# Vulnerabilities published in 2019 - [CVE-2019-13447](https://insights.sbomify.com/CVE-2019-13447/): SQL injection in sertek:xpare (critical 9.8) - [CVE-2019-13445](https://insights.sbomify.com/CVE-2019-13445/): Integer overflow in ros:ros-comm (critical 9.8) - [CVE-2019-1344](https://insights.sbomify.com/CVE-2019-1344/): Information disclosure in Windows (medium 5.5) - [CVE-2019-1343](https://insights.sbomify.com/CVE-2019-1343/): Denial of service in Windows (medium 6.5) - [CVE-2019-13423](https://insights.sbomify.com/CVE-2019-13423/): Auth bypass in Search Guard Kibana Plugin (high 8.8) - [CVE-2019-13422](https://insights.sbomify.com/CVE-2019-13422/): Open redirect in Search Guard Kibana Plugin (medium 6.1) - [CVE-2019-13421](https://insights.sbomify.com/CVE-2019-13421/): Information disclosure in Search Guard (medium 4.9) - [CVE-2019-13420](https://insights.sbomify.com/CVE-2019-13420/): Information disclosure in Search Guard (medium 5.9) - [CVE-2019-1342](https://insights.sbomify.com/CVE-2019-1342/): Privilege escalation in Windows (high 7.8) - [CVE-2019-13419](https://insights.sbomify.com/CVE-2019-13419/): Information disclosure in Search Guard (high 7.5) - [CVE-2019-13418](https://insights.sbomify.com/CVE-2019-13418/): Information disclosure in Search Guard (high 7.5) - [CVE-2019-13417](https://insights.sbomify.com/CVE-2019-13417/): Information disclosure in Search Guard (medium 5.3) - [CVE-2019-13416](https://insights.sbomify.com/CVE-2019-13416/): Missing authorization in Search Guard (medium 6.5) - [CVE-2019-13415](https://insights.sbomify.com/CVE-2019-13415/): Missing authorization in Search Guard (medium 6.5) - [CVE-2019-13414](https://insights.sbomify.com/CVE-2019-13414/): Cross-site scripting in boiteasite:rencontre (medium 6.1) - [CVE-2019-13413](https://insights.sbomify.com/CVE-2019-13413/): SQL injection in boiteasite:rencontre (critical 9.8) - [CVE-2019-13412](https://insights.sbomify.com/CVE-2019-13412/): A vulnerability was discovered in HiNet GPON firmware < I040GWR190731 that allows an attacker to read arbitrary files (critical 9.3) - [CVE-2019-13411](https://insights.sbomify.com/CVE-2019-13411/): A remote command execution vulnerability was discovered in HiNet GPON firmware < I040GWR190731 port 3097 (critical 10.0) - [CVE-2019-13410](https://insights.sbomify.com/CVE-2019-13410/): TOPMeeting version before version 8.8 (2019/08/19) allows an attacker to obtain sensitive information (high 7.5) - [CVE-2019-1341](https://insights.sbomify.com/CVE-2019-1341/): Privilege escalation in Windows (high 7.8) - [CVE-2019-13409](https://insights.sbomify.com/CVE-2019-13409/): A SQL injection vulnerability was discovered in TOPMeeting before version 8.8 (2019/08/19) (critical 9.8) - [CVE-2019-13408](https://insights.sbomify.com/CVE-2019-13408/): Advan VD-1 allows users to download arbitrary files (high 7.5) - [CVE-2019-13407](https://insights.sbomify.com/CVE-2019-13407/): Advan VD-1 has a reflected XSS vulnerability in page cgibin/ssi.cgi (medium 6.1) - [CVE-2019-13406](https://insights.sbomify.com/CVE-2019-13406/): Advan VD-1 has a vulnerability that allows remote arbitrary APK installation (high 7.5) - [CVE-2019-13405](https://insights.sbomify.com/CVE-2019-13405/): Advan VD-1 allows a remote user to enable Android Debug Bridge without any authentication (critical 9.8) - [CVE-2019-13404](https://insights.sbomify.com/CVE-2019-13404/): Misconfiguration in python:python (high 7.8) - [CVE-2019-13403](https://insights.sbomify.com/CVE-2019-13403/): Missing authorization in temenos:cwx (high 7.5) - [CVE-2019-13402](https://insights.sbomify.com/CVE-2019-13402/): Security feature bypass in fortinet:fcm-mb40 firmware (high 8.8) - [CVE-2019-13401](https://insights.sbomify.com/CVE-2019-13401/): Cross-site request forgery in fortinet:fcm-mb40 firmware (high 8.8) - [CVE-2019-13400](https://insights.sbomify.com/CVE-2019-13400/): Information disclosure in fortinet:fcm-mb40 firmware (critical 