# Vulnerabilities published in 2019


- [CVE-2019-13552](https://insights.sbomify.com/CVE-2019-13552/): Command injection in WebAccess (high 8.8)
- [CVE-2019-13551](https://insights.sbomify.com/CVE-2019-13551/): Path traversal in Advantech WISE-PaaS/RMM (critical 9.8)
- [CVE-2019-13550](https://insights.sbomify.com/CVE-2019-13550/): Missing authorization in WebAccess (critical 9.8)
- [CVE-2019-13549](https://insights.sbomify.com/CVE-2019-13549/): Auth bypass in Rittal Chiller SK 3232-Series (high 7.5)
- [CVE-2019-13548](https://insights.sbomify.com/CVE-2019-13548/): Memory corruption in CODESYS V3 web server (critical 9.8)
- [CVE-2019-13547](https://insights.sbomify.com/CVE-2019-13547/): Missing authorization in Advantech WISE-PaaS/RMM (critical 9.8)
- [CVE-2019-13546](https://insights.sbomify.com/CVE-2019-13546/): Security feature bypass in IntelliSpace Perinatal (medium 6.8)
- [CVE-2019-13545](https://insights.sbomify.com/CVE-2019-13545/): Memory corruption in Horner Automation Cscape (high 7.8)
- [CVE-2019-13544](https://insights.sbomify.com/CVE-2019-13544/): Memory corruption in TPEditor (high 7.8)
- [CVE-2019-13543](https://insights.sbomify.com/CVE-2019-13543/): Medtronic Valleylab FT10 and FX8 Use of Hard-coded Credentials (medium 5.8)
- [CVE-2019-13542](https://insights.sbomify.com/CVE-2019-13542/): Null dereference in 3S-Smart Software Solutions GmbH CODESYS V3 OPC UA Server (medium 6.5)
- [CVE-2019-13541](https://insights.sbomify.com/CVE-2019-13541/): Memory corruption in Horner Automation Cscape (high 7.8)
- [CVE-2019-13540](https://insights.sbomify.com/CVE-2019-13540/): Memory corruption in TPEditor (high 7.8)
- [CVE-2019-1354](https://insights.sbomify.com/CVE-2019-1354/): Code injection in Microsoft Visual Studio 2017 (high 8.8)
- [CVE-2019-13539](https://insights.sbomify.com/CVE-2019-13539/): Medtronic Valleylab FT10 and FX8 Reversible One-way Hash (high 7.0)
- [CVE-2019-13538](https://insights.sbomify.com/CVE-2019-13538/): Cross-site scripting in codesys:codesys (high 8.6)
- [CVE-2019-13537](https://insights.sbomify.com/CVE-2019-13537/): Memory corruption in Vijeo Citect and Citect SCADA (high 7.5)
- [CVE-2019-13536](https://insights.sbomify.com/CVE-2019-13536/): Memory corruption in TPEditor (high 7.8)
- [CVE-2019-13535](https://insights.sbomify.com/CVE-2019-13535/): Medtronic Valleylab FT10 and LS10 Protection Mechanism Failure (medium 4.6)
- [CVE-2019-13534](https://insights.sbomify.com/CVE-2019-13534/): Supply chain in Philips IntelliVue WLAN, portable patient monitors (high 7.2)
- [CVE-2019-13533](https://insights.sbomify.com/CVE-2019-13533/): Auth bypass in Omron PLC CJ and CS Series (high 8.1)
- [CVE-2019-13532](https://insights.sbomify.com/CVE-2019-13532/): Path traversal in CODESYS V3 web server (high 7.5)
- [CVE-2019-13531](https://insights.sbomify.com/CVE-2019-13531/): Medtronic Valleylab FT10 and LS10 Improper Authentication (medium 4.8)
- [CVE-2019-13530](https://insights.sbomify.com/CVE-2019-13530/): Hardcoded credentials in Philips IntelliVue WLAN, portable patient monitors (high 7.2)
- [CVE-2019-1353](https://insights.sbomify.com/CVE-2019-1353/): Security feature bypass in Git (critical 9.8)
- [CVE-2019-13529](https://insights.sbomify.com/CVE-2019-13529/): Cross-site request forgery in Sunny WebBox (high 8.8)
- [CVE-2019-13528](https://insights.sbomify.com/CVE-2019-13528/): Missing authorization in Niagara (medium 4.4)
- [CVE-2019-13527](https://insights.sbomify.com/CVE-2019-13527/): Memory corruption in Rockwell Automation Arena Simulation Software Cat. 9502-Ax, Versions 16.00.00 and earlier (high 7.8)
- [CVE-2019-13526](https://insights.sbomify.com/CVE-2019-13526/): Auth bypass in Datalogic AV7000 Linear barcode scanner (high 8.8)
- [CVE-2019-13525](https://insights.sbomify.com/CVE-2019-13525/): Missing authorization in Honeywell IP-AK2 (medium 5.3)
- [CVE-2019-13524](https://insights.sbomify.com/CVE-2019-13524/): Denial of service in GE PACSystems RX3i (high 7.5)
- [CVE-2019-13523](https://insights.sbomify.com/CVE-2019-13523/): Missing authorization in Performance IP Cameras (medium 5.3)
- [CVE-2019-13522](https://insights.sbomify.com/CVE-2019-13522/): Memory corruption in EZ PLC Editor (high 7.8)
