# Vulnerabilities published in 2019


- [CVE-2019-15664](https://insights.sbomify.com/CVE-2019-15664/): Memory corruption in killernetworking:killer control center (low 2.7)
- [CVE-2019-15663](https://insights.sbomify.com/CVE-2019-15663/): Memory corruption in killernetworking:killer control center (low 2.7)
- [CVE-2019-15662](https://insights.sbomify.com/CVE-2019-15662/): Memory corruption in killernetworking:killer control center (low 2.7)
- [CVE-2019-15661](https://insights.sbomify.com/CVE-2019-15661/): Memory corruption in killernetworking:killer control center (high 7.2)
- [CVE-2019-15660](https://insights.sbomify.com/CVE-2019-15660/): Cross-site request forgery in butlerblog:wp-members (high 8.8)
- [CVE-2019-1566](https://insights.sbomify.com/CVE-2019-1566/): Cross-site scripting in Palo Alto Networks PAN-OS (medium 6.1)
- [CVE-2019-15659](https://insights.sbomify.com/CVE-2019-15659/): SQL injection in genetechsolutions:pie register (critical 9.8)
- [CVE-2019-15658](https://insights.sbomify.com/CVE-2019-15658/): SQL Injection in connect-pg-simple (high 7.3)
- [CVE-2019-15657](https://insights.sbomify.com/CVE-2019-15657/): Arbitrary Code Execution in eslint-utils (critical 9.8)
- [CVE-2019-15656](https://insights.sbomify.com/CVE-2019-15656/): Information disclosure in dlink:dsl-2875al firmware (high 7.5)
- [CVE-2019-15655](https://insights.sbomify.com/CVE-2019-15655/): Information disclosure in dlink:dsl-2875al firmware (high 7.5)
- [CVE-2019-15654](https://insights.sbomify.com/CVE-2019-15654/): Missing authorization in comba:ac2400 firmware (high 7.5)
- [CVE-2019-15653](https://insights.sbomify.com/CVE-2019-15653/): Weak cryptography in comba:ap2600-i - a02 - 0202n00pd2 firmware (high 7.5)
- [CVE-2019-15652](https://insights.sbomify.com/CVE-2019-15652/): Cross-site scripting in nssglobal:vmu software (medium 6.1)
- [CVE-2019-15651](https://insights.sbomify.com/CVE-2019-15651/): Memory corruption in wolfssl:wolfssl (critical 9.8)
- [CVE-2019-15650](https://insights.sbomify.com/CVE-2019-15650/): Missing authorization in easyupdatesmanager:easy updates manager (medium 4.3)
- [CVE-2019-1565](https://insights.sbomify.com/CVE-2019-1565/): Cross-site scripting in Palo Alto Networks PAN-OS (medium 5.4)
- [CVE-2019-15649](https://insights.sbomify.com/CVE-2019-15649/): File upload in elearningfreak:insert or embed articulate content (high 8.8)
- [CVE-2019-15648](https://insights.sbomify.com/CVE-2019-15648/): Missing authorization in elearningfreak:insert or embed articulate content (medium 6.5)
- [CVE-2019-15647](https://insights.sbomify.com/CVE-2019-15647/): Code injection in groundhogg:groundhogg (high 8.8)
- [CVE-2019-15646](https://insights.sbomify.com/CVE-2019-15646/): SQL injection in carrcommunications:rsvpmaker (critical 9.8)
- [CVE-2019-15645](https://insights.sbomify.com/CVE-2019-15645/): Cross-site request forgery in zoho:salesiq (high 8.8)
- [CVE-2019-15644](https://insights.sbomify.com/CVE-2019-15644/): Cross-site scripting in zoho:salesiq (medium 6.1)
- [CVE-2019-15643](https://insights.sbomify.com/CVE-2019-15643/): Cross-site scripting in etoilewebdesign:ultimate faq (medium 6.1)
- [CVE-2019-15642](https://insights.sbomify.com/CVE-2019-15642/): Code injection in webmin:webmin (high 8.8)
- [CVE-2019-15641](https://insights.sbomify.com/CVE-2019-15641/): XML external entity in webmin:webmin (medium 6.5)
- [CVE-2019-15640](https://insights.sbomify.com/CVE-2019-15640/): File upload in limesurvey:limesurvey (high 7.5)
- [CVE-2019-15639](https://insights.sbomify.com/CVE-2019-15639/): Denial of service in digium:asterisk (high 7.5)
- [CVE-2019-15638](https://insights.sbomify.com/CVE-2019-15638/): Other in copadata:zenon (high 7.8)
- [CVE-2019-15637](https://insights.sbomify.com/CVE-2019-15637/): XML external entity in tableau:tableau desktop (high 7.1)
- [CVE-2019-15635](https://insights.sbomify.com/CVE-2019-15635/): Information disclosure in grafana:grafana (medium 4.9)
- [CVE-2019-15631](https://insights.sbomify.com/CVE-2019-15631/): Other in Mule API Gateway 2.x (critical 9.8)
