# Vulnerabilities published in 2019


- [CVE-2019-14975](https://insights.sbomify.com/CVE-2019-14975/): Memory corruption in artifex:mupdf (high 7.1)
- [CVE-2019-14974](https://insights.sbomify.com/CVE-2019-14974/): Cross-site scripting in sugarcrm:sugarcrm (medium 6.1)
- [CVE-2019-14973](https://insights.sbomify.com/CVE-2019-14973/): Integer overflow in debian:debian linux (medium 6.5)
- [CVE-2019-14970](https://insights.sbomify.com/CVE-2019-14970/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2019-14969](https://insights.sbomify.com/CVE-2019-14969/): Misconfiguration in netwrix:auditor (high 7.8)
- [CVE-2019-14968](https://insights.sbomify.com/CVE-2019-14968/): SQL injection in txjia:imcat (critical 9.8)
- [CVE-2019-14967](https://insights.sbomify.com/CVE-2019-14967/): Cross-site scripting in frappe:frappe (medium 6.1)
- [CVE-2019-14966](https://insights.sbomify.com/CVE-2019-14966/): SQL injection in frappe:frappe (high 8.8)
- [CVE-2019-14965](https://insights.sbomify.com/CVE-2019-14965/): Code injection in frappe:frappe (critical 9.8)
- [CVE-2019-14961](https://insights.sbomify.com/CVE-2019-14961/): Cross-site scripting in jetbrains:upsource (medium 6.1)
- [CVE-2019-14960](https://insights.sbomify.com/CVE-2019-14960/): Supply chain in jetbrains:rider (high 7.8)
- [CVE-2019-14959](https://insights.sbomify.com/CVE-2019-14959/): Weak cryptography in jetbrains:toolbox (medium 5.9)
- [CVE-2019-14958](https://insights.sbomify.com/CVE-2019-14958/): Denial of service in jetbrains:pycharm (high 7.5)
- [CVE-2019-14957](https://insights.sbomify.com/CVE-2019-14957/): Information disclosure in jetbrains:vim (medium 5.3)
- [CVE-2019-14956](https://insights.sbomify.com/CVE-2019-14956/): Missing authorization in jetbrains:youtrack (medium 4.3)
- [CVE-2019-14955](https://insights.sbomify.com/CVE-2019-14955/): Security feature bypass in jetbrains:hub (medium 5.3)
- [CVE-2019-14954](https://insights.sbomify.com/CVE-2019-14954/): Weak cryptography in jetbrains:intellij idea (medium 5.9)
- [CVE-2019-14953](https://insights.sbomify.com/CVE-2019-14953/): Cross-site scripting in jetbrains:youtrack (medium 6.1)
- [CVE-2019-14952](https://insights.sbomify.com/CVE-2019-14952/): Cross-site scripting in jetbrains:youtrack (medium 6.1)
- [CVE-2019-14951](https://insights.sbomify.com/CVE-2019-14951/): Auth bypass in telenav:scout gps link (high 7.5)
- [CVE-2019-14950](https://insights.sbomify.com/CVE-2019-14950/): Cross-site scripting in 3cx:live chat (medium 6.1)
- [CVE-2019-14949](https://insights.sbomify.com/CVE-2019-14949/): Cross-site scripting in wpseeds:wp database backup (medium 6.1)
- [CVE-2019-14948](https://insights.sbomify.com/CVE-2019-14948/): Cross-site scripting in najeebmedia:ppom for woocommerce (medium 5.4)
- [CVE-2019-14947](https://insights.sbomify.com/CVE-2019-14947/): Cross-site scripting in ultimatemember:ultimate member (medium 5.4)
- [CVE-2019-14946](https://insights.sbomify.com/CVE-2019-14946/): Cross-site scripting in ultimatemember:ultimate member (medium 5.4)
- [CVE-2019-14945](https://insights.sbomify.com/CVE-2019-14945/): Cross-site scripting in ultimatemember:ultimate member (medium 5.4)
- [CVE-2019-14944](https://insights.sbomify.com/CVE-2019-14944/): Command injection in gitlab:gitlab (medium 6.5)
- [CVE-2019-14943](https://insights.sbomify.com/CVE-2019-14943/): Hardcoded credentials in gitlab:gitlab (critical 9.8)
- [CVE-2019-14942](https://insights.sbomify.com/CVE-2019-14942/): Information disclosure in gitlab:gitlab (medium 5.9)
- [CVE-2019-14941](https://insights.sbomify.com/CVE-2019-14941/): Denial of service in ushareit:shareit (high 7.5)
- [CVE-2019-14940](https://insights.sbomify.com/CVE-2019-14940/): Denial of service in spdk:storage performance development kit (medium 6.5)
- [CVE-2019-14939](https://insights.sbomify.com/CVE-2019-14939/): MySQL for Node.js Unsafe Options (medium 5.5)
- [CVE-2019-14937](https://insights.sbomify.com/CVE-2019-14937/): SQL injection in vanderbilt:redcap (high 7.5)
