# Vulnerabilities published in 2019


- [CVE-2019-14482](https://insights.sbomify.com/CVE-2019-14482/): Hardcoded credentials in adremsoft:netcrunch (critical 9.8)
- [CVE-2019-14481](https://insights.sbomify.com/CVE-2019-14481/): Cross-site request forgery in adremsoft:netcrunch (medium 5.4)
- [CVE-2019-14480](https://insights.sbomify.com/CVE-2019-14480/): Auth bypass in adremsoft:netcrunch (critical 9.8)
- [CVE-2019-1448](https://insights.sbomify.com/CVE-2019-1448/): Memory corruption in Microsoft Excel (high 7.8)
- [CVE-2019-14479](https://insights.sbomify.com/CVE-2019-14479/): Command injection in adremsoft:netcrunch (high 8.8)
- [CVE-2019-14478](https://insights.sbomify.com/CVE-2019-14478/): Cross-site scripting in adremsoft:netcrunch (medium 5.4)
- [CVE-2019-14477](https://insights.sbomify.com/CVE-2019-14477/): Weak cryptography in adremsoft:netcrunch (medium 5.5)
- [CVE-2019-14476](https://insights.sbomify.com/CVE-2019-14476/): Server-side request forgery in adremsoft:netcrunch (medium 6.5)
- [CVE-2019-14475](https://insights.sbomify.com/CVE-2019-14475/): Missing authorization in eq-3:ccu2 firmware (high 7.5)
- [CVE-2019-14474](https://insights.sbomify.com/CVE-2019-14474/): Denial of service in eq-3:ccu3 firmware (high 7.5)
- [CVE-2019-14473](https://insights.sbomify.com/CVE-2019-14473/): Missing authorization in eq-3:ccu2 firmware (high 8.8)
- [CVE-2019-14472](https://insights.sbomify.com/CVE-2019-14472/): Cross-site scripting in zurmo:zurmo (medium 6.1)
- [CVE-2019-14471](https://insights.sbomify.com/CVE-2019-14471/): Cross-site scripting in testlink:testlink (medium 6.1)
- [CVE-2019-14470](https://insights.sbomify.com/CVE-2019-14470/): Cosenary Instagram-PHP-API contains reflected XSS vulnerability (medium 6.1)
- [CVE-2019-1447](https://insights.sbomify.com/CVE-2019-1447/): Security feature bypass in Office Online Server (medium 5.4)
- [CVE-2019-14469](https://insights.sbomify.com/CVE-2019-14469/): Cross-site scripting in sonatype:nexus repository manager (medium 5.4)
- [CVE-2019-14468](https://insights.sbomify.com/CVE-2019-14468/): Memory corruption in gnucobol project:gnucobol (high 7.8)
- [CVE-2019-14467](https://insights.sbomify.com/CVE-2019-14467/): File upload in infoway:social photo gallery (high 7.8)
- [CVE-2019-14466](https://insights.sbomify.com/CVE-2019-14466/): Deserialization in debian:debian linux (medium 6.5)
- [CVE-2019-14465](https://insights.sbomify.com/CVE-2019-14465/): Memory corruption in schismtracker:schism tracker (high 7.8)
- [CVE-2019-14464](https://insights.sbomify.com/CVE-2019-14464/): Memory corruption in canonical:ubuntu linux (medium 5.5)
- [CVE-2019-14463](https://insights.sbomify.com/CVE-2019-14463/): Memory corruption in debian:debian linux (critical 9.1)
- [CVE-2019-14462](https://insights.sbomify.com/CVE-2019-14462/): Memory corruption in debian:debian linux (critical 9.1)
- [CVE-2019-1446](https://insights.sbomify.com/CVE-2019-1446/): Information disclosure in Excel Services on Microsoft SharePoint Server 2010 Service Pack 2 (medium 5.5)
- [CVE-2019-14459](https://insights.sbomify.com/CVE-2019-14459/): Integer overflow in debian:debian linux (high 7.5)
- [CVE-2019-14458](https://insights.sbomify.com/CVE-2019-14458/): Denial of service in vivotek:camera (high 7.5)
- [CVE-2019-14457](https://insights.sbomify.com/CVE-2019-14457/): Memory corruption in vivotek:camera (critical 9.8)
- [CVE-2019-14456](https://insights.sbomify.com/CVE-2019-14456/): Cross-site scripting in opengear:opengear (medium 5.4)
- [CVE-2019-14454](https://insights.sbomify.com/CVE-2019-14454/): Privilege escalation in salesagility:suitecrm (critical 9.8)
- [CVE-2019-14453](https://insights.sbomify.com/CVE-2019-14453/): Privilege escalation in comelitgroup:away from home (high 8.8)
- [CVE-2019-14452](https://insights.sbomify.com/CVE-2019-14452/): Path traversal in canonical:ubuntu linux (high 7.5)
- [CVE-2019-14451](https://insights.sbomify.com/CVE-2019-14451/): File upload in repetier-server:repetier-server (critical 9.8)
