# Vulnerabilities published in 2019


- [CVE-2019-13668](https://insights.sbomify.com/CVE-2019-13668/): Security feature bypass in Chrome (high 7.4)
- [CVE-2019-13667](https://insights.sbomify.com/CVE-2019-13667/): Other in Chrome (medium 4.3)
- [CVE-2019-13666](https://insights.sbomify.com/CVE-2019-13666/): Information disclosure in Chrome (high 7.4)
- [CVE-2019-13665](https://insights.sbomify.com/CVE-2019-13665/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2019-13664](https://insights.sbomify.com/CVE-2019-13664/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2019-13663](https://insights.sbomify.com/CVE-2019-13663/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2019-13662](https://insights.sbomify.com/CVE-2019-13662/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2019-13661](https://insights.sbomify.com/CVE-2019-13661/): Other in Chrome (medium 4.3)
- [CVE-2019-13660](https://insights.sbomify.com/CVE-2019-13660/): Other in Chrome (medium 5.3)
- [CVE-2019-1366](https://insights.sbomify.com/CVE-2019-1366/): Out-of-bounds write (high 7.5)
- [CVE-2019-13659](https://insights.sbomify.com/CVE-2019-13659/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2019-13658](https://insights.sbomify.com/CVE-2019-13658/): Hardcoded credentials in CA Network Flow Analysis (critical 9.8)
- [CVE-2019-13657](https://insights.sbomify.com/CVE-2019-13657/): Hardcoded credentials in CA Performance Management (critical 9.8)
- [CVE-2019-13656](https://insights.sbomify.com/CVE-2019-13656/): Missing authorization in Client Automation (critical 9.8)
- [CVE-2019-13655](https://insights.sbomify.com/CVE-2019-13655/): Denial of service in imgix:imgix (medium 6.5)
- [CVE-2019-13653](https://insights.sbomify.com/CVE-2019-13653/): Command injection in tp-link:m7350 firmware (critical 9.8)
- [CVE-2019-13652](https://insights.sbomify.com/CVE-2019-13652/): Command injection in tp-link:m7350 firmware (critical 9.8)
- [CVE-2019-13651](https://insights.sbomify.com/CVE-2019-13651/): Command injection in tp-link:m7350 firmware (critical 9.8)
- [CVE-2019-13650](https://insights.sbomify.com/CVE-2019-13650/): Command injection in tp-link:m7350 firmware (critical 9.8)
- [CVE-2019-1365](https://insights.sbomify.com/CVE-2019-1365/): Memory corruption in Windows (critical 9.9)
- [CVE-2019-13649](https://insights.sbomify.com/CVE-2019-13649/): Command injection in tp-link:m7350 firmware (critical 9.8)
- [CVE-2019-13648](https://insights.sbomify.com/CVE-2019-13648/): Denial of service in linux:linux kernel (medium 5.5)
- [CVE-2019-13647](https://insights.sbomify.com/CVE-2019-13647/): Firefly III vulnerable to image-based stored XSS (medium 5.4)
- [CVE-2019-13646](https://insights.sbomify.com/CVE-2019-13646/): Firefly III vulnerable to reflected cross-site scripting (medium 5.4)
- [CVE-2019-13645](https://insights.sbomify.com/CVE-2019-13645/): Firefly III vulnerable to stored XSS (medium 5.4)
- [CVE-2019-13644](https://insights.sbomify.com/CVE-2019-13644/): Firefly III vulnerable to stored XSS (medium 5.4)
- [CVE-2019-13643](https://insights.sbomify.com/CVE-2019-13643/): Cross-site scripting in espocrm:espocrm (medium 6.1)
- [CVE-2019-13640](https://insights.sbomify.com/CVE-2019-13640/): Command injection in qbittorrent:qbittorrent (critical 9.8)
- [CVE-2019-1364](https://insights.sbomify.com/CVE-2019-1364/): Privilege escalation in Windows (high 7.8)
- [CVE-2019-13638](https://insights.sbomify.com/CVE-2019-13638/): Command injection in debian:debian linux (high 7.8)
- [CVE-2019-13637](https://insights.sbomify.com/CVE-2019-13637/): Code injection in logmeininc:join.me (high 8.8)
- [CVE-2019-13636](https://insights.sbomify.com/CVE-2019-13636/): Path traversal in gnu:patch (medium 5.9)
- [CVE-2019-13635](https://insights.sbomify.com/CVE-2019-13635/): Path traversal in wpfastestcache:wp fastest cache (critical 9.1)
- [CVE-2019-13633](https://insights.sbomify.com/CVE-2019-13633/): Cross-site scripting in blinger:blinger (medium 6.1)
- [CVE-2019-13631](https://insights.sbomify.com/CVE-2019-13631/): Memory corruption in linux:linux kernel (medium 6.8)
- [CVE-2019-1363](https://insights.sbomify.com/CVE-2019-1363/): Information disclosure in Windows (medium 5.5)
