# Vulnerabilities published in 2019


- [CVE-2019-14369](https://insights.sbomify.com/CVE-2019-14369/): Memory corruption in debian:debian linux (medium 6.5)
- [CVE-2019-14368](https://insights.sbomify.com/CVE-2019-14368/): Memory corruption in exiv2:exiv2 (high 7.8)
- [CVE-2019-14367](https://insights.sbomify.com/CVE-2019-14367/): Hardcoded credentials in slack-chat project:slack-chat (high 7.5)
- [CVE-2019-14366](https://insights.sbomify.com/CVE-2019-14366/): Hardcoded credentials in slack:wp slacksync (high 7.5)
- [CVE-2019-14365](https://insights.sbomify.com/CVE-2019-14365/): Hardcoded credentials in intercom:intercom (high 7.5)
- [CVE-2019-14364](https://insights.sbomify.com/CVE-2019-14364/): Cross-site scripting in icegram:email subscribers \& newsletters (medium 6.1)
- [CVE-2019-14363](https://insights.sbomify.com/CVE-2019-14363/): Memory corruption in netgear:wndr3400v3 firmware (critical 9.8)
- [CVE-2019-14362](https://insights.sbomify.com/CVE-2019-14362/): Path traversal in openbravo:openbravo erp (medium 5.4)
- [CVE-2019-14360](https://insights.sbomify.com/CVE-2019-14360/): Information disclosure in hyundai-pay:kasse hk-1000 firmware (medium 4.6)
- [CVE-2019-1436](https://insights.sbomify.com/CVE-2019-1436/): Information disclosure in Windows (medium 5.5)
- [CVE-2019-14359](https://insights.sbomify.com/CVE-2019-14359/): Information disclosure in real-sec:bc vault firmware (low 2.4)
- [CVE-2019-14358](https://insights.sbomify.com/CVE-2019-14358/): Information disclosure in archos:safe-t (medium 4.6)
- [CVE-2019-14357](https://insights.sbomify.com/CVE-2019-14357/): Information disclosure in mooltipass:mooltipass mini firmware (low 2.4)
- [CVE-2019-14356](https://insights.sbomify.com/CVE-2019-14356/): Information disclosure in coinkite:coldcard mk1 firmware (medium 5.3)
- [CVE-2019-14355](https://insights.sbomify.com/CVE-2019-14355/): Information disclosure in shapeshift:keepkey firmware (low 2.4)
- [CVE-2019-14354](https://insights.sbomify.com/CVE-2019-14354/): Information disclosure in ledger:nano s firmware (low 2.4)
- [CVE-2019-14353](https://insights.sbomify.com/CVE-2019-14353/): Information disclosure in trezor:one firmware (medium 4.2)
- [CVE-2019-14352](https://insights.sbomify.com/CVE-2019-14352/): Code injection in joget:worfklow (high 7.8)
- [CVE-2019-14351](https://insights.sbomify.com/CVE-2019-14351/): Information disclosure in espocrm:espocrm (high 8.8)
- [CVE-2019-14350](https://insights.sbomify.com/CVE-2019-14350/): Cross-site scripting in espocrm:espocrm (medium 6.1)
- [CVE-2019-1435](https://insights.sbomify.com/CVE-2019-1435/): Privilege escalation in Windows (high 7.8)
- [CVE-2019-14349](https://insights.sbomify.com/CVE-2019-14349/): Cross-site scripting in espocrm:espocrm (medium 6.1)
- [CVE-2019-14348](https://insights.sbomify.com/CVE-2019-14348/): SQL injection in beardev:joomsport (critical 9.8)
- [CVE-2019-14347](https://insights.sbomify.com/CVE-2019-14347/): Privilege escalation in schben:adive (high 8.8)
- [CVE-2019-14346](https://insights.sbomify.com/CVE-2019-14346/): Cross-site request forgery in schben:adive (high 8.8)
