# Vulnerabilities published in 2019 - [CVE-2019-1400](https://insights.sbomify.com/CVE-2019-1400/): Information disclosure in Microsoft Office (medium 5.5) - [CVE-2019-13999](https://insights.sbomify.com/CVE-2019-13999/): Integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (high 7.8) - [CVE-2019-13998](https://insights.sbomify.com/CVE-2019-13998/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (high 7.8) - [CVE-2019-13995](https://insights.sbomify.com/CVE-2019-13995/): Integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (high 7.8) - [CVE-2019-13994](https://insights.sbomify.com/CVE-2019-13994/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (high 7.8) - [CVE-2019-13992](https://insights.sbomify.com/CVE-2019-13992/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking (high 7.8) - [CVE-2019-13991](https://insights.sbomify.com/CVE-2019-13991/): Other in arduino:arduino firmware (medium 6.5) - [CVE-2019-13990](https://insights.sbomify.com/CVE-2019-13990/): XML external entity injection in Terracotta Quartz Scheduler (critical 9.8) - [CVE-2019-1399](https://insights.sbomify.com/CVE-2019-1399/): Denial of service in Windows (medium 6.2) - [CVE-2019-13989](https://insights.sbomify.com/CVE-2019-13989/): Memory corruption in dpic project:dpic (high 7.8) - [CVE-2019-13988](https://insights.sbomify.com/CVE-2019-13988/): Information disclosure in sierrawireless:mgos (medium 6.5) - [CVE-2019-13984](https://insights.sbomify.com/CVE-2019-13984/): File upload in rangerstudio:directus 7 api (high 8.8) - [CVE-2019-13983](https://insights.sbomify.com/CVE-2019-13983/): Security feature bypass in rangerstudio:directus 7 api (critical 9.8) - [CVE-2019-13982](https://insights.sbomify.com/CVE-2019-13982/): Cross-site scripting in rangerstudio:directus 7 (medium 5.3) - [CVE-2019-13981](https://insights.sbomify.com/CVE-2019-13981/): Missing authorization in rangerstudio:directus 7 api (medium 5.3) - [CVE-2019-13980](https://insights.sbomify.com/CVE-2019-13980/): File upload in rangerstudio:directus 7 api (high 8.8) - [CVE-2019-1398](https://insights.sbomify.com/CVE-2019-1398/): Code injection in Windows (high 8.4) - [CVE-2019-13979](https://insights.sbomify.com/CVE-2019-13979/): File upload in rangerstudio:directus 7 api (high 8.8) - [CVE-2019-13978](https://insights.sbomify.com/CVE-2019-13978/): SQL injection in ovidentia:ovidentia (high 8.8) - [CVE-2019-13977](https://insights.sbomify.com/CVE-2019-13977/): Cross-site scripting in ovidentia:ovidentia (medium 5.4) - [CVE-2019-13976](https://insights.sbomify.com/CVE-2019-13976/): File upload in egain:chat (critical 9.8) - [CVE-2019-13975](https://insights.sbomify.com/CVE-2019-13975/): eGain Chat 15.0.3 allows HTML Injection. (medium 6.1) - [CVE-2019-13974](https://insights.sbomify.com/CVE-2019-13974/): Cross-site request forgery in layerbb:layerbb (high 8.8) - [CVE-2019-13973](https://insights.sbomify.com/CVE-2019-13973/): File upload in layerbb:layerbb (critical 9.8) - [CVE-2019-13972](https://insights.sbomify.com/CVE-2019-13972/): Cross-site scripting in layerbb:layerbb (medium 6.1) - [CVE-2019-13971](https://insights.sbomify.com/CVE-2019-13971/): Cross-site scripting in otcms:otcms (medium 6.1) - [CVE-2019-13970](https://insights.sbomify.com/CVE-2019-13970/): AntSword RCE and XSS via code injection (medium 6.1) - [CVE-2019-1397](https://insights.sbomify.com/CVE-2019-1397/): Code injection in Windows (high 8.4) - [CVE-2019-13969](https://insights.sbomify.com/CVE-2019-13969/): SQL injection in metinfo:metinfo (high 8.8) - [CVE-2019-13967](https://insights.sbomify.com/CVE-2019-13967/): Denial of service in combodo:itop (high 7.5) - [CVE-2019-13966](https://insights.sbomify.com/CVE-2019-13966/): Cross-site scripting in combodo:itop (medium 6.1) - [CVE-2019-13965](https://insights.sbomify.com/CVE-2019-13965/): Cross-site scripting in combodo:itop (medium 6.1) - [CVE-2019-13962](https://insights.sbomify.com/CVE-2019-13962/): Memory corruption in canonical:ubuntu linux (critical 9.8) - [CVE-2019-13961](https://insights.sbomify.com/CVE-2019-13961/): Cross-site