# Vulnerabilities published in 2019


- [CVE-2019-14657](https://insights.sbomify.com/CVE-2019-14657/): Path traversal in yeahlink:t49g firmware (high 8.8)
- [CVE-2019-14656](https://insights.sbomify.com/CVE-2019-14656/): Privilege escalation in yeahlink:t49g firmware (high 8.8)
- [CVE-2019-14654](https://insights.sbomify.com/CVE-2019-14654/): Code injection in joomla:joomla\! (high 8.8)
- [CVE-2019-14653](https://insights.sbomify.com/CVE-2019-14653/): Cross-site Scripting in pandao (medium 6.1)
- [CVE-2019-14652](https://insights.sbomify.com/CVE-2019-14652/): Cross-site scripting in amazon:aws javascript s3 explorer (medium 6.1)
- [CVE-2019-1465](https://insights.sbomify.com/CVE-2019-1465/): Information disclosure in Windows (medium 6.5)
- [CVE-2019-1464](https://insights.sbomify.com/CVE-2019-1464/): Information disclosure in Microsoft Excel (medium 5.5)
- [CVE-2019-14630](https://insights.sbomify.com/CVE-2019-14630/): Information disclosure in Intel(R) Thunderbolt(TM) Controller Advisory (medium 4.6)
- [CVE-2019-1463](https://insights.sbomify.com/CVE-2019-1463/): Information disclosure in Microsoft Office (medium 5.5)
- [CVE-2019-14629](https://insights.sbomify.com/CVE-2019-14629/): Misconfiguration in Intel(R) DAAL (medium 5.5)
- [CVE-2019-14626](https://insights.sbomify.com/CVE-2019-14626/): Privilege escalation in Intel(R) FPGA Programmable Acceleration Card N3000 (medium 6.7)
- [CVE-2019-14625](https://insights.sbomify.com/CVE-2019-14625/): Missing authorization in Intel(R) FPGA Programmable Acceleration Card N3000 (medium 4.4)
- [CVE-2019-14620](https://insights.sbomify.com/CVE-2019-14620/): Denial of service in Intel(R) Wireless Bluetooth(R) Advisory (medium 6.5)
- [CVE-2019-1462](https://insights.sbomify.com/CVE-2019-1462/): Memory corruption in Microsoft Office (high 7.8)
- [CVE-2019-14615](https://insights.sbomify.com/CVE-2019-14615/): Information disclosure in Intel(R) Processors (medium 5.5)
- [CVE-2019-14613](https://insights.sbomify.com/CVE-2019-14613/): Privilege escalation in Intel(R) VTune(TM) Amplifier for Windows* (high 7.8)
- [CVE-2019-14612](https://insights.sbomify.com/CVE-2019-14612/): Memory corruption in Intel(R) NUC(R) (medium 6.7)
- [CVE-2019-14611](https://insights.sbomify.com/CVE-2019-14611/): Integer overflow in Intel(R) NUC(R) (medium 6.7)
- [CVE-2019-14610](https://insights.sbomify.com/CVE-2019-14610/): Privilege escalation in Intel(R) NUC(R) (high 7.8)
- [CVE-2019-1461](https://insights.sbomify.com/CVE-2019-1461/): Denial of service in Microsoft Office (medium 6.5)
- [CVE-2019-14609](https://insights.sbomify.com/CVE-2019-14609/): Privilege escalation in Intel(R) NUC(R) (medium 6.7)
- [CVE-2019-14608](https://insights.sbomify.com/CVE-2019-14608/): Memory corruption in Intel(R) NUC(R) (high 7.8)
- [CVE-2019-14607](https://insights.sbomify.com/CVE-2019-14607/): Other in Intel® Processors (medium 5.3)
- [CVE-2019-14605](https://insights.sbomify.com/CVE-2019-14605/): Misconfiguration in Intel(R) SCS Platform Discovery Utility (high 7.8)
- [CVE-2019-14604](https://insights.sbomify.com/CVE-2019-14604/): Null dereference in Intel® Quartus® Prime Pro Edition (medium 5.5)
