# Vulnerabilities published in 2019


- [CVE-2019-14262](https://insights.sbomify.com/CVE-2019-14262/): Uncontrolled Resource Consumption in MetadataExtractor (high 7.5)
- [CVE-2019-14261](https://insights.sbomify.com/CVE-2019-14261/): Security feature bypass in abus:secvest wireless alarm system fuaa50000 firmware (high 7.5)
- [CVE-2019-14260](https://insights.sbomify.com/CVE-2019-14260/): Command injection in al-enterprise:8008 firmware (high 8.0)
- [CVE-2019-1426](https://insights.sbomify.com/CVE-2019-1426/): Memory corruption in ChakraCore (high 7.5)
- [CVE-2019-14259](https://insights.sbomify.com/CVE-2019-14259/): Command injection in polycom:obihai obi1022 firmware (high 8.0)
- [CVE-2019-14258](https://insights.sbomify.com/CVE-2019-14258/): XML external entity in zenoss:zenoss (high 7.5)
- [CVE-2019-14257](https://insights.sbomify.com/CVE-2019-14257/): Privilege escalation in zenoss:zenoss (high 7.8)
- [CVE-2019-14255](https://insights.sbomify.com/CVE-2019-14255/): Server-side request forgery in go-camo project:go-camo (critical 9.8)
- [CVE-2019-14254](https://insights.sbomify.com/CVE-2019-14254/): SQL injection in publisure:publisure (critical 9.8)
- [CVE-2019-14253](https://insights.sbomify.com/CVE-2019-14253/): Auth bypass in publisure:publisure (medium 6.5)
- [CVE-2019-14252](https://insights.sbomify.com/CVE-2019-14252/): File upload in publisure:publisure (high 7.2)
- [CVE-2019-14251](https://insights.sbomify.com/CVE-2019-14251/): Path traversal in temenos:t24 (high 7.5)
- [CVE-2019-14250](https://insights.sbomify.com/CVE-2019-14250/): Integer overflow in canonical:ubuntu linux (medium 5.5)
- [CVE-2019-1425](https://insights.sbomify.com/CVE-2019-1425/): Privilege escalation in Microsoft Visual Studio 2017 (medium 6.5)
- [CVE-2019-14249](https://insights.sbomify.com/CVE-2019-14249/): Denial of service in libdwarf project:libdwarf (medium 6.5)
- [CVE-2019-14248](https://insights.sbomify.com/CVE-2019-14248/): Null dereference in nasm:netwide assembler (medium 5.5)
- [CVE-2019-14247](https://insights.sbomify.com/CVE-2019-14247/): Memory corruption in mpg321 project:mpg321 (medium 5.5)
- [CVE-2019-14246](https://insights.sbomify.com/CVE-2019-14246/): Information disclosure in centos-webpanel:centos web panel (medium 6.5)
- [CVE-2019-14245](https://insights.sbomify.com/CVE-2019-14245/): Missing authorization in centos-webpanel:centos web panel (medium 6.5)
- [CVE-2019-14243](https://insights.sbomify.com/CVE-2019-14243/): mastercactapus proxyprotocol vulnerable to denial of service (high 7.5)
- [CVE-2019-14242](https://insights.sbomify.com/CVE-2019-14242/): Code injection in bitdefender:antivirus plus (medium 6.7)
- [CVE-2019-14241](https://insights.sbomify.com/CVE-2019-14241/): Denial of service in haproxy:haproxy (high 7.5)
- [CVE-2019-14240](https://insights.sbomify.com/CVE-2019-14240/): Cross-site request forgery in wcms:wcms (high 8.1)
- [CVE-2019-1424](https://insights.sbomify.com/CVE-2019-1424/): Security feature bypass in Windows (high 8.1)
- [CVE-2019-14239](https://insights.sbomify.com/CVE-2019-14239/): Security feature bypass in nxp:kinetis k8x firmware (medium 6.6)
- [CVE-2019-14238](https://insights.sbomify.com/CVE-2019-14238/): Security feature bypass in st:stm32f4 firmware (medium 6.6)
- [CVE-2019-14237](https://insights.sbomify.com/CVE-2019-14237/): Security feature bypass in nxp:kinetis k8x firmware (critical 9.8)
- [CVE-2019-14236](https://insights.sbomify.com/CVE-2019-14236/): Security feature bypass in st:stm32f4 firmware (critical 9.8)
- [CVE-2019-14235](https://insights.sbomify.com/CVE-2019-14235/): Uncontrolled Recursion in Django (high 7.5)
- [CVE-2019-14234](https://insights.sbomify.com/CVE-2019-14234/): SQL Injection in Django (critical 9.8)
- [CVE-2019-14233](https://insights.sbomify.com/CVE-2019-14233/): Django Denial-of-service in strip_tags() (high 7.5)
- [CVE-2019-14232](https://insights.sbomify.com/CVE-2019-14232/): Django Denial-of-service in django.utils.text.Truncator (high 7.5)
- [CVE-2019-14231](https://insights.sbomify.com/CVE-2019-14231/): SQL injection in onionbuzz:onionbuzz (critical 9.8)
- [CVE-2019-14230](https://insights.sbomify.com/CVE-2019-14230/): SQL injection in onionbuzz:onionbuzz (critical 9.8)
