# Vulnerabilities published in 2019


- [CVE-2019-14868](https://insights.sbomify.com/CVE-2019-14868/): Command injection in ksh (high 7.4)
- [CVE-2019-14867](https://insights.sbomify.com/CVE-2019-14867/): Code injection in FreeIPA (high 8.8)
- [CVE-2019-14866](https://insights.sbomify.com/CVE-2019-14866/): Path traversal in cpio (medium 6.7)
- [CVE-2019-14865](https://insights.sbomify.com/CVE-2019-14865/): Denial of service in grub2 (medium 5.9)
- [CVE-2019-14864](https://insights.sbomify.com/CVE-2019-14864/): Inclusion of Sensitive Information in Log Files and Improper Output Neutralization for Logs in Ansible (medium 5.7)
- [CVE-2019-14863](https://insights.sbomify.com/CVE-2019-14863/): AngularJS Cross-site Scripting due to failure to sanitize `xlink.href` attributes (high 7.1)
- [CVE-2019-14862](https://insights.sbomify.com/CVE-2019-14862/): XSS in knockout (medium 6.1)
- [CVE-2019-14861](https://insights.sbomify.com/CVE-2019-14861/): Memory corruption in samba (medium 5.3)
- [CVE-2019-14860](https://insights.sbomify.com/CVE-2019-14860/): Misconfiguration in syndesis (high 7.4)
- [CVE-2019-1486](https://insights.sbomify.com/CVE-2019-1486/): Open redirect in Microsoft Visual Studio 2019 (medium 6.1)
- [CVE-2019-14859](https://insights.sbomify.com/CVE-2019-14859/): Improper Verification of Cryptographic Signature in Pure-Python ECDSA (high 7.4)
- [CVE-2019-14858](https://insights.sbomify.com/CVE-2019-14858/): Ansible leaks sensitive information to logs when told not to (high 7.3)
- [CVE-2019-14857](https://insights.sbomify.com/CVE-2019-14857/): Open redirect in mod auth openidc (medium 5.8)
- [CVE-2019-14856](https://insights.sbomify.com/CVE-2019-14856/): Ansible password prompts could expose passwords (medium 6.4)
- [CVE-2019-14855](https://insights.sbomify.com/CVE-2019-14855/): Weak cryptography in gnupg2 (medium 5.3)
- [CVE-2019-14854](https://insights.sbomify.com/CVE-2019-14854/): Information disclosure in library-go (medium 5.3)
- [CVE-2019-14853](https://insights.sbomify.com/CVE-2019-14853/): Duplicate Advisory: possible DoS caused by malformed signature decoding in Pure-Python ECDSA (low 3.7)
- [CVE-2019-14852](https://insights.sbomify.com/CVE-2019-14852/): Weak cryptography in apicast (high 7.5)
- [CVE-2019-14851](https://insights.sbomify.com/CVE-2019-14851/): Denial of service in nbdkit (medium 6.5)
- [CVE-2019-14850](https://insights.sbomify.com/CVE-2019-14850/): Denial of service in nbdkit (low 3.7)
- [CVE-2019-1485](https://insights.sbomify.com/CVE-2019-1485/): Memory corruption in Internet Explorer 10 (high 7.5)
- [CVE-2019-14849](https://insights.sbomify.com/CVE-2019-14849/): Misconfiguration in 3scale (medium 4.6)
- [CVE-2019-14847](https://insights.sbomify.com/CVE-2019-14847/): Null dereference in samba (medium 4.9)
- [CVE-2019-14846](https://insights.sbomify.com/CVE-2019-14846/): Ansible Uses Plugins That Disclose Credentials (high 7.3)
- [CVE-2019-14845](https://insights.sbomify.com/CVE-2019-14845/): Security feature bypass in openshift (medium 5.7)
- [CVE-2019-14844](https://insights.sbomify.com/CVE-2019-14844/): Denial of service in krb5 (high 7.5)
- [CVE-2019-14843](https://insights.sbomify.com/CVE-2019-14843/): Missing authorization in wildfly-security-manager (high 7.5)
- [CVE-2019-14842](https://insights.sbomify.com/CVE-2019-14842/): Memory corruption in libnbd (high 7.3)
- [CVE-2019-14841](https://insights.sbomify.com/CVE-2019-14841/): Privilege escalation in Business-central (high 8.8)
- [CVE-2019-14840](https://insights.sbomify.com/CVE-2019-14840/): Information disclosure in Business-central (high 7.5)
- [CVE-2019-1484](https://insights.sbomify.com/CVE-2019-1484/): Code injection in Windows (high 7.8)
- [CVE-2019-14839](https://insights.sbomify.com/CVE-2019-14839/): Information disclosure in Business-central (high 7.5)
- [CVE-2019-14838](https://insights.sbomify.com/CVE-2019-14838/): Wildfly Authorization Misconfiguration (medium 5.2)
- [CVE-2019-14837](https://insights.sbomify.com/CVE-2019-14837/): keycloak vulnerable to unauthorized login via mail server setup (critical 9.1)