- [CVE-2019-14345](https://insights.sbomify.com/CVE-2019-14345/): Privilege escalation in vocabularyserver:tematres (critical 9.8)
- [CVE-2019-14344](https://insights.sbomify.com/CVE-2019-14344/): Cross-site scripting in vocabularyserver:tematres (medium 6.1)
- [CVE-2019-14343](https://insights.sbomify.com/CVE-2019-14343/): Cross-site scripting in vocabularyserver:tematres (medium 5.4)
- [CVE-2019-1434](https://insights.sbomify.com/CVE-2019-1434/): Privilege escalation in Windows (high 7.8)
- [CVE-2019-14339](https://insights.sbomify.com/CVE-2019-14339/): Information disclosure in canon:print (medium 5.5)
- [CVE-2019-14338](https://insights.sbomify.com/CVE-2019-14338/): Cross-site scripting in dlink:6600-ap firmware (medium 6.1)
- [CVE-2019-14337](https://insights.sbomify.com/CVE-2019-14337/): Command injection in dlink:6600-ap firmware (medium 5.5)
- [CVE-2019-14336](https://insights.sbomify.com/CVE-2019-14336/): Information disclosure in dlink:6600-ap firmware (medium 5.5)
- [CVE-2019-14335](https://insights.sbomify.com/CVE-2019-14335/): Denial of service in dlink:6600-ap firmware (medium 5.5)
- [CVE-2019-14334](https://insights.sbomify.com/CVE-2019-14334/): Information disclosure in dlink:6600-ap firmware (medium 5.5)
- [CVE-2019-14333](https://insights.sbomify.com/CVE-2019-14333/): Denial of service in dlink:6600-ap firmware (medium 5.5)
- [CVE-2019-14332](https://insights.sbomify.com/CVE-2019-14332/): Weak cryptography in dlink:6600-ap firmware (high 7.8)
- [CVE-2019-14331](https://insights.sbomify.com/CVE-2019-14331/): Cross-site scripting in espocrm:espocrm (medium 6.1)
- [CVE-2019-14330](https://insights.sbomify.com/CVE-2019-14330/): Cross-site scripting in espocrm:espocrm (medium 6.1)
- [CVE-2019-1433](https://insights.sbomify.com/CVE-2019-1433/): Privilege escalation in Windows (high 7.8)
- [CVE-2019-14329](https://insights.sbomify.com/CVE-2019-14329/): Cross-site scripting in espocrm:espocrm (medium 6.1)
- [CVE-2019-14328](https://insights.sbomify.com/CVE-2019-14328/): Cross-site request forgery in simple-membership-plugin:simple membership (high 8.8)
- [CVE-2019-14327](https://insights.sbomify.com/CVE-2019-14327/): Cross-site request forgery in custom simple rss project:custom simple rss (medium 6.5)
- [CVE-2019-14326](https://insights.sbomify.com/CVE-2019-14326/): Misconfiguration in andyroid:andy os (high 7.8)
- [CVE-2019-14323](https://insights.sbomify.com/CVE-2019-14323/): Memory corruption in simple service discovery protocol responder project:simple service discovery protocol responder (high 7.5)
- [CVE-2019-14322](https://insights.sbomify.com/CVE-2019-14322/): Pallets Werkzeug vulnerable to Path Traversal (high 7.5)
- [CVE-2019-1432](https://insights.sbomify.com/CVE-2019-1432/): Information disclosure in Windows (medium 6.5)
- [CVE-2019-14319](https://insights.sbomify.com/CVE-2019-14319/): Information disclosure in tiktok:tiktok (medium 6.5)
- [CVE-2019-14318](https://insights.sbomify.com/CVE-2019-14318/): Weak cryptography in cryptopp:crypto\+\+ (medium 5.9)
- [CVE-2019-14317](https://insights.sbomify.com/CVE-2019-14317/): Weak cryptography in wolfssl:wolfssl (medium 5.3)