- [CVE-2019-14450](https://insights.sbomify.com/CVE-2019-14450/): Path traversal in repetier-server:repetier-server (critical 9.8)
- [CVE-2019-1445](https://insights.sbomify.com/CVE-2019-1445/): Security feature bypass in Office Online Server (medium 5.4)
- [CVE-2019-14449](https://insights.sbomify.com/CVE-2019-14449/): Cross-site scripting in cloudera:cloudera manager (medium 5.4)
- [CVE-2019-14444](https://insights.sbomify.com/CVE-2019-14444/): Integer overflow in canonical:ubuntu linux (medium 5.5)
- [CVE-2019-14443](https://insights.sbomify.com/CVE-2019-14443/): Denial of service in debian:debian linux (medium 6.5)
- [CVE-2019-14442](https://insights.sbomify.com/CVE-2019-14442/): Denial of service in debian:debian linux (medium 6.5)
- [CVE-2019-14441](https://insights.sbomify.com/CVE-2019-14441/): Memory corruption in libav:libav (medium 6.5)
- [CVE-2019-14439](https://insights.sbomify.com/CVE-2019-14439/): Deserialization of untrusted data in FasterXML jackson-databind (high 7.5)
- [CVE-2019-14438](https://insights.sbomify.com/CVE-2019-14438/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2019-14437](https://insights.sbomify.com/CVE-2019-14437/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2019-14433](https://insights.sbomify.com/CVE-2019-14433/): OpenStack Nova Server Resource Faults Leak External Exception Details (medium 6.5)
- [CVE-2019-14432](https://insights.sbomify.com/CVE-2019-14432/): Auth bypass in loom:loom (high 8.8)
- [CVE-2019-14431](https://insights.sbomify.com/CVE-2019-14431/): Memory corruption in matrixssl:matrixssl (critical 9.8)
- [CVE-2019-14430](https://insights.sbomify.com/CVE-2019-14430/): SQL injection in youphptube:youphptube (medium 5.3)
- [CVE-2019-1443](https://insights.sbomify.com/CVE-2019-1443/): Information disclosure in Microsoft SharePoint Enterprise Server (medium 6.5)
- [CVE-2019-14427](https://insights.sbomify.com/CVE-2019-14427/): Cross-site scripting in webstudio:ultimate loan manager (medium 6.1)
- [CVE-2019-14424](https://insights.sbomify.com/CVE-2019-14424/): Path traversal in eq-3:ccu2 firmware (medium 6.5)
- [CVE-2019-14423](https://insights.sbomify.com/CVE-2019-14423/): Command injection in eq-3:ccu2 firmware (high 8.8)
- [CVE-2019-14422](https://insights.sbomify.com/CVE-2019-14422/): Security feature bypass in tortoisesvn:tortoisesvn (high 8.8)
- [CVE-2019-1442](https://insights.sbomify.com/CVE-2019-1442/): Security feature bypass in Microsoft SharePoint Server (medium 5.5)
- [CVE-2019-14418](https://insights.sbomify.com/CVE-2019-14418/): Path traversal in veritas:resiliency platform (critical 9.1)
- [CVE-2019-14417](https://insights.sbomify.com/CVE-2019-14417/): Command injection in veritas:resiliency platform (high 7.2)
- [CVE-2019-14416](https://insights.sbomify.com/CVE-2019-14416/): Command injection in veritas:resiliency platform (high 7.2)
- [CVE-2019-14415](https://insights.sbomify.com/CVE-2019-14415/): Cross-site scripting in veritas:resiliency platform (medium 5.9)
- [CVE-2019-14414](https://insights.sbomify.com/CVE-2019-14414/): Other in cpanel:cpanel (low 3.3)
- [CVE-2019-14413](https://insights.sbomify.com/CVE-2019-14413/): Other in cpanel:cpanel (medium 4.3)
- [CVE-2019-14412](https://insights.sbomify.com/CVE-2019-14412/): Code injection in cpanel:cpanel (low 3.3)
- [CVE-2019-14411](https://insights.sbomify.com/CVE-2019-14411/): Missing authorization in cpanel:cpanel (medium 5.3)
- [CVE-2019-14410](https://insights.sbomify.com/CVE-2019-14410/): Memory corruption in cpanel:cpanel (low 3.3)
- [CVE-2019-1441](https://insights.sbomify.com/CVE-2019-1441/): Memory corruption in Windows (high 8.8)
- [CVE-2019-14409](https://insights.sbomify.com/CVE-2019-14409/): Path traversal in cpanel:cpanel (medium 5.5)
- [CVE-2019-14408](https://insights.sbomify.com/CVE-2019-14408/): Security feature bypass in cpanel:cpanel (medium 4.3)
- [CVE-2019-14407](https://insights.sbomify.com/CVE-2019-14407/): Information disclosure in cpanel:cpanel (low 2.7)
