095](https://insights.sbomify.com/CVE-2019-9095/): Weak cryptography in n/a (medium 6.2) - [CVE-2019-9094](https://insights.sbomify.com/CVE-2019-9094/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-9093](https://insights.sbomify.com/CVE-2019-9093/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-9087](https://insights.sbomify.com/CVE-2019-9087/): SQL injection in n/a (critical 9.8) - [CVE-2019-9086](https://insights.sbomify.com/CVE-2019-9086/): SQL injection in n/a (critical 9.8) - [CVE-2019-9085](https://insights.sbomify.com/CVE-2019-9085/): Denial of service in n/a (medium 6.5) - [CVE-2019-9084](https://insights.sbomify.com/CVE-2019-9084/): Denial of service in n/a (medium 4.9) - [CVE-2019-9083](https://insights.sbomify.com/CVE-2019-9083/): SQL injection in n/a (critical 9.8) - [CVE-2019-9082](https://insights.sbomify.com/CVE-2019-9082/): ThinkPHP Remote Code Execution (high 8.8, exploited in the wild) - [CVE-2019-9080](https://insights.sbomify.com/CVE-2019-9080/): Weak cryptography in n/a (high 7.5) - [CVE-2019-9078](https://insights.sbomify.com/CVE-2019-9078/): Cross-site scripting in n/a (medium 5.4) - [CVE-2019-9077](https://insights.sbomify.com/CVE-2019-9077/): Memory corruption in n/a (high 7.8) - [CVE-2019-9076](https://insights.sbomify.com/CVE-2019-9076/): Denial of service in n/a (medium 5.5) - [CVE-2019-9075](https://insights.sbomify.com/CVE-2019-9075/): Memory corruption in n/a (high 7.8) - [CVE-2019-9074](https://insights.sbomify.com/CVE-2019-9074/): Memory corruption in n/a (medium 5.5) - [CVE-2019-9073](https://insights.sbomify.com/CVE-2019-9073/): Denial of service in n/a (medium 5.5) - [CVE-2019-9072](https://insights.sbomify.com/CVE-2019-9072/): Denial of service in n/a (medium 5.5) - [CVE-2019-9071](https://insights.sbomify.com/CVE-2019-9071/): Denial of service in n/a (medium 5.5) - [CVE-2019-9070](https://insights.sbomify.com/CVE-2019-9070/): Memory corruption in n/a (high 7.8) - [CVE-2019-9066](https://insights.sbomify.com/CVE-2019-9066/): Cross-site scripting in n/a (medium 5.4) - [CVE-2019-9065](https://insights.sbomify.com/CVE-2019-9065/): Business logic in n/a (medium 6.5) - [CVE-2019-9064](https://insights.sbomify.com/CVE-2019-9064/): Path traversal in n/a (medium 5.3) - [CVE-2019-9063](https://insights.sbomify.com/CVE-2019-9063/): Business logic in n/a (medium 6.5) - [CVE-2019-9062](https://insights.sbomify.com/CVE-2019-9062/): Cross-site request forgery in n/a (high 8.0) - [CVE-2019-9061](https://insights.sbomify.com/CVE-2019-9061/): Deserialization in n/a (high 8.8) - [CVE-2019-9060](https://insights.sbomify.com/CVE-2019-9060/): Path traversal in n/a (high 7.5) - [CVE-2019-9059](https://insights.sbomify.com/CVE-2019-9059/): Command injection in n/a (high 7.2) - [CVE-2019-9058](https://insights.sbomify.com/CVE-2019-9058/): Deserialization in n/a (high 7.2) - [CVE-2019-9057](https://insights.sbomify.com/CVE-2019-9057/): Deserialization in n/a (high 8.8) - [CVE-2019-9056](https://insights.sbomify.com/CVE-2019-9056/): Deserialization in n/a (high 8.8) - [CVE-2019-9055](https://insights.sbomify.com/CVE-2019-9055/): Deserialization in n/a (high 8.8) - [CVE-2019-9053](https://insights.sbomify.com/CVE-2019-9053/): SQL injection in n/a (high 8.1) - [CVE-2019-9052](https://insights.sbomify.com/CVE-2019-9052/): Cross-site request forgery in n/a (medium 6.5) - [CVE-2019-9051](https://insights.sbomify.com/CVE-2019-9051/): Cross-site request forgery in n/a (medium 6.5) --- From sbomify Insights: https://insights.sbomify.com/years/2019/page/10/