request forgery in flatcore:flatcore (high 8.8) - [CVE-2019-13960](https://insights.sbomify.com/CVE-2019-13960/): Denial of service in libjpeg-turbo:libjpeg-turbo (medium 5.5) - [CVE-2019-1396](https://insights.sbomify.com/CVE-2019-1396/): Memory corruption in Windows (high 7.8) - [CVE-2019-13959](https://insights.sbomify.com/CVE-2019-13959/): Null dereference in axiosys:bento4 (medium 6.5) - [CVE-2019-13957](https://insights.sbomify.com/CVE-2019-13957/): SQL injection in umbraco:umbraco (critical 9.8) - [CVE-2019-13956](https://insights.sbomify.com/CVE-2019-13956/): Code injection in codersclub:discuz\!ml (critical 9.8) - [CVE-2019-13955](https://insights.sbomify.com/CVE-2019-13955/): Denial of service in mikrotik:routeros (medium 6.5) - [CVE-2019-13954](https://insights.sbomify.com/CVE-2019-13954/): Denial of service in mikrotik:routeros (medium 6.5) - [CVE-2019-13953](https://insights.sbomify.com/CVE-2019-13953/): Auth bypass in xiaoyi:yi m1 mirrorless camera firmware (high 8.8) - [CVE-2019-13952](https://insights.sbomify.com/CVE-2019-13952/): Memory corruption in gdnsd:gdnsd (critical 9.8) - [CVE-2019-13951](https://insights.sbomify.com/CVE-2019-13951/): Memory corruption in gdnsd:gdnsd (critical 9.8) - [CVE-2019-13950](https://insights.sbomify.com/CVE-2019-13950/): Cross-site scripting in syguestbook a5 project:syguestbook a5 (medium 5.4) - [CVE-2019-1395](https://insights.sbomify.com/CVE-2019-1395/): Memory corruption in Windows (high 7.8) - [CVE-2019-13949](https://insights.sbomify.com/CVE-2019-13949/): Cross-site request forgery in syguestbook a5 project:syguestbook a5 (high 8.8) - [CVE-2019-13948](https://insights.sbomify.com/CVE-2019-13948/): Cross-site scripting in syguestbook a5 project:syguestbook a5 (medium 5.4) - [CVE-2019-13947](https://insights.sbomify.com/CVE-2019-13947/): Information disclosure in Control Center Server (CCS) (medium 4.9) - [CVE-2019-13946](https://insights.sbomify.com/CVE-2019-13946/): Denial of service in Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller (high 7.5) - [CVE-2019-13945](https://insights.sbomify.com/CVE-2019-13945/): Security feature bypass in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (medium 6.8) - [CVE-2019-13944](https://insights.sbomify.com/CVE-2019-13944/): Path traversal in EN100 Ethernet module DNP3 variant (medium 5.3) - [CVE-2019-13943](https://insights.sbomify.com/CVE-2019-13943/): Cross-site scripting in EN100 Ethernet module DNP3 variant (medium 6.1) - [CVE-2019-13942](https://insights.sbomify.com/CVE-2019-13942/): Memory corruption in EN100 Ethernet module DNP3 variant (high 7.5) - [CVE-2019-13941](https://insights.sbomify.com/CVE-2019-13941/): Information disclosure in OZW672 (high 7.5) - [CVE-2019-13940](https://insights.sbomify.com/CVE-2019-13940/): Denial of service in SIMATIC ET 200S IM151-8 PN/DP CPU (medium 5.3) - [CVE-2019-1394](https://insights.sbomify.com/CVE-2019-1394/): Memory corruption in Windows (high 7.8) - [CVE-2019-13939](https://insights.sbomify.com/CVE-2019-13939/): Other in APOGEE MEC/MBC/PXC (P2) (high 7.1) - [CVE-2019-13936](https://insights.sbomify.com/CVE-2019-13936/): Cross-site scripting in Polarion (low 3.5) - [CVE-2019-13935](https://insights.sbomify.com/CVE-2019-13935/): Cross-site scripting in Polarion (low 3.5) - [CVE-2019-13934](https://insights.sbomify.com/CVE-2019-13934/): Cross-site scripting in Polarion (low 3.5) - [CVE-2019-13933](https://insights.sbomify.com/CVE-2019-13933/): Auth bypass in SCALANCE X204RNA (HSR) (high 8.6) - [CVE-2019-13932](https://insights.sbomify.com/CVE-2019-13932/): Other in XHQ (critical 9.1) - [CVE-2019-13931](https://insights.sbomify.com/CVE-2019-13931/): Cross-site scripting in XHQ (medium 5.4) - [CVE-2019-13930](https://insights.sbomify.com/CVE-2019-13930/): Cross-site request forgery in XHQ (high 8.1) - [CVE-2019-1393](https://insights.sbomify.com/CVE-2019-1393/): Memory corruption in Windows (high 7.8) - [CVE-2019-13929](https://insights.sbomify.com/CVE-2019-13929/): Weak cryptography in