- [CVE-2019-1423](https://insights.sbomify.com/CVE-2019-1423/): Privilege escalation in Windows 10 Version 1903 for 32-bit Systems (high 7.8)
- [CVE-2019-14228](https://insights.sbomify.com/CVE-2019-14228/): Cross-site scripting in angry-frog:xavier (medium 6.1)
- [CVE-2019-14227](https://insights.sbomify.com/CVE-2019-14227/): Cross-site scripting in open-xchange:open-xchange appsuite (medium 6.1)
- [CVE-2019-14226](https://insights.sbomify.com/CVE-2019-14226/): Misconfiguration in open-xchange:open-xchange appsuite (high 8.1)
- [CVE-2019-14225](https://insights.sbomify.com/CVE-2019-14225/): Server-side request forgery in open-xchange:open-xchange appsuite (medium 5.4)
- [CVE-2019-14224](https://insights.sbomify.com/CVE-2019-14224/): Deserialization in alfresco:alfresco (high 7.2)
- [CVE-2019-14223](https://insights.sbomify.com/CVE-2019-14223/): Open redirect in alfresco:alfresco (medium 6.1)
- [CVE-2019-14222](https://insights.sbomify.com/CVE-2019-14222/): Hardcoded credentials in alfresco:alfresco (critical 9.8)
- [CVE-2019-14221](https://insights.sbomify.com/CVE-2019-14221/): Cross-site scripting in 1crm:1crm on-premise (medium 5.4)
- [CVE-2019-14220](https://insights.sbomify.com/CVE-2019-14220/): Privilege escalation in bluestacks:bluestacks (medium 6.5)
- [CVE-2019-1422](https://insights.sbomify.com/CVE-2019-1422/): Privilege escalation in Windows (high 7.8)
- [CVE-2019-14216](https://insights.sbomify.com/CVE-2019-14216/): Cross-site request forgery in wp svg icons project:wp svg icons (high 8.8)
- [CVE-2019-14215](https://insights.sbomify.com/CVE-2019-14215/): Memory corruption in foxitsoftware:phantompdf (high 7.5)
- [CVE-2019-14214](https://insights.sbomify.com/CVE-2019-14214/): Denial of service in foxitsoftware:phantompdf (high 7.5)
- [CVE-2019-14213](https://insights.sbomify.com/CVE-2019-14213/): Memory corruption in foxitsoftware:phantompdf (high 7.5)
- [CVE-2019-14212](https://insights.sbomify.com/CVE-2019-14212/): Null dereference in foxitsoftware:phantompdf (high 7.5)
- [CVE-2019-14211](https://insights.sbomify.com/CVE-2019-14211/): Null dereference in foxitsoftware:phantompdf (high 7.5)
- [CVE-2019-14210](https://insights.sbomify.com/CVE-2019-14210/): Memory corruption in foxitsoftware:phantompdf (high 7.5)
- [CVE-2019-14209](https://insights.sbomify.com/CVE-2019-14209/): Memory corruption in foxitsoftware:phantompdf (critical 9.8)
- [CVE-2019-14208](https://insights.sbomify.com/CVE-2019-14208/): Null dereference in foxitsoftware:phantompdf (high 7.5)
- [CVE-2019-14207](https://insights.sbomify.com/CVE-2019-14207/): Denial of service in foxitsoftware:phantompdf (high 7.5)
- [CVE-2019-14206](https://insights.sbomify.com/CVE-2019-14206/): Path traversal in nevma:adaptive images (high 7.5)
- [CVE-2019-14205](https://insights.sbomify.com/CVE-2019-14205/): Path traversal in nevma:adaptive images (high 7.5)
- [CVE-2019-14204](https://insights.sbomify.com/CVE-2019-14204/): Memory corruption in denx:u-boot (critical 9.8)
- [CVE-2019-14203](https://insights.sbomify.com/CVE-2019-14203/): Memory corruption in denx:u-boot (critical 9.8)
- [CVE-2019-14202](https://insights.sbomify.com/CVE-2019-14202/): Memory corruption in denx:u-boot (critical 9.8)
- [CVE-2019-14201](https://insights.sbomify.com/CVE-2019-14201/): Memory corruption in denx:u-boot (critical 9.8)
- [CVE-2019-14200](https://insights.sbomify.com/CVE-2019-14200/): Memory corruption in denx:u-boot (critical 9.8)
- [CVE-2019-1420](https://insights.sbomify.com/CVE-2019-1420/): Privilege escalation in Windows (high 7.8)
- [CVE-2019-14199](https://insights.sbomify.com/CVE-2019-14199/): Integer overflow in denx:u-boot (critical 9.8)
- [CVE-2019-14198](https://insights.sbomify.com/CVE-2019-14198/): Memory corruption in denx:u-boot (critical 9.8)
- [CVE-2019-14197](https://insights.sbomify.com/CVE-2019-14197/): Memory corruption in denx:u-boot (critical 9.1)
- [CVE-2019-14196](https://insights.sbomify.com/CVE-2019-14196/): Memory corruption in denx:u-boot (critical 9.8)
- [CVE-2019-14195](https://insights.sbomify.com/CVE-2019-14195/): Memory corruption in denx:u-boot (critical 9.8)
