# Vulnerabilities published in 2019 - [CVE-2019-1477](https://insights.sbomify.com/CVE-2019-1477/): Privilege escalation in Windows (high 7.8) - [CVE-2019-14769](https://insights.sbomify.com/CVE-2019-14769/): Cross-site scripting in backdropcms:backdrop (medium 6.1) - [CVE-2019-14768](https://insights.sbomify.com/CVE-2019-14768/): Path traversal in dimo-crm:yellowbox crm (high 8.8) - [CVE-2019-14767](https://insights.sbomify.com/CVE-2019-14767/): Path traversal in dimo-crm:yellowbox crm (high 7.5) - [CVE-2019-14766](https://insights.sbomify.com/CVE-2019-14766/): Path traversal in dimo-crm:yellowbox crm (medium 6.5) - [CVE-2019-14765](https://insights.sbomify.com/CVE-2019-14765/): Missing authorization in dimo-crm:yellowbox crm (high 8.8) - [CVE-2019-14763](https://insights.sbomify.com/CVE-2019-14763/): Race condition in canonical:ubuntu linux (medium 5.5) - [CVE-2019-14761](https://insights.sbomify.com/CVE-2019-14761/): Cross-site scripting in kaiostech:kaios (medium 4.4) - [CVE-2019-14760](https://insights.sbomify.com/CVE-2019-14760/): Cross-site scripting in kaiostech:kaios (medium 4.4) - [CVE-2019-1476](https://insights.sbomify.com/CVE-2019-1476/): Privilege escalation in Windows (high 7.8) - [CVE-2019-14759](https://insights.sbomify.com/CVE-2019-14759/): Cross-site scripting in kaiostech:kaios (medium 4.4) - [CVE-2019-14758](https://insights.sbomify.com/CVE-2019-14758/): Cross-site scripting in kaiostech:kaios (medium 6.1) - [CVE-2019-14757](https://insights.sbomify.com/CVE-2019-14757/): Cross-site scripting in kaiostech:kaios (medium 6.1) - [CVE-2019-14756](https://insights.sbomify.com/CVE-2019-14756/): Cross-site scripting in kaiostech:kaios (medium 6.1) - [CVE-2019-14755](https://insights.sbomify.com/CVE-2019-14755/): File upload in leaftecnologia:leaf admin (high 8.8) - [CVE-2019-14754](https://insights.sbomify.com/CVE-2019-14754/): SQL injection in open-school:open-school (critical 9.8) - [CVE-2019-14753](https://insights.sbomify.com/CVE-2019-14753/): Memory corruption in sick:fx0-gent00000 firmware (high 7.5) - [CVE-2019-14752](https://insights.sbomify.com/CVE-2019-14752/): Cross-site scripting in salesagility:suitecrm (medium 6.1) - [CVE-2019-14751](https://insights.sbomify.com/CVE-2019-14751/): NLTK Vulnerable To Path Traversal (high 7.5) - [CVE-2019-14750](https://insights.sbomify.com/CVE-2019-14750/): Cross-site scripting in enhancesoft:osticket (medium 6.1) - [CVE-2019-14749](https://insights.sbomify.com/CVE-2019-14749/): Code injection in enhancesoft:osticket (high 8.8) - [CVE-2019-14748](https://insights.sbomify.com/CVE-2019-14748/): Cross-site scripting in enhancesoft:osticket (medium 5.4) - [CVE-2019-14747](https://insights.sbomify.com/CVE-2019-14747/): Cross-site scripting in diaowen:dwsurvey (medium 6.1) - [CVE-2019-14746](https://insights.sbomify.com/CVE-2019-14746/): Code injection in kuaifan:kuaifancms (critical 9.8) - [CVE-2019-14745](https://insights.sbomify.com/CVE-2019-14745/): Command injection in fedoraproject:fedora (high 7.8) - [CVE-2019-14744](https://insights.sbomify.com/CVE-2019-14744/): Command injection in canonical:ubuntu linux (high 7.8) - [CVE-2019-14743](https://insights.sbomify.com/CVE-2019-14743/): Privilege