- [CVE-2019-13629](https://insights.sbomify.com/CVE-2019-13629/): Weak cryptography in matrixssl:matrixssl (medium 5.9)
- [CVE-2019-13628](https://insights.sbomify.com/CVE-2019-13628/): wolfCrypt leaks cryptographic information via timing side channel (medium 4.7)
- [CVE-2019-13627](https://insights.sbomify.com/CVE-2019-13627/): Weak cryptography in canonical:ubuntu linux (medium 6.3)
- [CVE-2019-13626](https://insights.sbomify.com/CVE-2019-13626/): Integer overflow in debian:debian linux (medium 6.5)
- [CVE-2019-13625](https://insights.sbomify.com/CVE-2019-13625/): XML external entity in nsa:ghidra (critical 9.1)
- [CVE-2019-13624](https://insights.sbomify.com/CVE-2019-13624/): Command injection in onosproject:onos (critical 9.8)
- [CVE-2019-13623](https://insights.sbomify.com/CVE-2019-13623/): Path traversal in nsa:ghidra (high 7.8)
- [CVE-2019-1362](https://insights.sbomify.com/CVE-2019-1362/): Privilege escalation in Windows (high 7.8)
- [CVE-2019-13619](https://insights.sbomify.com/CVE-2019-13619/): Memory corruption in canonical:ubuntu linux (high 7.5)
- [CVE-2019-13618](https://insights.sbomify.com/CVE-2019-13618/): Memory corruption in gpac:gpac (high 7.5)
- [CVE-2019-13617](https://insights.sbomify.com/CVE-2019-13617/): Memory corruption in f5:njs (medium 6.5)
- [CVE-2019-13616](https://insights.sbomify.com/CVE-2019-13616/): Memory corruption in canonical:ubuntu linux (high 8.1)
- [CVE-2019-13615](https://insights.sbomify.com/CVE-2019-13615/): Memory corruption in videolan:vlc media player (medium 5.5)
- [CVE-2019-13614](https://insights.sbomify.com/CVE-2019-13614/): Memory corruption in tp-link:archer c1200 firmware (critical 9.8)
- [CVE-2019-13613](https://insights.sbomify.com/CVE-2019-13613/): Memory corruption in tp-link:archer c1200 firmware (critical 9.8)
- [CVE-2019-13612](https://insights.sbomify.com/CVE-2019-13612/): Security feature bypass in altn:mdaemon email server (high 7.5)
- [CVE-2019-13611](https://insights.sbomify.com/CVE-2019-13611/): python-engineio vulnerable to Cross-Site Request Forgery (CSRF) (high 8.8)
- [CVE-2019-1361](https://insights.sbomify.com/CVE-2019-1361/): Information disclosure in Windows (medium 5.5)
- [CVE-2019-13608](https://insights.sbomify.com/CVE-2019-13608/): Citrix StoreFront Server XML External Entity (XXE) Processing (high 7.5, exploited in the wild)
- [CVE-2019-13607](https://insights.sbomify.com/CVE-2019-13607/): Cross-site scripting in opera:mini (medium 6.1)
- [CVE-2019-13605](https://insights.sbomify.com/CVE-2019-13605/): Auth bypass in control-webpanel:webpanel (high 8.8)
- [CVE-2019-13604](https://insights.sbomify.com/CVE-2019-13604/): Weak cryptography in assaabloy:hid digitalpersona 4500 firmware (medium 5.9)
- [CVE-2019-13603](https://insights.sbomify.com/CVE-2019-13603/): Weak cryptography in hidglobal:digital persona u.are.u 4500 driver firmware (medium 5.9)
- [CVE-2019-13602](https://insights.sbomify.com/CVE-2019-13602/): Integer overflow in canonical:ubuntu linux (high 7.8)
- [CVE-2019-13599](https://insights.sbomify.com/CVE-2019-13599/): Information disclosure in control-webpanel:webpanel (medium 5.3)
- [CVE-2019-13598](https://insights.sbomify.com/CVE-2019-13598/): Command injection in getvera:vera edge firmware (critical 9.8)
- [CVE-2019-13597](https://insights.sbomify.com/CVE-2019-13597/): Command injection in sahipro:sahi pro (critical 9.8)
- [CVE-2019-13594](https://insights.sbomify.com/CVE-2019-13594/): Mirumee Saleor CSRF Protection Disabled (high 8.8)
- [CVE-2019-13590](https://insights.sbomify.com/CVE-2019-13590/): Integer overflow in sound exchange project:sound exchange (medium 5.5)
- [CVE-2019-1359](https://insights.sbomify.com/CVE-2019-1359/): Memory corruption in Windows (high 7.8)
- [CVE-2019-13589](https://insights.sbomify.com/CVE-2019-13589/): paranoid2 gem Code backdoor (critical 9.8)
- [CVE-2019-13588](https://insights.sbomify.com/CVE-2019-13588/): Cross-site scripting in wikindx project:wikindx (medium 6.1)
- [CVE-2019-13585](https://insights.sbomify.com/CVE-2019-13585/): Memory corruption in fanucamerica:robotics virtual robot controller (critical 9.8)