SIMATIC IT UADM (medium 6.5) - [CVE-2019-13927](https://insights.sbomify.com/CVE-2019-13927/): Denial of service in Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D with Desigo PX Web modules PXA40-W0, PXA40-W1, PXA40-W2 (medium 5.3) - [CVE-2019-13926](https://insights.sbomify.com/CVE-2019-13926/): Denial of service in SCALANCE S602 (high 7.5) - [CVE-2019-13925](https://insights.sbomify.com/CVE-2019-13925/): Denial of service in SCALANCE S602 (high 7.5) - [CVE-2019-13924](https://insights.sbomify.com/CVE-2019-13924/): Other in SCALANCE S602 (medium 5.4) - [CVE-2019-13923](https://insights.sbomify.com/CVE-2019-13923/): Cross-site scripting in IE/WSN-PA Link WirelessHART Gateway (critical 9.6) - [CVE-2019-13922](https://insights.sbomify.com/CVE-2019-13922/): Information disclosure in SINEMA Remote Connect Server (low 2.7) - [CVE-2019-13921](https://insights.sbomify.com/CVE-2019-13921/): Denial of service in SIMATIC WinAC RTX (F) 2010 (high 7.5) - [CVE-2019-13920](https://insights.sbomify.com/CVE-2019-13920/): Cross-site request forgery in SINEMA Remote Connect Server (medium 4.3) - [CVE-2019-1392](https://insights.sbomify.com/CVE-2019-1392/): Privilege escalation in Windows (high 7.8) - [CVE-2019-13919](https://insights.sbomify.com/CVE-2019-13919/): Missing authorization in SINEMA Remote Connect Server (medium 4.3) - [CVE-2019-13918](https://insights.sbomify.com/CVE-2019-13918/): Auth bypass in SINEMA Remote Connect Server (critical 9.8) - [CVE-2019-13917](https://insights.sbomify.com/CVE-2019-13917/): Command injection in debian:debian linux (critical 9.8) - [CVE-2019-13916](https://insights.sbomify.com/CVE-2019-13916/): Memory corruption in cypress:wiced studio (high 8.8) - [CVE-2019-13915](https://insights.sbomify.com/CVE-2019-13915/): b3log Wide unauthenticated file access (high 7.5) - [CVE-2019-1391](https://insights.sbomify.com/CVE-2019-1391/): Denial of service in Windows (medium 5.5) - [CVE-2019-1390](https://insights.sbomify.com/CVE-2019-1390/): Memory corruption in Internet Explorer 10 (high 7.5) - [CVE-2019-1389](https://insights.sbomify.com/CVE-2019-1389/): Code injection in Windows (high 8.4) - [CVE-2019-1388](https://insights.sbomify.com/CVE-2019-1388/): Microsoft Windows Certificate Dialog Privilege Escalation (high 7.8, exploited in the wild) - [CVE-2019-1387](https://insights.sbomify.com/CVE-2019-1387/): Code injection in Git (high 8.8) - [CVE-2019-1385](https://insights.sbomify.com/CVE-2019-1385/): Microsoft Windows AppX Deployment Extensions Privilege Escalation (high 7.8, exploited in the wild) - [CVE-2019-1384](https://insights.sbomify.com/CVE-2019-1384/): Security feature bypass in Windows (critical 9.9) - [CVE-2019-1383](https://insights.sbomify.com/CVE-2019-1383/): Privilege escalation in Windows (high 7.8) - [CVE-2019-1382](https://insights.sbomify.com/CVE-2019-1382/): Privilege escalation in Windows (medium 5.5) - [CVE-2019-1381](https://insights.sbomify.com/CVE-2019-1381/): Information disclosure in Windows (medium 5.5) - [CVE-2019-1380](https://insights.sbomify.com/CVE-2019-1380/): Race condition in Windows (high 7.8) - [CVE-2019-1379](https://insights.sbomify.com/CVE-2019-1379/): Privilege escalation in Windows (high 7.8) - [CVE-2019-1378](https://insights.sbomify.com/CVE-2019-1378/): Privilege escalation in Windows Update Assistant (high 7.8) - [CVE-2019-13768](https://insights.sbomify.com/CVE-2019-13768/): Use after free in Chrome (high 7.4) - [CVE-2019-13767](https://insights.sbomify.com/CVE-2019-13767/): Use after free in Chrome (high 8.8) - [CVE-2019-13766](https://insights.sbomify.com/CVE-2019-13766/): Use after free in Chrome (medium 6.5) - [CVE-2019-13765](https://insights.sbomify.com/CVE-2019-13765/): Use after free in Chrome (medium 6.5) - [CVE-2019-13764](https://insights.sbomify.com/CVE-2019-13764/): Memory corruption in Chrome (high 8.8) - [CVE-2019-13763](https://insights.sbomify.com/CVE-2019-13763/): Security feature bypass in Chrome (medium 4.3) --- From sbomify Insights: https://insights.sbomify.com/years/2019/page/119/