- [CVE-2019-14603](https://insights.sbomify.com/CVE-2019-14603/): Misconfiguration in Intel® Quartus® Prime Pro Edition (high 7.8)
- [CVE-2019-14602](https://insights.sbomify.com/CVE-2019-14602/): Misconfiguration in Nuvoton* CIR Driver for Windows* 8 for Intel(R) NUC (high 7.8)
- [CVE-2019-14601](https://insights.sbomify.com/CVE-2019-14601/): Misconfiguration in Intel(R) RWC 3 for Windows (high 7.8)
- [CVE-2019-14600](https://insights.sbomify.com/CVE-2019-14600/): Privilege escalation in Intel(R) SNMP Subagent Stand-Alone for Windows* (medium 6.7)
- [CVE-2019-1460](https://insights.sbomify.com/CVE-2019-1460/): Other in Microsoft Outlook for Android (medium 4.6)
- [CVE-2019-14599](https://insights.sbomify.com/CVE-2019-14599/): Privilege escalation in Control Center-I (high 7.8)
- [CVE-2019-14598](https://insights.sbomify.com/CVE-2019-14598/): Auth bypass in Intel(R) CSME (medium 6.7)
- [CVE-2019-14596](https://insights.sbomify.com/CVE-2019-14596/): Missing authorization in Intel(R) Chipset Device Software INF Utility (medium 5.5)
- [CVE-2019-14591](https://insights.sbomify.com/CVE-2019-14591/): Denial of service in 2019.2 IPU – Intel(R) Graphics Driver for Windows* and Linux (medium 5.5)
- [CVE-2019-14590](https://insights.sbomify.com/CVE-2019-14590/): Missing authorization in 2019.2 IPU – Intel(R) Graphics Driver for Windows* and Linux (medium 5.5)
- [CVE-2019-14587](https://insights.sbomify.com/CVE-2019-14587/): Denial of service in Extensible Firmware Interface Development Kit (EDK II) (medium 6.5)
- [CVE-2019-14586](https://insights.sbomify.com/CVE-2019-14586/): Use after free in Extensible Firmware Interface Development Kit (EDK II) (high 8.0)
- [CVE-2019-14584](https://insights.sbomify.com/CVE-2019-14584/): Null dereference in Tianocore EDK2 (high 7.8)
- [CVE-2019-1458](https://insights.sbomify.com/CVE-2019-1458/): Microsoft Win32k Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2019-14575](https://insights.sbomify.com/CVE-2019-14575/): Business logic in Extensible Firmware Interface Development Kit (EDK II) (high 7.8)
- [CVE-2019-14574](https://insights.sbomify.com/CVE-2019-14574/): Memory corruption in 2019.2 IPU – Intel(R) Graphics Driver for Windows* and Linux (medium 5.5)
- [CVE-2019-14570](https://insights.sbomify.com/CVE-2019-14570/): Memory corruption in NUC Advisory (high 7.8)
- [CVE-2019-1457](https://insights.sbomify.com/CVE-2019-1457/): Security feature bypass in Microsoft Office (high 7.8)
- [CVE-2019-14569](https://insights.sbomify.com/CVE-2019-14569/): Memory corruption in NUC Advisory (high 7.8)
- [CVE-2019-14568](https://insights.sbomify.com/CVE-2019-14568/): Privilege escalation in Intel(R) RST (high 7.8)
- [CVE-2019-14566](https://insights.sbomify.com/CVE-2019-14566/): Other in 2019.2 IPU – Intel(R) SGX (high 7.8)
- [CVE-2019-14565](https://insights.sbomify.com/CVE-2019-14565/): Other in 2019.2 IPU – Intel(R) SGX (high 7.8)
- [CVE-2019-14563](https://insights.sbomify.com/CVE-2019-14563/): Integer overflow in Extensible Firmware Interface Development Kit (EDK II) (high 7.8)