escalation in valvesoftware:steam client (medium 6.6) - [CVE-2019-1474](https://insights.sbomify.com/CVE-2019-1474/): Information disclosure in Windows (medium 5.5) - [CVE-2019-14737](https://insights.sbomify.com/CVE-2019-14737/): Misconfiguration in ubisoft:uplay (high 7.8) - [CVE-2019-14734](https://insights.sbomify.com/CVE-2019-14734/): Memory corruption in adplug project:adplug (high 8.8) - [CVE-2019-14733](https://insights.sbomify.com/CVE-2019-14733/): Memory corruption in adplug project:adplug (high 8.8) - [CVE-2019-14732](https://insights.sbomify.com/CVE-2019-14732/): Memory corruption in adplug project:adplug (high 8.8) - [CVE-2019-14731](https://insights.sbomify.com/CVE-2019-14731/): Cross-site scripting in cnezsoft:zentao (medium 5.4) - [CVE-2019-14730](https://insights.sbomify.com/CVE-2019-14730/): Missing authorization in control-webpanel:webpanel (medium 4.3) - [CVE-2019-14729](https://insights.sbomify.com/CVE-2019-14729/): Missing authorization in control-webpanel:webpanel (medium 4.3) - [CVE-2019-14728](https://insights.sbomify.com/CVE-2019-14728/): Missing authorization in control-webpanel:webpanel (medium 4.3) - [CVE-2019-14727](https://insights.sbomify.com/CVE-2019-14727/): Missing authorization in control-webpanel:webpanel (medium 4.3) - [CVE-2019-14726](https://insights.sbomify.com/CVE-2019-14726/): Missing authorization in control-webpanel:webpanel (medium 5.4) - [CVE-2019-14725](https://insights.sbomify.com/CVE-2019-14725/): Missing authorization in control-webpanel:webpanel (medium 4.3) - [CVE-2019-14724](https://insights.sbomify.com/CVE-2019-14724/): Missing authorization in control-webpanel:webpanel (high 7.5) - [CVE-2019-14723](https://insights.sbomify.com/CVE-2019-14723/): Missing authorization in control-webpanel:webpanel (medium 4.3) - [CVE-2019-14722](https://insights.sbomify.com/CVE-2019-14722/): Missing authorization in control-webpanel:webpanel (medium 4.3) - [CVE-2019-14721](https://insights.sbomify.com/CVE-2019-14721/): Missing authorization in control-webpanel:webpanel (medium 6.5) - [CVE-2019-1472](https://insights.sbomify.com/CVE-2019-1472/): Information disclosure in Windows (medium 5.5) - [CVE-2019-14719](https://insights.sbomify.com/CVE-2019-14719/): Command injection in verifone:mx900 firmware (high 7.8) - [CVE-2019-14718](https://insights.sbomify.com/CVE-2019-14718/): Command injection in verifone:mx900 firmware (medium 6.7) - [CVE-2019-14717](https://insights.sbomify.com/CVE-2019-14717/): Memory corruption in verifone:verix os (high 7.8) - [CVE-2019-14716](https://insights.sbomify.com/CVE-2019-14716/): Security feature bypass in verifone:verix os (medium 6.6) - [CVE-2019-14715](https://insights.sbomify.com/CVE-2019-14715/): Security feature bypass in verifone:p200 firmware (medium 6.8) - [CVE-2019-14713](https://insights.sbomify.com/CVE-2019-14713/): Security feature bypass in verifone:mx900 firmware (medium 5.5) - [CVE-2019-14712](https://insights.sbomify.com/CVE-2019-14712/): Security feature bypass in verifone:verix os (high 7.8) - [CVE-2019-14711](https://insights.sbomify.com/CVE-2019-14711/): Race condition in verifone:mx900 firmware (high 