- [CVE-2019-14406](https://insights.sbomify.com/CVE-2019-14406/): Cross-site scripting in cpanel:cpanel (medium 6.1)
- [CVE-2019-14405](https://insights.sbomify.com/CVE-2019-14405/): Code injection in cpanel:cpanel (high 8.8)
- [CVE-2019-14404](https://insights.sbomify.com/CVE-2019-14404/): Information disclosure in cpanel:cpanel (medium 5.5)
- [CVE-2019-14403](https://insights.sbomify.com/CVE-2019-14403/): Open redirect in cpanel:cpanel (medium 4.3)
- [CVE-2019-14402](https://insights.sbomify.com/CVE-2019-14402/): Other in cpanel:cpanel (low 3.3)
- [CVE-2019-14401](https://insights.sbomify.com/CVE-2019-14401/): Code injection in cpanel:cpanel (high 8.8)
- [CVE-2019-14400](https://insights.sbomify.com/CVE-2019-14400/): Privilege escalation in cpanel:cpanel (high 7.8)
- [CVE-2019-1440](https://insights.sbomify.com/CVE-2019-1440/): Information disclosure in Windows (medium 5.5)
- [CVE-2019-14399](https://insights.sbomify.com/CVE-2019-14399/): Other in cpanel:cpanel (high 7.1)
- [CVE-2019-14398](https://insights.sbomify.com/CVE-2019-14398/): Code injection in cpanel:cpanel (high 8.8)
- [CVE-2019-14397](https://insights.sbomify.com/CVE-2019-14397/): Missing authorization in cpanel:cpanel (medium 5.3)
- [CVE-2019-14396](https://insights.sbomify.com/CVE-2019-14396/): Other in cpanel:cpanel (low 3.3)
- [CVE-2019-14395](https://insights.sbomify.com/CVE-2019-14395/): Misconfiguration in cpanel:cpanel (low 3.3)
- [CVE-2019-14394](https://insights.sbomify.com/CVE-2019-14394/): Privilege escalation in cpanel:cpanel (medium 5.5)
- [CVE-2019-14393](https://insights.sbomify.com/CVE-2019-14393/): Privilege escalation in cpanel:cpanel (medium 5.3)
- [CVE-2019-14392](https://insights.sbomify.com/CVE-2019-14392/): Code injection in cpanel:cpanel (high 8.8)
- [CVE-2019-14391](https://insights.sbomify.com/CVE-2019-14391/): Missing authorization in cpanel:cpanel (low 3.3)
- [CVE-2019-14390](https://insights.sbomify.com/CVE-2019-14390/): Cross-site scripting in cpanel:cpanel (medium 5.4)
- [CVE-2019-1439](https://insights.sbomify.com/CVE-2019-1439/): Information disclosure in Windows (medium 6.5)
- [CVE-2019-14389](https://insights.sbomify.com/CVE-2019-14389/): Information disclosure in cpanel:cpanel (high 7.8)
- [CVE-2019-14388](https://insights.sbomify.com/CVE-2019-14388/): Other in cpanel:cpanel (high 7.5)
- [CVE-2019-14387](https://insights.sbomify.com/CVE-2019-14387/): Cross-site scripting in cpanel:cpanel (medium 6.1)
- [CVE-2019-14386](https://insights.sbomify.com/CVE-2019-14386/): Cross-site scripting in cpanel:cpanel (medium 5.4)
- [CVE-2019-14383](https://insights.sbomify.com/CVE-2019-14383/): Denial of service in openmpt:libopenmpt (medium 6.5)
- [CVE-2019-14382](https://insights.sbomify.com/CVE-2019-14382/): Denial of service in openmpt:libopenmpt (medium 6.5)
- [CVE-2019-14381](https://insights.sbomify.com/CVE-2019-14381/): Null dereference in openmpt:libopenmpt (high 7.5)
- [CVE-2019-14380](https://insights.sbomify.com/CVE-2019-14380/): Memory corruption in debian:debian linux (medium 6.5)
- [CVE-2019-1438](https://insights.sbomify.com/CVE-2019-1438/): Privilege escalation in Windows (high 7.8)
- [CVE-2019-14379](https://insights.sbomify.com/CVE-2019-14379/): Deserialization of untrusted data in FasterXML jackson-databind (critical 9.8)
- [CVE-2019-14378](https://insights.sbomify.com/CVE-2019-14378/): Memory corruption in libslirp project:libslirp (high 8.8)
- [CVE-2019-14373](https://insights.sbomify.com/CVE-2019-14373/): Memory corruption in flif:flif (high 7.8)
- [CVE-2019-14372](https://insights.sbomify.com/CVE-2019-14372/): Denial of service in libav:libav (medium 6.5)
- [CVE-2019-14371](https://insights.sbomify.com/CVE-2019-14371/): Denial of service in libav:libav (medium 6.5)
- [CVE-2019-14370](https://insights.sbomify.com/CVE-2019-14370/): Memory corruption in debian:debian linux (medium 6.5)
- [CVE-2019-1437](https://insights.sbomify.com/CVE-2019-1437/): Privilege escalation in Windows (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/115/