- [CVE-2019-14936](https://insights.sbomify.com/CVE-2019-14936/): Information disclosure in easyappointments:easy\!appointments (medium 5.3)
- [CVE-2019-14935](https://insights.sbomify.com/CVE-2019-14935/): Misconfiguration in 3cx:3cx (high 7.8)
- [CVE-2019-14934](https://insights.sbomify.com/CVE-2019-14934/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2019-14933](https://insights.sbomify.com/CVE-2019-14933/): Bagisto CSRF Vulnerability (high 8.8)
- [CVE-2019-14932](https://insights.sbomify.com/CVE-2019-14932/): Missing authorization in humanica:humatrix 7 (high 7.5)
- [CVE-2019-14931](https://insights.sbomify.com/CVE-2019-14931/): Command injection in inea:me-rtu firmware (critical 9.8)
- [CVE-2019-14930](https://insights.sbomify.com/CVE-2019-14930/): Hardcoded credentials in inea:me-rtu firmware (critical 9.8)
- [CVE-2019-14929](https://insights.sbomify.com/CVE-2019-14929/): Information disclosure in inea:me-rtu firmware (critical 9.8)
- [CVE-2019-14928](https://insights.sbomify.com/CVE-2019-14928/): Cross-site scripting in inea:me-rtu firmware (medium 5.4)
- [CVE-2019-14927](https://insights.sbomify.com/CVE-2019-14927/): Missing authorization in inea:me-rtu firmware (high 7.5)
- [CVE-2019-14926](https://insights.sbomify.com/CVE-2019-14926/): Hardcoded credentials in inea:me-rtu firmware (critical 9.8)
- [CVE-2019-14925](https://insights.sbomify.com/CVE-2019-14925/): Misconfiguration in inea:me-rtu firmware (medium 6.5)
- [CVE-2019-14924](https://insights.sbomify.com/CVE-2019-14924/): Path traversal in gcdwebserver project:gcdwebserver (high 7.5)
- [CVE-2019-14923](https://insights.sbomify.com/CVE-2019-14923/): Command injection in eyesofnetwork:eyesofnetwork (high 8.8)
- [CVE-2019-14920](https://insights.sbomify.com/CVE-2019-14920/): Command injection in billion:sg600 r2 firmware (high 8.8)
- [CVE-2019-14919](https://insights.sbomify.com/CVE-2019-14919/): Hardcoded credentials in billion:sg600 r2 firmware (high 7.8)
- [CVE-2019-14918](https://insights.sbomify.com/CVE-2019-14918/): Cross-site scripting in billion:sg600 r2 firmware (medium 5.4)
- [CVE-2019-14916](https://insights.sbomify.com/CVE-2019-14916/): File upload in prise:adas (medium 6.5)
- [CVE-2019-14915](https://insights.sbomify.com/CVE-2019-14915/): Cross-site scripting in prise:adas (medium 6.1)
- [CVE-2019-14914](https://insights.sbomify.com/CVE-2019-14914/): Path traversal in prise:adas (critical 9.1)
- [CVE-2019-14913](https://insights.sbomify.com/CVE-2019-14913/): Cross-site scripting in prise:adas (medium 5.4)
- [CVE-2019-14912](https://insights.sbomify.com/CVE-2019-14912/): Open redirect in prise:adas (medium 6.1)
- [CVE-2019-14911](https://insights.sbomify.com/CVE-2019-14911/): Cross-site scripting in prise:adas (medium 6.1)
- [CVE-2019-14910](https://insights.sbomify.com/CVE-2019-14910/): Keycloak Authentication Error (critical 9.3)
- [CVE-2019-14909](https://insights.sbomify.com/CVE-2019-14909/): Keycloak Authentication Error (critical 9.3)
- [CVE-2019-14907](https://insights.sbomify.com/CVE-2019-14907/): Memory corruption in samba (medium 6.5)
- [CVE-2019-14906](https://insights.sbomify.com/CVE-2019-14906/): Memory corruption in SDL (high 8.1)
- [CVE-2019-14905](https://insights.sbomify.com/CVE-2019-14905/): Externally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in Ansible (high 7.3)
- [CVE-2019-14904](https://insights.sbomify.com/CVE-2019-14904/): OS Command Injection and Improper Input Validation in ansible (high 7.3)
- [CVE-2019-14902](https://insights.sbomify.com/CVE-2019-14902/): Missing authorization in samba (medium 5.4)
- [CVE-2019-14901](https://insights.sbomify.com/CVE-2019-14901/): Memory corruption in kernel (high 8.8)
- [CVE-2019-14900](https://insights.sbomify.com/CVE-2019-14900/): SQL Injection in Hibernate ORM (medium 6.5)
- [CVE-2019-1490](https://insights.sbomify.com/CVE-2019-1490/): Other in Skype for Business Server 2019 CU2 (medium 5.4)