- [CVE-2019-14836](https://insights.sbomify.com/CVE-2019-14836/): Cross-site request forgery in Red Hat 3scale API Management (high 8.8)
- [CVE-2019-14835](https://insights.sbomify.com/CVE-2019-14835/): Memory corruption in Linux kernel (high 7.2)
- [CVE-2019-14834](https://insights.sbomify.com/CVE-2019-14834/): Denial of service in dnsmasq (low 3.7)
- [CVE-2019-14833](https://insights.sbomify.com/CVE-2019-14833/): Security feature bypass in samba (medium 4.2)
- [CVE-2019-14832](https://insights.sbomify.com/CVE-2019-14832/): Keycloak Unauthenticated Access (medium 5.0)
- [CVE-2019-14831](https://insights.sbomify.com/CVE-2019-14831/): Open redirect in Moodle (medium 6.1)
- [CVE-2019-14830](https://insights.sbomify.com/CVE-2019-14830/): Open redirect in Moodle (medium 6.1)
- [CVE-2019-1483](https://insights.sbomify.com/CVE-2019-1483/): Privilege escalation in Windows (high 7.8)
- [CVE-2019-14829](https://insights.sbomify.com/CVE-2019-14829/): Missing authorization in Moodle (medium 4.3)
- [CVE-2019-14828](https://insights.sbomify.com/CVE-2019-14828/): Privilege escalation in Moodle (medium 4.3)
- [CVE-2019-14827](https://insights.sbomify.com/CVE-2019-14827/): Code injection in Moodle (medium 6.1)
- [CVE-2019-14826](https://insights.sbomify.com/CVE-2019-14826/): Auth bypass in ipa (medium 5.6)
- [CVE-2019-14825](https://insights.sbomify.com/CVE-2019-14825/): Katello cleartext password storage issue (medium 4.1)
- [CVE-2019-14824](https://insights.sbomify.com/CVE-2019-14824/): Missing authorization in 389-ds-base (medium 6.5)
- [CVE-2019-14823](https://insights.sbomify.com/CVE-2019-14823/): Security feature bypass in JSS (medium 6.8)
- [CVE-2019-14822](https://insights.sbomify.com/CVE-2019-14822/): Missing authorization in ibus (high 7.1)
- [CVE-2019-14821](https://insights.sbomify.com/CVE-2019-14821/): Memory corruption in Kernel (high 7.5)
- [CVE-2019-14820](https://insights.sbomify.com/CVE-2019-14820/): Exposure of Sensitive Information to an Unauthorized Actor in Keycloak (medium 4.3)
- [CVE-2019-14819](https://insights.sbomify.com/CVE-2019-14819/): Privilege escalation in openshift-ansible (high 7.5)
- [CVE-2019-14818](https://insights.sbomify.com/CVE-2019-14818/): Denial of service in dpdk (high 7.5)
- [CVE-2019-14817](https://insights.sbomify.com/CVE-2019-14817/): Security feature bypass in ghostscript (high 7.3)
- [CVE-2019-14816](https://insights.sbomify.com/CVE-2019-14816/): Memory corruption in kernel (medium 5.5)
- [CVE-2019-14815](https://insights.sbomify.com/CVE-2019-14815/): Memory corruption in kernel (high 7.8)
- [CVE-2019-14814](https://insights.sbomify.com/CVE-2019-14814/): Memory corruption in kernel (medium 5.5)
- [CVE-2019-14813](https://insights.sbomify.com/CVE-2019-14813/): Security feature bypass in ghostscript (high 7.3)
- [CVE-2019-14812](https://insights.sbomify.com/CVE-2019-14812/): Security feature bypass in ghostscript (high 7.3)
- [CVE-2019-14811](https://insights.sbomify.com/CVE-2019-14811/): Security feature bypass in ghostscript (high 7.3)
- [CVE-2019-14810](https://insights.sbomify.com/CVE-2019-14810/): Race condition in arista:extensible operating system (medium 5.9)
- [CVE-2019-1481](https://insights.sbomify.com/CVE-2019-1481/): Information disclosure in Windows (medium 4.3)
- [CVE-2019-14809](https://insights.sbomify.com/CVE-2019-14809/): Auth bypass in debian:debian linux (critical 9.8)
- [CVE-2019-14808](https://insights.sbomify.com/CVE-2019-14808/): Information disclosure in renpho:renpho (medium 6.8)
- [CVE-2019-14807](https://insights.sbomify.com/CVE-2019-14807/): Cross-site scripting in mediawiki:mobilefrontend (medium 6.1)
- [CVE-2019-14806](https://insights.sbomify.com/CVE-2019-14806/): Pallets Werkzeug Insufficient Entropy (high 7.5)
- [CVE-2019-14805](https://insights.sbomify.com/CVE-2019-14805/): Cross-site scripting in una:una (medium 4.8)
- [CVE-2019-14804](https://insights.sbomify.com/CVE-2019-14804/): Cross-site scripting in una:una (medium 4.8)