- [CVE-2019-15630](https://insights.sbomify.com/CVE-2019-15630/): Mule modules contain Directory Traversal (high 7.5)
- [CVE-2019-1563](https://insights.sbomify.com/CVE-2019-1563/): Padding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey (low 3.7)
- [CVE-2019-15629](https://insights.sbomify.com/CVE-2019-15629/): Information disclosure in Trend Micro Password Manager for Android (high 7.5)
- [CVE-2019-15628](https://insights.sbomify.com/CVE-2019-15628/): Privilege escalation in Trend Micro Security (Consumer) (high 7.8)
- [CVE-2019-15627](https://insights.sbomify.com/CVE-2019-15627/): Path traversal in Deep Security Agent (high 7.1)
- [CVE-2019-15626](https://insights.sbomify.com/CVE-2019-15626/): Information disclosure in Deep Security Manager (high 7.5)
- [CVE-2019-15625](https://insights.sbomify.com/CVE-2019-15625/): Information disclosure in Trend Micro Password Manager (medium 5.5)
- [CVE-2019-15624](https://insights.sbomify.com/CVE-2019-15624/): Other in Nextcloud Server (medium 4.9)
- [CVE-2019-15623](https://insights.sbomify.com/CVE-2019-15623/): Information disclosure in Nextcloud Server (medium 5.3)
- [CVE-2019-15622](https://insights.sbomify.com/CVE-2019-15622/): SQL injection in Nextcloud Android (low 2.4)
- [CVE-2019-15621](https://insights.sbomify.com/CVE-2019-15621/): Missing authorization in Nextcloud Server (medium 6.5)
- [CVE-2019-15620](https://insights.sbomify.com/CVE-2019-15620/): Missing authorization in Nextcloud Talk (low 2.7)
- [CVE-2019-15619](https://insights.sbomify.com/CVE-2019-15619/): Cross-site scripting in Nextcloud Server (medium 4.8)
- [CVE-2019-15618](https://insights.sbomify.com/CVE-2019-15618/): Cross-site scripting in Nextcloud Server (medium 4.8)
- [CVE-2019-15617](https://insights.sbomify.com/CVE-2019-15617/): Auth bypass in Nextcloud Server (medium 5.4)
- [CVE-2019-15616](https://insights.sbomify.com/CVE-2019-15616/): Other in Nextcloud Server (medium 4.3)
- [CVE-2019-15615](https://insights.sbomify.com/CVE-2019-15615/): Auth bypass in Nextcloud Android (medium 6.1)
- [CVE-2019-15614](https://insights.sbomify.com/CVE-2019-15614/): Cross-site scripting in Nextcloud iOS App (medium 5.4)
- [CVE-2019-15613](https://insights.sbomify.com/CVE-2019-15613/): Security feature bypass in Nextcloud Server (high 8.0)
- [CVE-2019-15612](https://insights.sbomify.com/CVE-2019-15612/): Auth bypass in Nextcloud Server (medium 5.9)
- [CVE-2019-15611](https://insights.sbomify.com/CVE-2019-15611/): Information disclosure in Nextcloud iOS (medium 4.9)
- [CVE-2019-15610](https://insights.sbomify.com/CVE-2019-15610/): Missing authorization in Nextcloud Circles (medium 4.3)
- [CVE-2019-15609](https://insights.sbomify.com/CVE-2019-15609/): OS Command Injection and Command Injection in kill-port-process (critical 9.8)
- [CVE-2019-15608](https://insights.sbomify.com/CVE-2019-15608/): TOCTOU Race Condition in Yarn (medium 5.9)
- [CVE-2019-15607](https://insights.sbomify.com/CVE-2019-15607/): Cross-Site Scripting in node-red (medium 5.4)
- [CVE-2019-15606](https://insights.sbomify.com/CVE-2019-15606/): Auth bypass in Node (critical 9.8)
- [CVE-2019-15605](https://insights.sbomify.com/CVE-2019-15605/): Other in Node (critical 9.8)
- [CVE-2019-15604](https://insights.sbomify.com/CVE-2019-15604/): Denial of service in Node (high 7.5)
- [CVE-2019-15603](https://insights.sbomify.com/CVE-2019-15603/): Cross-Site Scripting in seeftl (medium 6.1)
- [CVE-2019-15602](https://insights.sbomify.com/CVE-2019-15602/): Cross-Site Scripting in fileview (medium 6.1)
- [CVE-2019-15600](https://insights.sbomify.com/CVE-2019-15600/): Cross-Site Scripting in http_server (high 7.5)
- [CVE-2019-15599](https://insights.sbomify.com/CVE-2019-15599/): Command Injection in tree-kill (critical 9.8)
- [CVE-2019-15598](https://insights.sbomify.com/CVE-2019-15598/): Treekill Enables OS Command Injection (critical 9.8)
- [CVE-2019-15597](https://insights.sbomify.com/CVE-2019-15597/): Command Injection in node-df (critical 9.8)