- [CVE-2019-14899](https://insights.sbomify.com/CVE-2019-14899/): Information disclosure in VPN (high 7.4)
- [CVE-2019-14898](https://insights.sbomify.com/CVE-2019-14898/): Race condition in kernel (high 7.0)
- [CVE-2019-14897](https://insights.sbomify.com/CVE-2019-14897/): Memory corruption in kernel (medium 6.6)
- [CVE-2019-14896](https://insights.sbomify.com/CVE-2019-14896/): Memory corruption in kernel (high 7.8)
- [CVE-2019-14895](https://insights.sbomify.com/CVE-2019-14895/): Memory corruption in kernel (high 8.0)
- [CVE-2019-14894](https://insights.sbomify.com/CVE-2019-14894/): Command injection in CloudForms (high 8.0)
- [CVE-2019-14893](https://insights.sbomify.com/CVE-2019-14893/): Polymorphic deserialization of malicious object in jackson-databind (high 7.5)
- [CVE-2019-14892](https://insights.sbomify.com/CVE-2019-14892/): Polymorphic deserialization of malicious object in jackson-databind (high 7.5)
- [CVE-2019-14891](https://insights.sbomify.com/CVE-2019-14891/): Denial of service in cri-o (medium 5.0)
- [CVE-2019-14890](https://insights.sbomify.com/CVE-2019-14890/): Information disclosure in Tower (high 8.4)
- [CVE-2019-1489](https://insights.sbomify.com/CVE-2019-1489/): Information disclosure in Microsoft Windows XP Service Pack 3 (high 7.5)
- [CVE-2019-14889](https://insights.sbomify.com/CVE-2019-14889/): Command injection in libssh (high 7.1)
- [CVE-2019-14888](https://insights.sbomify.com/CVE-2019-14888/): Undertow vulnerable to Uncontrolled Resource Consumption (high 7.5)
- [CVE-2019-14887](https://insights.sbomify.com/CVE-2019-14887/): Inadequate Encryption Strength and Algorithm Downgrade in Wildfly (high 7.4)
- [CVE-2019-14886](https://insights.sbomify.com/CVE-2019-14886/): Weak cryptography in Business-central (medium 4.6)
- [CVE-2019-14885](https://insights.sbomify.com/CVE-2019-14885/): Information disclosure in JBoss EAP (medium 5.4)
- [CVE-2019-14884](https://insights.sbomify.com/CVE-2019-14884/): Moodle reflected Cross-site Scripting (XSS) (medium 6.1)
- [CVE-2019-14883](https://insights.sbomify.com/CVE-2019-14883/): Moodle Email media URL tokens were not checking for user status (low 3.7)
- [CVE-2019-14882](https://insights.sbomify.com/CVE-2019-14882/): Moodle open redirect vulnerability (low 3.1)
- [CVE-2019-14881](https://insights.sbomify.com/CVE-2019-14881/): Moodle XSS Vulnerability (medium 6.1)
- [CVE-2019-14880](https://insights.sbomify.com/CVE-2019-14880/): Moodle Oauth 2 Insufficiently Protects Against Compromise (medium 4.8)
- [CVE-2019-1488](https://insights.sbomify.com/CVE-2019-1488/): Security feature bypass in Windows (low 3.3)
- [CVE-2019-14879](https://insights.sbomify.com/CVE-2019-14879/): Moodle does not revoke role capabilities correctly (medium 4.2)
- [CVE-2019-14878](https://insights.sbomify.com/CVE-2019-14878/): Null dereference in newlib (medium 6.5)
- [CVE-2019-14877](https://insights.sbomify.com/CVE-2019-14877/): Null dereference in newlib (medium 6.5)
- [CVE-2019-14876](https://insights.sbomify.com/CVE-2019-14876/): Null dereference in newlib (medium 6.5)
- [CVE-2019-14875](https://insights.sbomify.com/CVE-2019-14875/): Null dereference in newlib (medium 6.5)
- [CVE-2019-14874](https://insights.sbomify.com/CVE-2019-14874/): Null dereference in newlib (medium 6.5)
- [CVE-2019-14873](https://insights.sbomify.com/CVE-2019-14873/): Null dereference in newlib (medium 6.5)
- [CVE-2019-14872](https://insights.sbomify.com/CVE-2019-14872/): Null dereference in newlib (medium 6.5)
- [CVE-2019-14871](https://insights.sbomify.com/CVE-2019-14871/): Null dereference in newlib (medium 6.5)
- [CVE-2019-14870](https://insights.sbomify.com/CVE-2019-14870/): Security feature bypass in samba (medium 5.4)
- [CVE-2019-1487](https://insights.sbomify.com/CVE-2019-1487/): Information disclosure in Microsoft Authentication Library (MSAL) for Android (medium 6.5)
- [CVE-2019-14869](https://insights.sbomify.com/CVE-2019-14869/): Security feature bypass in ghostscript (high 7.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/111/