- [CVE-2019-14562](https://insights.sbomify.com/CVE-2019-14562/): Integer overflow in Extensible Firmware Interface Development Kit (EDK II) (medium 5.5)
- [CVE-2019-1456](https://insights.sbomify.com/CVE-2019-1456/): Memory corruption in Windows (high 8.8)
- [CVE-2019-14559](https://insights.sbomify.com/CVE-2019-14559/): Denial of service in Extensible Firmware Interface Development Kit (EDK II) (high 7.5)
- [CVE-2019-14558](https://insights.sbomify.com/CVE-2019-14558/): Denial of service in Intel BIOS (medium 5.7)
- [CVE-2019-14557](https://insights.sbomify.com/CVE-2019-14557/): Memory corruption in Intel BIOS (high 8.0)
- [CVE-2019-14556](https://insights.sbomify.com/CVE-2019-14556/): Other in Intel BIOS (medium 4.4)
- [CVE-2019-14553](https://insights.sbomify.com/CVE-2019-14553/): Auth bypass in Extensible Firmware Interface Development Kit (EDK II) (medium 4.9)
- [CVE-2019-14551](https://insights.sbomify.com/CVE-2019-14551/): Cross-site request forgery in daskeyboard:das q software (critical 9.8)
- [CVE-2019-14550](https://insights.sbomify.com/CVE-2019-14550/): Cross-site scripting in espocrm:espocrm (medium 5.4)
- [CVE-2019-14549](https://insights.sbomify.com/CVE-2019-14549/): Cross-site scripting in espocrm:espocrm (medium 5.4)
- [CVE-2019-14548](https://insights.sbomify.com/CVE-2019-14548/): Cross-site scripting in espocrm:espocrm (medium 5.4)
- [CVE-2019-14547](https://insights.sbomify.com/CVE-2019-14547/): Cross-site scripting in espocrm:espocrm (medium 5.4)
- [CVE-2019-14546](https://insights.sbomify.com/CVE-2019-14546/): Cross-site scripting in espocrm:espocrm (medium 5.4)
- [CVE-2019-14544](https://insights.sbomify.com/CVE-2019-14544/): Insecure Permissions in Gogs (critical 9.8)
- [CVE-2019-14541](https://insights.sbomify.com/CVE-2019-14541/): Memory corruption in gnucobol project:gnucobol (high 7.8)
- [CVE-2019-14540](https://insights.sbomify.com/CVE-2019-14540/): Polymorphic Typing issue in FasterXML jackson-databind (critical 9.8)
- [CVE-2019-1454](https://insights.sbomify.com/CVE-2019-1454/): Privilege escalation in Windows (medium 5.5)
- [CVE-2019-14537](https://insights.sbomify.com/CVE-2019-14537/): Access of Resource Using Incompatible Type ('Type Confusion') in yourls/yourls (critical 9.8)
- [CVE-2019-14535](https://insights.sbomify.com/CVE-2019-14535/): Denial of service in debian:debian linux (high 7.8)
- [CVE-2019-14534](https://insights.sbomify.com/CVE-2019-14534/): Null dereference in debian:debian linux (medium 5.5)
- [CVE-2019-14533](https://insights.sbomify.com/CVE-2019-14533/): Use after free in debian:debian linux (high 7.8)
- [CVE-2019-14532](https://insights.sbomify.com/CVE-2019-14532/): Memory corruption in fedoraproject:fedora (critical 9.8)
- [CVE-2019-14531](https://insights.sbomify.com/CVE-2019-14531/): Memory corruption in sleuthkit:the sleuth kit (critical 9.8)
- [CVE-2019-14530](https://insights.sbomify.com/CVE-2019-14530/): Path traversal in open-emr:openemr (high 8.8)
- [CVE-2019-1453](https://insights.sbomify.com/CVE-2019-1453/): Denial of service in Windows (high 7.5)
- [CVE-2019-14529](https://insights.sbomify.com/CVE-2019-14529/): SQL injection in open-emr:openemr (critical 9.8)
