# Vulnerabilities published in 2019


- [CVE-2019-15777](https://insights.sbomify.com/CVE-2019-15777/): Cross-site scripting in shapepress:wp dsgvo tools (medium 5.4)
- [CVE-2019-15776](https://insights.sbomify.com/CVE-2019-15776/): Open redirect in webcraftic:simple 301 redirects-addon-bulk uploader (medium 6.1)
- [CVE-2019-15775](https://insights.sbomify.com/CVE-2019-15775/): Missing authorization in learning courses project:learning courses (medium 6.1)
- [CVE-2019-15774](https://insights.sbomify.com/CVE-2019-15774/): Missing authorization in booking project:booking (medium 6.1)
- [CVE-2019-15773](https://insights.sbomify.com/CVE-2019-15773/): Missing authorization in travel management project:travel management (medium 6.1)
- [CVE-2019-15772](https://insights.sbomify.com/CVE-2019-15772/): Missing authorization in donations project:donations (medium 6.1)
- [CVE-2019-15771](https://insights.sbomify.com/CVE-2019-15771/): Missing authorization in components for wp bakery page builder project:components for wp bakery page builder (medium 6.1)
- [CVE-2019-15770](https://insights.sbomify.com/CVE-2019-15770/): Cross-site request forgery in hallme:woocommerce address book (high 8.8)
- [CVE-2019-1577](https://insights.sbomify.com/CVE-2019-1577/): Cross-site scripting in Traps (medium 6.3)
- [CVE-2019-15769](https://insights.sbomify.com/CVE-2019-15769/): Cross-site request forgery in haktansuren:handl utm grabber (high 8.8)
- [CVE-2019-15767](https://insights.sbomify.com/CVE-2019-15767/): Memory corruption in gnu:chess (high 7.8)
- [CVE-2019-15766](https://insights.sbomify.com/CVE-2019-15766/): File upload in kslabs:ksweb (high 8.8)
- [CVE-2019-1576](https://insights.sbomify.com/CVE-2019-1576/): Command injection in Palo Alto Networks PAN-OS (high 8.8)
- [CVE-2019-15759](https://insights.sbomify.com/CVE-2019-15759/): Null dereference in webassembly:binaryen (medium 6.5)
- [CVE-2019-15758](https://insights.sbomify.com/CVE-2019-15758/): Denial of service in webassembly:binaryen (medium 6.5)
- [CVE-2019-15757](https://insights.sbomify.com/CVE-2019-15757/): Null dereference in libmirage project:libmirage (medium 6.5)
- [CVE-2019-15753](https://insights.sbomify.com/CVE-2019-15753/): OpenStack os-vif Ageing time of 0 disables linuxbridge MAC learning (critical 9.1)
- [CVE-2019-15752](https://insights.sbomify.com/CVE-2019-15752/): Docker Desktop Community Edition Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2019-15751](https://insights.sbomify.com/CVE-2019-15751/): File upload in sitos:sitos six (critical 9.8)
- [CVE-2019-15750](https://insights.sbomify.com/CVE-2019-15750/): Cross-site scripting in sitos:sitos six (medium 6.1)
- [CVE-2019-1575](https://insights.sbomify.com/CVE-2019-1575/): Information disclosure in Palo Alto Networks PAN-OS (high 8.8)
- [CVE-2019-15749](https://insights.sbomify.com/CVE-2019-15749/): Business logic in sitos:sitos six (medium 6.5)
- [CVE-2019-15748](https://insights.sbomify.com/CVE-2019-15748/): File upload in sitos:sitos six (critical 9.8)
- [CVE-2019-15747](https://insights.sbomify.com/CVE-2019-15747/): Privilege escalation in sitos:sitos six (high 8.8)
- [CVE-2019-15746](https://insights.sbomify.com/CVE-2019-15746/): Code injection in sitos:sitos six (critical 9.8)
- [CVE-2019-15745](https://insights.sbomify.com/CVE-2019-15745/): Hardcoded credentials in equeshome:elf smart plug firmware (high 8.8)
- [CVE-2019-15744](https://insights.sbomify.com/CVE-2019-15744/): Missing authorization in sony:xperia xzs firmware (low 3.3)
- [CVE-2019-15743](https://insights.sbomify.com/CVE-2019-15743/): Missing authorization in sony:xperia touch firmware (medium 5.5)
- [CVE-2019-15742](https://insights.sbomify.com/CVE-2019-15742/): Privilege escalation in plantronics:plantronics hub (high 7.8)
- [CVE-2019-15741](https://insights.sbomify.com/CVE-2019-15741/): Privilege escalation in gitlab:omnibus (critical 9.8)
- [CVE-2019-15740](https://insights.sbomify.com/CVE-2019-15740/): Information disclosure in gitlab:gitlab (medium 5.3)
- [CVE-2019-1574](https://insights.sbomify.com/CVE-2019-1574/): Cross-site scripting in Expedition Migration Tool (medium 5.4)