- [CVE-2019-14315](https://insights.sbomify.com/CVE-2019-14315/): SunHater KCFinder cross-site scripting (XSS) vulnerability in upload.php (medium 6.1)
- [CVE-2019-14314](https://insights.sbomify.com/CVE-2019-14314/): SQL injection in imagely:nextgen gallery (critical 9.8)
- [CVE-2019-14313](https://insights.sbomify.com/CVE-2019-14313/): SQL injection in 10web:photo gallery (critical 9.8)
- [CVE-2019-14312](https://insights.sbomify.com/CVE-2019-14312/): Path traversal in aptana:jaxer (medium 6.5)
- [CVE-2019-14310](https://insights.sbomify.com/CVE-2019-14310/): Memory corruption in ricoh:sp c250dn firmware (critical 9.8)
- [CVE-2019-14309](https://insights.sbomify.com/CVE-2019-14309/): Hardcoded credentials in ricoh:sp c250dn firmware (high 7.5)
- [CVE-2019-14308](https://insights.sbomify.com/CVE-2019-14308/): Memory corruption in ricoh:sp c250dn firmware (critical 9.8)
- [CVE-2019-14307](https://insights.sbomify.com/CVE-2019-14307/): Memory corruption in ricoh:sp c250dn firmware (high 8.8)
- [CVE-2019-14306](https://insights.sbomify.com/CVE-2019-14306/): Missing authorization in ricoh:m 2700 firmware (high 7.5)
- [CVE-2019-14305](https://insights.sbomify.com/CVE-2019-14305/): Memory corruption in ricoh:sp c250dn firmware (high 8.8)
- [CVE-2019-14304](https://insights.sbomify.com/CVE-2019-14304/): Ricoh SP C250DN 1.06 devices allow CSRF. (high 8.8)
- [CVE-2019-14303](https://insights.sbomify.com/CVE-2019-14303/): Denial of service in ricoh:sp c250dn firmware (high 7.5)
- [CVE-2019-14302](https://insights.sbomify.com/CVE-2019-14302/): Misconfiguration in ricoh:m 2700 firmware (medium 6.8)
- [CVE-2019-14301](https://insights.sbomify.com/CVE-2019-14301/): Missing authorization in ricoh:m 2700 firmware (high 7.5)
- [CVE-2019-14300](https://insights.sbomify.com/CVE-2019-14300/): Memory corruption in ricoh:sp c250dn firmware (critical 9.8)
- [CVE-2019-1430](https://insights.sbomify.com/CVE-2019-1430/): Memory corruption in Windows 10 Version 1903 for 32-bit Systems (high 7.8)
- [CVE-2019-14299](https://insights.sbomify.com/CVE-2019-14299/): Auth bypass in ricoh:sp c250dn firmware (critical 9.8)
- [CVE-2019-14298](https://insights.sbomify.com/CVE-2019-14298/): Cross-site scripting in veeam:one reporter (medium 5.4)
- [CVE-2019-14297](https://insights.sbomify.com/CVE-2019-14297/): Cross-site scripting in veeam:one reporter (medium 5.4)
- [CVE-2019-14296](https://insights.sbomify.com/CVE-2019-14296/): Memory corruption in upx:upx (high 7.8)
- [CVE-2019-14295](https://insights.sbomify.com/CVE-2019-14295/): Integer overflow in upx:upx (medium 5.5)
- [CVE-2019-14294](https://insights.sbomify.com/CVE-2019-14294/): Use after free in glyphandcog:xpdfreader (medium 5.5)
- [CVE-2019-14293](https://insights.sbomify.com/CVE-2019-14293/): Memory corruption in glyphandcog:xpdfreader (medium 5.5)
- [CVE-2019-14292](https://insights.sbomify.com/CVE-2019-14292/): Memory corruption in glyphandcog:xpdfreader (medium 5.5)
- [CVE-2019-14291](https://insights.sbomify.com/CVE-2019-14291/): Memory corruption in glyphandcog:xpdfreader (medium 5.5)