- [CVE-2019-14528](https://insights.sbomify.com/CVE-2019-14528/): Memory corruption in gnucobol project:gnucobol (high 7.8)
- [CVE-2019-14527](https://insights.sbomify.com/CVE-2019-14527/): Command injection in netgear:mr1100 firmware (critical 9.8)
- [CVE-2019-14526](https://insights.sbomify.com/CVE-2019-14526/): Cross-site request forgery in netgear:mr1100 firmware (high 8.1)
- [CVE-2019-14525](https://insights.sbomify.com/CVE-2019-14525/): Information disclosure in octopus:octopus deploy (medium 4.9)
- [CVE-2019-14524](https://insights.sbomify.com/CVE-2019-14524/): Memory corruption in opensuse:backports (high 7.8)
- [CVE-2019-14523](https://insights.sbomify.com/CVE-2019-14523/): Integer overflow in schismtracker:schism tracker (high 7.8)
- [CVE-2019-14521](https://insights.sbomify.com/CVE-2019-14521/): Path traversal in emca:energy logserver (high 7.5)
- [CVE-2019-14518](https://insights.sbomify.com/CVE-2019-14518/): Cross-site scripting in modx:evolution cms (medium 5.4)
- [CVE-2019-14517](https://insights.sbomify.com/CVE-2019-14517/): Cross-site Scripting in pandao editor.md (medium 6.1)
- [CVE-2019-14516](https://insights.sbomify.com/CVE-2019-14516/): Security feature bypass in uidai:maadhaar (high 7.4)
- [CVE-2019-14514](https://insights.sbomify.com/CVE-2019-14514/): Command injection in microvirt:memu (critical 9.8)
- [CVE-2019-14513](https://insights.sbomify.com/CVE-2019-14513/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2019-14512](https://insights.sbomify.com/CVE-2019-14512/): Cross-site scripting in limesurvey:limesurvey (medium 6.1)
- [CVE-2019-14511](https://insights.sbomify.com/CVE-2019-14511/): Missing authorization in sphinxsearch:sphinx (high 7.5)
- [CVE-2019-14510](https://insights.sbomify.com/CVE-2019-14510/): Privilege escalation in kaseya:vsa (medium 6.7)
- [CVE-2019-14498](https://insights.sbomify.com/CVE-2019-14498/): Denial of service in debian:debian linux (high 7.8)
- [CVE-2019-14497](https://insights.sbomify.com/CVE-2019-14497/): Memory corruption in canonical:ubuntu linux (high 7.8)
- [CVE-2019-14496](https://insights.sbomify.com/CVE-2019-14496/): Memory corruption in canonical:ubuntu linux (high 7.8)
- [CVE-2019-14495](https://insights.sbomify.com/CVE-2019-14495/): Memory corruption in 3proxy:3proxy (medium 5.8)
- [CVE-2019-14494](https://insights.sbomify.com/CVE-2019-14494/): Denial of service in canonical:ubuntu linux (high 7.5)
- [CVE-2019-14493](https://insights.sbomify.com/CVE-2019-14493/): NULL Pointer Dereference in OpenCV. (high 7.5)
- [CVE-2019-14492](https://insights.sbomify.com/CVE-2019-14492/): Out-of-bounds Read and Out-of-bounds Write in OpenCV (high 7.5)
- [CVE-2019-14491](https://insights.sbomify.com/CVE-2019-14491/): Out-of-bounds Read in OpenCV (high 8.2)
- [CVE-2019-1449](https://insights.sbomify.com/CVE-2019-1449/): Security feature bypass in Microsoft Office (critical 9.8)
- [CVE-2019-14486](https://insights.sbomify.com/CVE-2019-14486/): Memory corruption in gnucobol project:gnucobol (high 7.8)
- [CVE-2019-14483](https://insights.sbomify.com/CVE-2019-14483/): Information disclosure in adremsoft:netcrunch (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/114/