- [CVE-2019-13584](https://insights.sbomify.com/CVE-2019-13584/): Path traversal in fanucamerica:robotics virtual robot controller (medium 5.3)
- [CVE-2019-13582](https://insights.sbomify.com/CVE-2019-13582/): Memory corruption in marvell:88w8688 firmware (critical 9.8)
- [CVE-2019-13581](https://insights.sbomify.com/CVE-2019-13581/): Memory corruption in marvell:88w8688 firmware (critical 9.8)
- [CVE-2019-1358](https://insights.sbomify.com/CVE-2019-1358/): Memory corruption in Windows (high 7.8)
- [CVE-2019-13578](https://insights.sbomify.com/CVE-2019-13578/): SQL injection in givewp:givewp (critical 9.8)
- [CVE-2019-13577](https://insights.sbomify.com/CVE-2019-13577/): Memory corruption in computerlab:maple computer wbt snmp administrator (critical 9.8)
- [CVE-2019-13575](https://insights.sbomify.com/CVE-2019-13575/): SQL injection in wpeverest:everest forms (critical 9.8)
- [CVE-2019-13574](https://insights.sbomify.com/CVE-2019-13574/): OS Command Injection in MiniMagick (high 7.8)
- [CVE-2019-13573](https://insights.sbomify.com/CVE-2019-13573/): SQL injection in foliovision:fv flowplayer video player (critical 9.8)
- [CVE-2019-13572](https://insights.sbomify.com/CVE-2019-13572/): SQL injection in adenion:blog2social (critical 9.8)
- [CVE-2019-13571](https://insights.sbomify.com/CVE-2019-13571/): SQL injection in vsourz:advanced cf7 db (critical 9.8)
- [CVE-2019-13570](https://insights.sbomify.com/CVE-2019-13570/): SQL injection in ajdg:adrotate (high 7.2)
- [CVE-2019-1357](https://insights.sbomify.com/CVE-2019-1357/): Security feature bypass in Internet Explorer 10 (medium 4.3)
- [CVE-2019-13569](https://insights.sbomify.com/CVE-2019-13569/): SQL injection in icegram:email subscribers \& newsletters (critical 9.8)
- [CVE-2019-13568](https://insights.sbomify.com/CVE-2019-13568/): Memory corruption in cimg:cimg (high 8.8)
- [CVE-2019-13567](https://insights.sbomify.com/CVE-2019-13567/): Command injection in zoom:zoom (high 8.8)
- [CVE-2019-13566](https://insights.sbomify.com/CVE-2019-13566/): Memory corruption in ros:ros-comm (critical 9.8)
- [CVE-2019-13565](https://insights.sbomify.com/CVE-2019-13565/): Auth bypass in apple:mac os x (high 7.5)
- [CVE-2019-13564](https://insights.sbomify.com/CVE-2019-13564/): Cross-site scripting in pingidentity:agentless integration kit (medium 6.1)
- [CVE-2019-13563](https://insights.sbomify.com/CVE-2019-13563/): Cross-site request forgery in dlink:dir-655 firmware (high 8.8)
- [CVE-2019-13562](https://insights.sbomify.com/CVE-2019-13562/): Cross-site scripting in dlink:dir-655 firmware (medium 6.1)
- [CVE-2019-13561](https://insights.sbomify.com/CVE-2019-13561/): Command injection in dlink:dir-655 firmware (critical 9.8)
- [CVE-2019-13560](https://insights.sbomify.com/CVE-2019-13560/): Security feature bypass in dlink:dir-655 firmware (critical 9.8)
- [CVE-2019-1356](https://insights.sbomify.com/CVE-2019-1356/): Information disclosure in Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems (medium 6.5)
- [CVE-2019-13559](https://insights.sbomify.com/CVE-2019-13559/): Hardcoded credentials in GE Mark VIe Controller (high 7.8)
- [CVE-2019-13558](https://insights.sbomify.com/CVE-2019-13558/): Code injection in WebAccess (critical 9.8)
- [CVE-2019-13557](https://insights.sbomify.com/CVE-2019-13557/): Information disclosure in Tasy EMR (medium 5.3)
- [CVE-2019-13556](https://insights.sbomify.com/CVE-2019-13556/): Memory corruption in WebAccess (high 8.8)
- [CVE-2019-13555](https://insights.sbomify.com/CVE-2019-13555/): Denial of service in Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 21081 and prior. MELSEC-L Series L02/06/26CPU, L26CPU-BT: serial number 21101 and prior, L02/06/26CPU-P, L26CPU-PBT: serial number 21101 and prior, and L02/06/26CPU-CM, L26CPU-BT-CM: serial number 21101 and prior. (medium 5.9)
- [CVE-2019-13554](https://insights.sbomify.com/CVE-2019-13554/): Hardcoded credentials in GE Mark VIe Controller (high 8.8)
- [CVE-2019-13553](https://insights.sbomify.com/CVE-2019-13553/): Hardcoded credentials in Rittal Chiller SK 3232-Series (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/121/