- [CVE-2019-15739](https://insights.sbomify.com/CVE-2019-15739/): Cross-site scripting in gitlab:gitlab (medium 6.1)
- [CVE-2019-15738](https://insights.sbomify.com/CVE-2019-15738/): Information disclosure in gitlab:gitlab (medium 5.3)
- [CVE-2019-15737](https://insights.sbomify.com/CVE-2019-15737/): Auth bypass in gitlab:gitlab (medium 6.5)
- [CVE-2019-15736](https://insights.sbomify.com/CVE-2019-15736/): Denial of service in gitlab:gitlab (high 7.5)
- [CVE-2019-15734](https://insights.sbomify.com/CVE-2019-15734/): Information disclosure in gitlab:gitlab (medium 4.3)
- [CVE-2019-15733](https://insights.sbomify.com/CVE-2019-15733/): Information disclosure in gitlab:gitlab (medium 4.3)
- [CVE-2019-15732](https://insights.sbomify.com/CVE-2019-15732/): Missing authorization in gitlab:gitlab (medium 5.3)
- [CVE-2019-15731](https://insights.sbomify.com/CVE-2019-15731/): Missing authorization in gitlab:gitlab (medium 5.3)
- [CVE-2019-15730](https://insights.sbomify.com/CVE-2019-15730/): Server-side request forgery in gitlab:gitlab (high 7.5)
- [CVE-2019-1573](https://insights.sbomify.com/CVE-2019-1573/): Information Disclosure in GlobalProtect Agent (low 2.5)
- [CVE-2019-15729](https://insights.sbomify.com/CVE-2019-15729/): Information disclosure in gitlab:gitlab (high 7.5)
- [CVE-2019-15728](https://insights.sbomify.com/CVE-2019-15728/): Server-side request forgery in gitlab:gitlab (high 7.5)
- [CVE-2019-15727](https://insights.sbomify.com/CVE-2019-15727/): Missing authorization in gitlab:gitlab (medium 5.3)
- [CVE-2019-15726](https://insights.sbomify.com/CVE-2019-15726/): Information disclosure in gitlab:gitlab (medium 5.3)
- [CVE-2019-15725](https://insights.sbomify.com/CVE-2019-15725/): Missing authorization in gitlab:gitlab (high 7.5)
- [CVE-2019-15724](https://insights.sbomify.com/CVE-2019-15724/): Cross-site scripting in gitlab:gitlab (medium 6.1)
- [CVE-2019-15723](https://insights.sbomify.com/CVE-2019-15723/): Missing authorization in gitlab:gitlab (medium 5.3)
- [CVE-2019-15722](https://insights.sbomify.com/CVE-2019-15722/): Denial of service in gitlab:gitlab (high 7.5)
- [CVE-2019-15721](https://insights.sbomify.com/CVE-2019-15721/): Missing authorization in gitlab:gitlab (medium 5.4)
- [CVE-2019-15720](https://insights.sbomify.com/CVE-2019-15720/): Privilege escalation in cloudberrylab:backup (high 7.8)
- [CVE-2019-1572](https://insights.sbomify.com/CVE-2019-1572/): Auth bypass in PAN-OS (high 7.5)
- [CVE-2019-15719](https://insights.sbomify.com/CVE-2019-15719/): Auth bypass in altair:pbs professional (high 8.0)
- [CVE-2019-15718](https://insights.sbomify.com/CVE-2019-15718/): Missing authorization in fedoraproject:fedora (medium 4.4)
- [CVE-2019-15717](https://insights.sbomify.com/CVE-2019-15717/): Use after free in canonical:ubuntu linux (critical 9.8)
- [CVE-2019-15716](https://insights.sbomify.com/CVE-2019-15716/): Misconfiguration in wtfutil:wtf (medium 5.5)
- [CVE-2019-15715](https://insights.sbomify.com/CVE-2019-15715/): MantisBT Remote Code Execution (high 7.2)
- [CVE-2019-15714](https://insights.sbomify.com/CVE-2019-15714/): Path traversal in entropic project:entropic (medium 5.3)
- [CVE-2019-15713](https://insights.sbomify.com/CVE-2019-15713/): Cross-site scripting in my calendar project:my calendar (medium 6.1)
- [CVE-2019-15712](https://insights.sbomify.com/CVE-2019-15712/): Missing authorization in Fortinet FortiMail (high 7.2)
- [CVE-2019-15711](https://insights.sbomify.com/CVE-2019-15711/): Privilege escalation in Fortinet FortiClientLinux (high 7.8)
- [CVE-2019-15710](https://insights.sbomify.com/CVE-2019-15710/): Command injection in FortiExtender (high 7.2)
- [CVE-2019-1571](https://insights.sbomify.com/CVE-2019-1571/): Cross-site scripting in Palo Alto Networks Expedition Migration Tool (medium 4.8)
- [CVE-2019-15709](https://insights.sbomify.com/CVE-2019-15709/): Other in Fortinet FortiAP-S/W2, FortiAP-U (medium 6.5)
- [CVE-2019-15708](https://insights.sbomify.com/CVE-2019-15708/): Command injection in Fortinet FortiAP (medium 6.7)
- [CVE-2019-15707](https://insights.sbomify.com/CVE-2019-15707/): Missing authorization in Fortinet FortiMail (medium 4.9)