7.0) - [CVE-2019-1471](https://insights.sbomify.com/CVE-2019-1471/): Code injection in Windows (high 8.2) - [CVE-2019-14709](https://insights.sbomify.com/CVE-2019-14709/): Information disclosure in microdigital:mdc-n2190v firmware (critical 9.8) - [CVE-2019-14708](https://insights.sbomify.com/CVE-2019-14708/): Memory corruption in microdigital:mdc-n2190v firmware (critical 9.8) - [CVE-2019-14707](https://insights.sbomify.com/CVE-2019-14707/): File upload in microdigital:mdc-n2190v firmware (high 7.2) - [CVE-2019-14706](https://insights.sbomify.com/CVE-2019-14706/): Memory corruption in microdigital:mdc-n2190v firmware (high 7.5) - [CVE-2019-14705](https://insights.sbomify.com/CVE-2019-14705/): Auth bypass in microdigital:mdc-n2190v firmware (high 7.2) - [CVE-2019-14704](https://insights.sbomify.com/CVE-2019-14704/): Server-side request forgery in microdigital:mdc-n2190v firmware (critical 9.8) - [CVE-2019-14703](https://insights.sbomify.com/CVE-2019-14703/): Cross-site request forgery in microdigital:mdc-n2190v firmware (high 8.8) - [CVE-2019-14702](https://insights.sbomify.com/CVE-2019-14702/): SQL injection in microdigital:mdc-n2190v firmware (critical 9.8) - [CVE-2019-14701](https://insights.sbomify.com/CVE-2019-14701/): Path traversal in microdigital:mdc-n2190v firmware (high 7.5) - [CVE-2019-14700](https://insights.sbomify.com/CVE-2019-14700/): Path traversal in microdigital:mdc-n2190v firmware (high 7.5) - [CVE-2019-1470](https://insights.sbomify.com/CVE-2019-1470/): Information disclosure in Windows (medium 6.0) - [CVE-2019-14699](https://insights.sbomify.com/CVE-2019-14699/): Command injection in microdigital:mdc-n2190v firmware (critical 9.8) - [CVE-2019-14698](https://insights.sbomify.com/CVE-2019-14698/): Memory corruption in microdigital:mdc-n2190v firmware (critical 9.8) - [CVE-2019-14697](https://insights.sbomify.com/CVE-2019-14697/): Memory corruption in musl-libc:musl (critical 9.8) - [CVE-2019-14696](https://insights.sbomify.com/CVE-2019-14696/): Cross-site scripting in open-school:open-school (medium 6.1) - [CVE-2019-14695](https://insights.sbomify.com/CVE-2019-14695/): SQL injection in sygnoos:popup builder (critical 9.8) - [CVE-2019-14694](https://insights.sbomify.com/CVE-2019-14694/): Use after free in comodo:antivirus (medium 4.7) - [CVE-2019-14693](https://insights.sbomify.com/CVE-2019-14693/): XML external entity in zohocorp:manageengine assetexplorer (high 8.5) - [CVE-2019-14692](https://insights.sbomify.com/CVE-2019-14692/): Memory corruption in adplug project:adplug (high 8.8) - [CVE-2019-14691](https://insights.sbomify.com/CVE-2019-14691/): Memory corruption in adplug project:adplug (high 8.8) - [CVE-2019-14690](https://insights.sbomify.com/CVE-2019-14690/): Memory corruption in adplug project:adplug (high 8.8) - [CVE-2019-1469](https://insights.sbomify.com/CVE-2019-1469/): Information disclosure in Windows (medium 5.5) - [CVE-2019-14688](https://insights.sbomify.com/CVE-2019-14688/): Other in Trend Micro IM Security (IMS), Trend Micro Control Manager (TMCM), Trend Micro OfficeScan (OSCE), Trend Micro Endpoint Sensor (TMES), Trend Micro Security (Consumer), Trend Micro ScanMail for Microsoft Exchange (SMEX), Trend Micro ServerProtect (SP), Trend Micro Mobile Security Enterprise (TMMS Enterprise) (high 7.0) - [CVE-2019-14687](https://insights.sbomify.com/CVE-2019-14687/): Other in Trend Micro Password Manager (high 7.8) - [CVE-2019-14686](https://insights.sbomify.com/CVE-2019-14686/): Privilege escalation in Trend Micro Ransom Buster, Trend Micro Security (Consumer) (high 7.8) - [CVE-2019-14685](https://insights.sbomify.com/CVE-2019-14685/): Privilege escalation in Trend Micro Security (Consumer) (high 7.8) - [CVE-2019-14684](https://insights.sbomify.com/CVE-2019-14684/): Other in Trend Micro Password Manager (high 7.8) - [CVE-2019-14683](https://insights.sbomify.com/CVE-2019-14683/): Cross-site request forgery in codection:import users from csv with meta (medium 5.7) - [CVE-2019-14682](https://insights.sbomify.com/CVE-2019-14682/): Cross-site request forgery in acf\: better search project (medium 4.3) - [CVE-2019-14681](https://insights.sbomify.com/CVE-2019-14681/): Cross-site request forgery in deny all firewall project:deny all firewall (high 8.8) - [CVE-2019-14680](https://insights.sbomify.com/CVE-2019-14680/): Cross-site request forgery in mijnpress:admin-renamer-extended (medium 5.7) - [CVE-2019-1468](https://insights.sbomify.com/CVE-2019-1468/): Memory corruption in Windows (high 8.8) - [CVE-2019-14679](https://insights.sbomify.com/CVE-2019-14679/): Cross-site request forgery in reputeinfosystems:arprice lite (medium 6.5) - [CVE-2019-14678](https://insights.sbomify.com/CVE-2019-14678/): XML external entity in sas:base sas (critical 10.0) - [CVE-2019-14672](https://insights.sbomify.com/CVE-2019-14672/): Cross-site scripting in firefly-iii:firefly iii (medium 5.4) - [CVE-2019-14671](https://insights.sbomify.com/CVE-2019-14671/): Improper Input Validation in Firefly III (low 3.3) - [CVE-2019-14670](https://insights.sbomify.com/CVE-2019-14670/): Cross-site scripting in firefly-iii:firefly iii (medium 5.4) - [CVE-2019-1467](https://insights.sbomify.com/CVE-2019-1467/): Information disclosure in Windows (medium 6.5) - [CVE-2019-14669](https://insights.sbomify.com/CVE-2019-14669/): Cross-site scripting in firefly-iii:firefly iii (medium 5.4) - [CVE-2019-14668](https://insights.sbomify.com/CVE-2019-14668/): Cross-site scripting in firefly-iii:firefly iii (medium 5.4) - [CVE-2019-14667](https://insights.sbomify.com/CVE-2019-14667/): Cross-site scripting in firefly-iii:firefly iii (medium 6.1) - [CVE-2019-14666](https://insights.sbomify.com/CVE-2019-14666/): Auth bypass in glpi-project:glpi (high 8.8) - [CVE-2019-14665](https://insights.sbomify.com/CVE-2019-14665/): Memory corruption in brandy project:brandy (medium 5.5) - [CVE-2019-14664](https://insights.sbomify.com/CVE-2019-14664/): Information disclosure in enigmail:enigmail (medium 6.5) - [CVE-2019-14663](https://insights.sbomify.com/CVE-2019-14663/): Memory corruption in brandy project:brandy (medium 5.5) - [CVE-2019-14662](https://insights.sbomify.com/CVE-2019-14662/): Memory corruption in brandy project:brandy (medium 5.5) - [CVE-2019-1466](https://insights.sbomify.com/CVE-2019-1466/): Information disclosure in Windows (medium 6.5) --- From sbomify Insights: https://insights.sbomify.com/years/2019/page/113/