- [CVE-2019-14194](https://insights.sbomify.com/CVE-2019-14194/): Memory corruption in denx:u-boot (critical 9.8)
- [CVE-2019-14193](https://insights.sbomify.com/CVE-2019-14193/): Memory corruption in denx:u-boot (critical 9.8)
- [CVE-2019-14192](https://insights.sbomify.com/CVE-2019-14192/): Memory corruption in denx:u-boot (critical 9.8)
- [CVE-2019-1419](https://insights.sbomify.com/CVE-2019-1419/): Memory corruption in Windows (high 8.8)
- [CVE-2019-1418](https://insights.sbomify.com/CVE-2019-1418/): Information disclosure in Windows (low 3.3)
- [CVE-2019-1417](https://insights.sbomify.com/CVE-2019-1417/): Privilege escalation in Windows (high 7.8)
- [CVE-2019-1416](https://insights.sbomify.com/CVE-2019-1416/): Race condition in Windows (high 7.0)
- [CVE-2019-1415](https://insights.sbomify.com/CVE-2019-1415/): Privilege escalation in Windows (high 7.8)
- [CVE-2019-1414](https://insights.sbomify.com/CVE-2019-1414/): Privilege escalation in Visual Studio Code (high 7.8)
- [CVE-2019-14135](https://insights.sbomify.com/CVE-2019-14135/): Integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking (high 7.8)
- [CVE-2019-14134](https://insights.sbomify.com/CVE-2019-14134/): Memory corruption in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking (critical 9.8)
- [CVE-2019-14132](https://insights.sbomify.com/CVE-2019-14132/): Memory corruption in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile (critical 9.8)
- [CVE-2019-14131](https://insights.sbomify.com/CVE-2019-14131/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music (critical 9.8)
- [CVE-2019-14130](https://insights.sbomify.com/CVE-2019-14130/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking (high 7.8)
- [CVE-2019-1413](https://insights.sbomify.com/CVE-2019-1413/): Security feature bypass in Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems (medium 4.3)
- [CVE-2019-14127](https://insights.sbomify.com/CVE-2019-14127/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (critical 9.8)
- [CVE-2019-14124](https://insights.sbomify.com/CVE-2019-14124/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking (high 7.8)
- [CVE-2019-14123](https://insights.sbomify.com/CVE-2019-14123/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking (high 7.8)
- [CVE-2019-14122](https://insights.sbomify.com/CVE-2019-14122/): Memory corruption in Snapdragon Auto, Snapdragon Mobile (high 7.8)
- [CVE-2019-1412](https://insights.sbomify.com/CVE-2019-1412/): Information disclosure in Windows (medium 5.5)
- [CVE-2019-14119](https://insights.sbomify.com/CVE-2019-14119/): Race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking (high 7.0)
- [CVE-2019-14117](https://insights.sbomify.com/CVE-2019-14117/): Use after free in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.8)
- [CVE-2019-14116](https://insights.sbomify.com/CVE-2019-14116/): Privilege escalation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking (high 7.8)
- [CVE-2019-14115](https://insights.sbomify.com/CVE-2019-14115/): Information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (medium 5.5)
- [CVE-2019-14114](https://insights.sbomify.com/CVE-2019-14114/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking (critical 9.8)
- [CVE-2019-14113](https://insights.sbomify.com/CVE-2019-14113/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking (critical 9.8)
- [CVE-2019-14112](https://insights.sbomify.com/CVE-2019-14112/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking (critical 9.8)
- [CVE-2019-14111](https://insights.sbomify.com/CVE-2019-14111/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking (critical 9.8)
- [CVE-2019-14110](https://insights.sbomify.com/CVE-2019-14110/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking (critical 9.8)
- [CVE-2019-1411](https://insights.sbomify.com/CVE-2019-1411/): Information disclosure in Windows (medium 6.5)
- [CVE-2019-14105](https://insights.sbomify.com/CVE-2019-14105/): Memory corruption in Snapdragon Industrial IOT, Snapdragon Mobile (high 7.8)
- [CVE-2019-14104](https://insights.sbomify.com/CVE-2019-14104/): Memory corruption in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile (high 7.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/117/