- [CVE-2019-14290](https://insights.sbomify.com/CVE-2019-14290/): Memory corruption in glyphandcog:xpdfreader (medium 5.5)
- [CVE-2019-1429](https://insights.sbomify.com/CVE-2019-1429/): Microsoft Internet Explorer Scripting Engine Memory Corruption (high 7.5, exploited in the wild)
- [CVE-2019-14289](https://insights.sbomify.com/CVE-2019-14289/): Integer overflow in glyphandcog:xpdfreader (medium 5.5)
- [CVE-2019-14288](https://insights.sbomify.com/CVE-2019-14288/): Integer overflow in glyphandcog:xpdfreader (high 7.8)
- [CVE-2019-14287](https://insights.sbomify.com/CVE-2019-14287/): Security feature bypass in canonical:ubuntu linux (high 8.8)
- [CVE-2019-14286](https://insights.sbomify.com/CVE-2019-14286/): Cross-site scripting in misp-project:misp (medium 6.1)
- [CVE-2019-14284](https://insights.sbomify.com/CVE-2019-14284/): Denial of service in linux:linux kernel (medium 6.2)
- [CVE-2019-14283](https://insights.sbomify.com/CVE-2019-14283/): Integer overflow in linux:linux kernel (medium 6.8)
- [CVE-2019-14282](https://insights.sbomify.com/CVE-2019-14282/): Code backdoor in simple_captcha2 (critical 9.8)
- [CVE-2019-14281](https://insights.sbomify.com/CVE-2019-14281/): datagrid contains code Injection backdoor (critical 9.8)
- [CVE-2019-14280](https://insights.sbomify.com/CVE-2019-14280/): Information disclosure in craftcms:craft cms (medium 5.3)
- [CVE-2019-1428](https://insights.sbomify.com/CVE-2019-1428/): Memory corruption in ChakraCore (high 7.5)
- [CVE-2019-14278](https://insights.sbomify.com/CVE-2019-14278/): Information disclosure in knowage-suite:knowage (medium 5.3)
- [CVE-2019-14277](https://insights.sbomify.com/CVE-2019-14277/): XML external entity in axway:securetransport (critical 9.8)
- [CVE-2019-14276](https://insights.sbomify.com/CVE-2019-14276/): XML external entity in xnat:xnat (medium 6.5)
- [CVE-2019-14275](https://insights.sbomify.com/CVE-2019-14275/): Memory corruption in debian:debian linux (medium 5.5)
- [CVE-2019-14274](https://insights.sbomify.com/CVE-2019-14274/): Memory corruption in mcpp project:mcpp (medium 5.5)
- [CVE-2019-14273](https://insights.sbomify.com/CVE-2019-14273/): Broken access control on files (medium 5.3)
- [CVE-2019-14272](https://insights.sbomify.com/CVE-2019-14272/): SilverStripe asset-admin Cross-site Scripting (XSS) (medium 5.4)
- [CVE-2019-14271](https://insights.sbomify.com/CVE-2019-14271/): Moby Docker cp broken with debian containers (critical 9.8)
- [CVE-2019-14270](https://insights.sbomify.com/CVE-2019-14270/): Security feature bypass in comodo:antivirus (high 7.1)
- [CVE-2019-1427](https://insights.sbomify.com/CVE-2019-1427/): Memory corruption in ChakraCore (high 7.5)
- [CVE-2019-14268](https://insights.sbomify.com/CVE-2019-14268/): Information disclosure in octopus:octopus deploy (medium 6.5)
- [CVE-2019-14267](https://insights.sbomify.com/CVE-2019-14267/): Memory corruption in fedoraproject:fedora (high 7.8)
- [CVE-2019-14266](https://insights.sbomify.com/CVE-2019-14266/): SQL injection in opensns:opensns (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/116/