- [CVE-2019-15596](https://insights.sbomify.com/CVE-2019-15596/): Path Traversal in statics-server (high 7.5)
- [CVE-2019-15595](https://insights.sbomify.com/CVE-2019-15595/): Command injection in UniFi Video Server (high 8.8)
- [CVE-2019-15594](https://insights.sbomify.com/CVE-2019-15594/): Information disclosure in GitLab (medium 4.3)
- [CVE-2019-15593](https://insights.sbomify.com/CVE-2019-15593/): Denial of service in GitLab (medium 6.5)
- [CVE-2019-15592](https://insights.sbomify.com/CVE-2019-15592/): Information disclosure in GitLab (medium 4.3)
- [CVE-2019-15591](https://insights.sbomify.com/CVE-2019-15591/): Missing authorization in GitLab (medium 6.5)
- [CVE-2019-15590](https://insights.sbomify.com/CVE-2019-15590/): Missing authorization in GitLab EE (high 7.5)
- [CVE-2019-1559](https://insights.sbomify.com/CVE-2019-1559/): 0-byte record padding oracle (medium 5.9)
- [CVE-2019-15589](https://insights.sbomify.com/CVE-2019-15589/): Missing authorization in GitLab CE/EE (high 8.8)
- [CVE-2019-15588](https://insights.sbomify.com/CVE-2019-15588/): Command injection in Nexus Repository Manager (high 7.2)
- [CVE-2019-15587](https://insights.sbomify.com/CVE-2019-15587/): Loofah Allows Cross-site Scripting (medium 5.4)
- [CVE-2019-15586](https://insights.sbomify.com/CVE-2019-15586/): Cross-site scripting in Gitlab CE/EE (medium 6.1)
- [CVE-2019-15585](https://insights.sbomify.com/CVE-2019-15585/): Auth bypass in Gitlab CE/EE (critical 9.8)
- [CVE-2019-15584](https://insights.sbomify.com/CVE-2019-15584/): Denial of service in GitLab CE/EE (medium 6.5)
- [CVE-2019-15583](https://insights.sbomify.com/CVE-2019-15583/): Information disclosure in GitLab CE/EE (high 7.5)
- [CVE-2019-15582](https://insights.sbomify.com/CVE-2019-15582/): Missing authorization in GitLab EE (medium 5.3)
- [CVE-2019-15581](https://insights.sbomify.com/CVE-2019-15581/): Missing authorization in GitLab EE (medium 5.3)
- [CVE-2019-15580](https://insights.sbomify.com/CVE-2019-15580/): Information disclosure in gitlab.com (medium 6.5)
- [CVE-2019-15579](https://insights.sbomify.com/CVE-2019-15579/): Information disclosure in GitLab CE/EE (medium 5.3)
- [CVE-2019-15578](https://insights.sbomify.com/CVE-2019-15578/): Information disclosure in GitLab CE/EE (medium 5.3)
- [CVE-2019-15577](https://insights.sbomify.com/CVE-2019-15577/): Information disclosure in GitLab CE/EE (medium 4.3)
- [CVE-2019-15576](https://insights.sbomify.com/CVE-2019-15576/): Missing authorization in GitLab CE/EE (high 7.5)
- [CVE-2019-15575](https://insights.sbomify.com/CVE-2019-15575/): Command injection in GitLab CE/EE (high 7.5)
- [CVE-2019-15574](https://insights.sbomify.com/CVE-2019-15574/): SQL injection in cipsoft:gesior-aac (critical 9.8)
- [CVE-2019-15573](https://insights.sbomify.com/CVE-2019-15573/): SQL injection in cipsoft:gesior-aac (critical 9.8)
- [CVE-2019-15572](https://insights.sbomify.com/CVE-2019-15572/): SQL injection in cipsoft:gesior-aac (critical 9.8)
- [CVE-2019-15571](https://insights.sbomify.com/CVE-2019-15571/): SQL injection in clonos project:clonos (critical 9.8)
- [CVE-2019-15570](https://insights.sbomify.com/CVE-2019-15570/): BEdita vulnerable to SQL injection (critical 9.8)
- [CVE-2019-15569](https://insights.sbomify.com/CVE-2019-15569/): SQL injection in gov:ccd-data-store-api (critical 9.8)
- [CVE-2019-15568](https://insights.sbomify.com/CVE-2019-15568/): SQL injection in idseq:idseq-web (critical 9.8)
- [CVE-2019-15567](https://insights.sbomify.com/CVE-2019-15567/): SQL injection in openforis:arena (critical 9.8)
- [CVE-2019-15566](https://insights.sbomify.com/CVE-2019-15566/): SQL injection in alfresco:alfresco (critical 9.8)
- [CVE-2019-15565](https://insights.sbomify.com/CVE-2019-15565/): SQL injection in webimpacto:icommktconnector (critical 9.8)
- [CVE-2019-15564](https://insights.sbomify.com/CVE-2019-15564/): SQL injection in compassionuk:compassion switzerland (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/105/