- [CVE-2019-15706](https://insights.sbomify.com/CVE-2019-15706/): Cross-site scripting in FortiOS (medium 4.0)
- [CVE-2019-15705](https://insights.sbomify.com/CVE-2019-15705/): Denial of service in FortiGate (high 7.5)
- [CVE-2019-15704](https://insights.sbomify.com/CVE-2019-15704/): Information disclosure in FortiClient for Mac OS (medium 5.5)
- [CVE-2019-15703](https://insights.sbomify.com/CVE-2019-15703/): Weak cryptography in Fortinet FortiOS (high 7.5)
- [CVE-2019-15702](https://insights.sbomify.com/CVE-2019-15702/): Denial of service in riot-os:riot (high 7.5)
- [CVE-2019-15701](https://insights.sbomify.com/CVE-2019-15701/): Command injection in bloodhound project:bloodhound (high 8.8)
- [CVE-2019-15700](https://insights.sbomify.com/CVE-2019-15700/): Cross-site scripting in frappe:frappe (medium 6.1)
- [CVE-2019-1570](https://insights.sbomify.com/CVE-2019-1570/): Cross-site scripting in Palo Alto Networks Expedition Migration Tool (medium 4.8)
- [CVE-2019-15699](https://insights.sbomify.com/CVE-2019-15699/): Memory corruption in suricata-ids:suricata (critical 9.1)
- [CVE-2019-15698](https://insights.sbomify.com/CVE-2019-15698/): Information disclosure in octopus:octopus server (medium 4.3)
- [CVE-2019-15695](https://insights.sbomify.com/CVE-2019-15695/): Memory corruption in TigerVNC (high 7.2)
- [CVE-2019-15694](https://insights.sbomify.com/CVE-2019-15694/): Memory corruption in TigerVNC (high 7.2)
- [CVE-2019-15693](https://insights.sbomify.com/CVE-2019-15693/): Memory corruption in TigerVNC (high 7.2)
- [CVE-2019-15692](https://insights.sbomify.com/CVE-2019-15692/): Memory corruption in TigerVNC (high 7.2)
- [CVE-2019-15691](https://insights.sbomify.com/CVE-2019-15691/): Use after free in TigerVNC (high 7.2)
- [CVE-2019-15690](https://insights.sbomify.com/CVE-2019-15690/): Memory corruption in LibVNCServer (high 8.8)
- [CVE-2019-1569](https://insights.sbomify.com/CVE-2019-1569/): Cross-site scripting in Palo Alto Networks Expedition Migration Tool (medium 4.8)
- [CVE-2019-15689](https://insights.sbomify.com/CVE-2019-15689/): Code injection in Kaspersky Secure Connection, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Security Cloud (medium 6.7)
- [CVE-2019-15688](https://insights.sbomify.com/CVE-2019-15688/): Open redirect in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud (medium 6.1)
- [CVE-2019-15687](https://insights.sbomify.com/CVE-2019-15687/): Information disclosure in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud (medium 6.5)
- [CVE-2019-15686](https://insights.sbomify.com/CVE-2019-15686/): Security feature bypass in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud (medium 4.3)
- [CVE-2019-15685](https://insights.sbomify.com/CVE-2019-15685/): Security feature bypass in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud (medium 4.3)
- [CVE-2019-15684](https://insights.sbomify.com/CVE-2019-15684/): Missing authorization in Kaspersky Protection extension for Google Chrome (medium 4.3)
- [CVE-2019-15683](https://insights.sbomify.com/CVE-2019-15683/): Memory corruption in TurboVNC (critical 9.8)
- [CVE-2019-15682](https://insights.sbomify.com/CVE-2019-15682/): Memory corruption in RDesktop (high 7.5)
- [CVE-2019-15681](https://insights.sbomify.com/CVE-2019-15681/): Information disclosure in LibVNC (high 7.5)
- [CVE-2019-15680](https://insights.sbomify.com/CVE-2019-15680/): Null dereference in TightVNC (high 7.5)
- [CVE-2019-1568](https://insights.sbomify.com/CVE-2019-1568/): Cross-site scripting in Demisto (medium 6.1)
- [CVE-2019-15679](https://insights.sbomify.com/CVE-2019-15679/): Memory corruption in TightVNC (critical 9.8)
- [CVE-2019-15678](https://insights.sbomify.com/CVE-2019-15678/): Memory corruption in TightVNC (critical 9.8)
- [CVE-2019-1567](https://insights.sbomify.com/CVE-2019-1567/): Cross-site scripting in Palo Alto Networks Expedition Migration Tool (medium 5.4)
- [CVE-2019-15666](https://insights.sbomify.com/CVE-2019-15666/): Memory corruption in debian:debian linux (medium 4.4)
- [CVE-2019-15665](https://insights.sbomify.com/CVE-2019-15665/): Memory corruption in killernetworking:killer control center (high 7.2)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/104/