- [CVE-2019-13521](https://insights.sbomify.com/CVE-2019-13521/): Information disclosure in Rockwell Automation Arena Simulation Software (high 7.8)
- [CVE-2019-13520](https://insights.sbomify.com/CVE-2019-13520/): Memory corruption in Alpha5 Smart Loader (high 7.8)
- [CVE-2019-1352](https://insights.sbomify.com/CVE-2019-1352/): Code injection in Microsoft Visual Studio 2017 (high 8.8)
- [CVE-2019-13519](https://insights.sbomify.com/CVE-2019-13519/): Information disclosure in Rockwell Automation Arena Simulation Software (high 7.8)
- [CVE-2019-13518](https://insights.sbomify.com/CVE-2019-13518/): Memory corruption in EZ Touch Editor (high 7.8)
- [CVE-2019-13517](https://insights.sbomify.com/CVE-2019-13517/): Auth bypass in BD (high 8.8)
- [CVE-2019-13516](https://insights.sbomify.com/CVE-2019-13516/): Cross-site request forgery in OSIsoft PI Web API (high 8.8)
- [CVE-2019-13515](https://insights.sbomify.com/CVE-2019-13515/): Information disclosure in OSIsoft PI Web API (medium 6.5)
- [CVE-2019-13514](https://insights.sbomify.com/CVE-2019-13514/): Use after free in Delta Industrial Automation DOPSoft (high 7.8)
- [CVE-2019-13513](https://insights.sbomify.com/CVE-2019-13513/): Memory corruption in Delta Industrial Automation DOPSoft (high 7.8)
- [CVE-2019-13512](https://insights.sbomify.com/CVE-2019-13512/): Memory corruption in Fuji Electric FRENIC Loader 3.5.0.0 and prior (low 3.3)
- [CVE-2019-13511](https://insights.sbomify.com/CVE-2019-13511/): Use after free in Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier (low 3.3)
- [CVE-2019-13510](https://insights.sbomify.com/CVE-2019-13510/): Use after free in Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier (high 7.8)
- [CVE-2019-1351](https://insights.sbomify.com/CVE-2019-1351/): Other in Microsoft Visual Studio 2017 (high 7.5)
- [CVE-2019-13509](https://insights.sbomify.com/CVE-2019-13509/): Secret insertion into debug log in Docker (high 7.5)
- [CVE-2019-13508](https://insights.sbomify.com/CVE-2019-13508/): Memory corruption in canonical:ubuntu linux (critical 9.8)
- [CVE-2019-13507](https://insights.sbomify.com/CVE-2019-13507/): SQL injection in hidea:az admin (critical 9.8)
- [CVE-2019-13506](https://insights.sbomify.com/CVE-2019-13506/): Cross-Site Scripting in @nuxt/devalue (medium 6.1)
- [CVE-2019-13505](https://insights.sbomify.com/CVE-2019-13505/): Cross-site scripting in dwbooster:appointment hour booking (medium 6.1)
- [CVE-2019-13504](https://insights.sbomify.com/CVE-2019-13504/): Memory corruption in debian:debian linux (medium 6.5)
- [CVE-2019-13503](https://insights.sbomify.com/CVE-2019-13503/): Memory corruption in cesanta:mongoose (high 7.5)
- [CVE-2019-1350](https://insights.sbomify.com/CVE-2019-1350/): Code injection in Microsoft Visual Studio 2017 (high 8.8)
- [CVE-2019-13498](https://insights.sbomify.com/CVE-2019-13498/): Misconfiguration in oneidentity:cloud access manager (high 7.4)
- [CVE-2019-13497](https://insights.sbomify.com/CVE-2019-13497/): Cross-site request forgery in oneidentity:cloud access manager (medium 6.5)
- [CVE-2019-13496](https://insights.sbomify.com/CVE-2019-13496/): Auth bypass in oneidentity:cloud access manager (high 8.1)
- [CVE-2019-13495](https://insights.sbomify.com/CVE-2019-13495/): Cross-site scripting in zyxel:xgs2210-52hp firmware (medium 5.4)
- [CVE-2019-13494](https://insights.sbomify.com/CVE-2019-13494/): Memory corruption in castlerock:simple network management protocol console (high 7.8)
- [CVE-2019-13493](https://insights.sbomify.com/CVE-2019-13493/): Cross-site scripting in sitecore:experience platform (medium 5.4)
- [CVE-2019-1349](https://insights.sbomify.com/CVE-2019-1349/): Code injection in Microsoft Visual Studio 2017 (high 8.8)
- [CVE-2019-13489](https://insights.sbomify.com/CVE-2019-13489/): SQL injection in trape project:trape (critical 9.8)
- [CVE-2019-13488](https://insights.sbomify.com/CVE-2019-13488/): Cross-site scripting in trape project:trape (medium 6.1)