- [CVE-2019-14802](https://insights.sbomify.com/CVE-2019-14802/): Hashicorp Nomad Information Exposure Through Environmental Variables (medium 5.3)
- [CVE-2019-14801](https://insights.sbomify.com/CVE-2019-14801/): SQL injection in foliovision:fv flowplayer video player (critical 9.8)
- [CVE-2019-14800](https://insights.sbomify.com/CVE-2019-14800/): Information disclosure in foliovision:fv flowplayer video player (medium 5.3)
- [CVE-2019-1480](https://insights.sbomify.com/CVE-2019-1480/): Information disclosure in Windows (medium 4.3)
- [CVE-2019-14799](https://insights.sbomify.com/CVE-2019-14799/): Cross-site scripting in foliovision:fv flowplayer video player (medium 6.1)
- [CVE-2019-14798](https://insights.sbomify.com/CVE-2019-14798/): Path traversal in 10web:photo gallery (medium 4.9)
- [CVE-2019-14797](https://insights.sbomify.com/CVE-2019-14797/): Cross-site scripting in 10web:photo gallery (medium 5.4)
- [CVE-2019-14796](https://insights.sbomify.com/CVE-2019-14796/): Cross-site scripting in mq-woocommerce-products-price-bulk-edit project:mq-woocommerce-products-price-bulk-edit (medium 5.4)
- [CVE-2019-14795](https://insights.sbomify.com/CVE-2019-14795/): Cross-site scripting in toggle-the-title project:toggle-the-title (medium 4.8)
- [CVE-2019-14794](https://insights.sbomify.com/CVE-2019-14794/): File upload in metabox:meta box (high 7.5)
- [CVE-2019-14793](https://insights.sbomify.com/CVE-2019-14793/): Missing authorization in metabox:meta box (medium 6.5)
- [CVE-2019-14792](https://insights.sbomify.com/CVE-2019-14792/): Cross-site scripting in codecabin:wp go maps (medium 5.4)
- [CVE-2019-14791](https://insights.sbomify.com/CVE-2019-14791/): Cross-site scripting in codepeople:appointment booking calendar (medium 6.1)
- [CVE-2019-14790](https://insights.sbomify.com/CVE-2019-14790/): Cross-site scripting in limbcode:limb-gallery (medium 6.1)
- [CVE-2019-14789](https://insights.sbomify.com/CVE-2019-14789/): Cross-site scripting in kunalnagar:custom 404 pro (medium 6.1)
- [CVE-2019-14788](https://insights.sbomify.com/CVE-2019-14788/): Path traversal in tribulant:newsletters (high 8.8)
- [CVE-2019-14787](https://insights.sbomify.com/CVE-2019-14787/): Cross-site scripting in tribulant:newsletters (medium 5.4)
- [CVE-2019-14786](https://insights.sbomify.com/CVE-2019-14786/): Missing authorization in rankmath:seo (medium 6.5)
- [CVE-2019-14785](https://insights.sbomify.com/CVE-2019-14785/): Cross-site scripting in codepeople:cp contact form with paypal (medium 5.4)
- [CVE-2019-14784](https://insights.sbomify.com/CVE-2019-14784/): Cross-site scripting in codepeople:cp contact form with paypal (medium 6.1)
- [CVE-2019-14783](https://insights.sbomify.com/CVE-2019-14783/): Privilege escalation in google:android (medium 5.5)
- [CVE-2019-14782](https://insights.sbomify.com/CVE-2019-14782/): Information disclosure in control-webpanel:webpanel (medium 6.5)
- [CVE-2019-1478](https://insights.sbomify.com/CVE-2019-1478/): Privilege escalation in Windows (high 7.8)
- [CVE-2019-14778](https://insights.sbomify.com/CVE-2019-14778/): Use after free in debian:debian linux (high 7.8)
- [CVE-2019-14777](https://insights.sbomify.com/CVE-2019-14777/): Use after free in debian:debian linux (high 7.8)
- [CVE-2019-14776](https://insights.sbomify.com/CVE-2019-14776/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2019-14774](https://insights.sbomify.com/CVE-2019-14774/): Cross-site scripting in getwooplugins:woo-variation-swatches (medium 6.1)
- [CVE-2019-14773](https://insights.sbomify.com/CVE-2019-14773/): Missing authorization in webcraftic:woody ad snippets (high 7.5)
- [CVE-2019-14772](https://insights.sbomify.com/CVE-2019-14772/): Cross-Site Scripting (XSS) in Verdaccio (medium 6.1)
- [CVE-2019-14771](https://insights.sbomify.com/CVE-2019-14771/): File upload in backdropcms:backdrop cms (critical 9.8)
- [CVE-2019-14770](https://insights.sbomify.com/CVE-2019-14770/): Cross-site scripting in backdropcms:backdrop core (medium 6.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/112/