- [CVE-2019-13486](https://insights.sbomify.com/CVE-2019-13486/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2019-13485](https://insights.sbomify.com/CVE-2019-13485/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2019-13484](https://insights.sbomify.com/CVE-2019-13484/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2019-13483](https://insights.sbomify.com/CVE-2019-13483/): Auth0 Passport-SharePoint does not validate JWT signature (high 7.3)
- [CVE-2019-13482](https://insights.sbomify.com/CVE-2019-13482/): Command injection in dlink:dir-818lw firmware (high 8.8)
- [CVE-2019-13481](https://insights.sbomify.com/CVE-2019-13481/): Command injection in dlink:dir-818lw firmware (high 8.8)
- [CVE-2019-1348](https://insights.sbomify.com/CVE-2019-1348/): Path traversal in Git (low 3.3)
- [CVE-2019-13478](https://insights.sbomify.com/CVE-2019-13478/): Cross-site scripting in yoast:yoast seo (critical 9.9)
- [CVE-2019-13477](https://insights.sbomify.com/CVE-2019-13477/): Cross-site request forgery in control-webpanel:webpanel (high 8.8)
- [CVE-2019-13476](https://insights.sbomify.com/CVE-2019-13476/): Cross-site scripting in control-webpanel:webpanel (medium 5.4)
- [CVE-2019-13475](https://insights.sbomify.com/CVE-2019-13475/): Command injection in mobatek:mobaxterm (high 8.8)
- [CVE-2019-13474](https://insights.sbomify.com/CVE-2019-13474/): Missing authorization in telestar:bobs rock radio firmware (critical 9.8)
- [CVE-2019-13473](https://insights.sbomify.com/CVE-2019-13473/): Hardcoded credentials in auna:connect 100 firmware (critical 9.8)
- [CVE-2019-13472](https://insights.sbomify.com/CVE-2019-13472/): Cross-site scripting in phpwind:phpwind (medium 6.1)
- [CVE-2019-13470](https://insights.sbomify.com/CVE-2019-13470/): Memory corruption in matrixssl:matrixssl (critical 9.8)
- [CVE-2019-1347](https://insights.sbomify.com/CVE-2019-1347/): Denial of service in Windows (medium 6.5)
- [CVE-2019-13467](https://insights.sbomify.com/CVE-2019-13467/): Weak cryptography in sandisk:ssd dashboard (medium 5.9)
- [CVE-2019-13466](https://insights.sbomify.com/CVE-2019-13466/): Hardcoded credentials in sandisk:ssd dashboard (high 7.5)
- [CVE-2019-13465](https://insights.sbomify.com/CVE-2019-13465/): Denial of service in ros:ros-comm (high 8.6)
- [CVE-2019-13464](https://insights.sbomify.com/CVE-2019-13464/): Security feature bypass in modsecurity:owasp modsecurity core rule set (high 7.5)
- [CVE-2019-13463](https://insights.sbomify.com/CVE-2019-13463/): Cross-site scripting in quantumcloud:simple link directory (medium 6.1)
- [CVE-2019-13462](https://insights.sbomify.com/CVE-2019-13462/): SQL injection in lansweeper:lansweeper (critical 9.1)
- [CVE-2019-13461](https://insights.sbomify.com/CVE-2019-13461/): Missing authorization in prestashop:prestashop (high 7.5)
- [CVE-2019-1346](https://insights.sbomify.com/CVE-2019-1346/): Denial of service in Windows (medium 6.5)
- [CVE-2019-13458](https://insights.sbomify.com/CVE-2019-13458/): Information disclosure in debian:debian linux (low 2.7)
- [CVE-2019-13457](https://insights.sbomify.com/CVE-2019-13457/): Information disclosure in otrs:otrs (medium 4.3)
- [CVE-2019-13456](https://insights.sbomify.com/CVE-2019-13456/): Information disclosure in freeradius:freeradius (medium 6.5)
- [CVE-2019-13455](https://insights.sbomify.com/CVE-2019-13455/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2019-13454](https://insights.sbomify.com/CVE-2019-13454/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2019-13453](https://insights.sbomify.com/CVE-2019-13453/): Denial of service in zipios project:zipios (medium 6.5)
- [CVE-2019-13452](https://insights.sbomify.com/CVE-2019-13452/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2019-13451](https://insights.sbomify.com/CVE-2019-13451/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2019-13450](https://insights.sbomify.com/CVE-2019-13450/): Missing authorization in ringcentral:ringcentral (medium 6.5)
- [CVE-2019-1345](https://insights.sbomify.com/CVE-2019-1345/): Information disclosure in Windows (medium 5.5)
- [CVE-2019-13449](https://insights.sbomify.com/CVE-2019-13449/): Denial of service in zoom:zoom (medium 6.5)
- [CVE-2019-13448](https://insights.sbomify.com/CVE-2019-13448/): Cross-site scripting in sertek:xpare (medium 6.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/122/