9.8) - [CVE-2019-1340](https://insights.sbomify.com/CVE-2019-1340/): Privilege escalation in Windows (high 7.8) - [CVE-2019-13399](https://insights.sbomify.com/CVE-2019-13399/): Hardcoded credentials in fortinet:fcm-mb40 firmware (medium 5.9) - [CVE-2019-13398](https://insights.sbomify.com/CVE-2019-13398/): Command injection in fortinet:fcm-mb40 firmware (high 7.2) - [CVE-2019-13397](https://insights.sbomify.com/CVE-2019-13397/): Cross-site scripting in enhancesoft:osticket (medium 6.1) - [CVE-2019-13396](https://insights.sbomify.com/CVE-2019-13396/): Path traversal in getflightpath:flightpath (medium 5.3) - [CVE-2019-13395](https://insights.sbomify.com/CVE-2019-13395/): Cross-site request forgery in netgear:cg3700b firmware (high 8.8) - [CVE-2019-13394](https://insights.sbomify.com/CVE-2019-13394/): Weak cryptography in netgear:cg3700b firmware (critical 9.8) - [CVE-2019-13393](https://insights.sbomify.com/CVE-2019-13393/): Hardcoded credentials in netgear:cg3700b firmware (high 7.5) - [CVE-2019-13392](https://insights.sbomify.com/CVE-2019-13392/): Cross-site scripting in mindpalette:natemail (medium 6.1) - [CVE-2019-13391](https://insights.sbomify.com/CVE-2019-13391/): Memory corruption in imagemagick:imagemagick (high 8.8) - [CVE-2019-13390](https://insights.sbomify.com/CVE-2019-13390/): Denial of service in ffmpeg:ffmpeg (medium 6.5) - [CVE-2019-1339](https://insights.sbomify.com/CVE-2019-1339/): Privilege escalation in Windows (high 7.8) - [CVE-2019-13389](https://insights.sbomify.com/CVE-2019-13389/): Cross-site scripting in rainloop:webmail (medium 6.1) - [CVE-2019-13387](https://insights.sbomify.com/CVE-2019-13387/): Cross-site scripting in control-webpanel:webpanel (medium 6.1) - [CVE-2019-13386](https://insights.sbomify.com/CVE-2019-13386/): Command injection in centos-webpanel:centos web panel (high 8.8) - [CVE-2019-13385](https://insights.sbomify.com/CVE-2019-13385/): Information disclosure in control-webpanel:webpanel (medium 4.3) - [CVE-2019-13383](https://insights.sbomify.com/CVE-2019-13383/): Information disclosure in control-webpanel:webpanel (medium 5.3) - [CVE-2019-13382](https://insights.sbomify.com/CVE-2019-13382/): Privilege escalation in techsmith:snagit (high 7.8) - [CVE-2019-13380](https://insights.sbomify.com/CVE-2019-13380/): Cross-site scripting in keynto:team password manager (medium 6.1) - [CVE-2019-1338](https://insights.sbomify.com/CVE-2019-1338/): Security feature bypass in Windows (medium 5.9) - [CVE-2019-13379](https://insights.sbomify.com/CVE-2019-13379/): Privilege escalation in avtech:room alert 3e firmware (high 8.8) - [CVE-2019-13377](https://insights.sbomify.com/CVE-2019-13377/): Information disclosure in canonical:ubuntu linux (medium 5.9) - [CVE-2019-13376](https://insights.sbomify.com/CVE-2019-13376/): phpBB Cross-Site Request Forgery (CSRF) (medium 6.5) - [CVE-2019-13375](https://insights.sbomify.com/CVE-2019-13375/): SQL injection in dlink:central wifimanager (critical 9.8) - [CVE-2019-13374](https://insights.sbomify.com/CVE-2019-13374/): Cross-site scripting in dlink:central wifimanager (medium 6.1) - [CVE-2019-13373](https://insights.sbomify.com/CVE-2019-13373/): SQL injection in dlink:central wifimanager (critical 9.8) - [CVE-2019-13372](https://insights.sbomify.com/CVE-2019-13372/): Code injection in dlink:central wifimanager (critical 9.8) - [CVE-2019-13370](https://insights.sbomify.com/CVE-2019-13370/): Cross-site request forgery in ignitedcms:ignitedcms (high 8.8) - [CVE-2019-1337](https://insights.sbomify.com/CVE-2019-1337/): Information disclosure in Windows (medium 5.5) - [CVE-2019-13364](https://insights.sbomify.com/CVE-2019-13364/): Cross-site scripting in piwigo:piwigo (critical 9.6) - [CVE-2019-13363](https://insights.sbomify.com/CVE-2019-13363/): Cross-site scripting in piwigo:piwigo (critical 9.6) - [CVE-2019-13362](https://insights.sbomify.com/CVE-2019-13362/): Memory corruption in codedoc project:codedoc (high 7.8) - [CVE-2019-13361](https://insights.sbomify.com/CVE-2019-13361/): Auth bypass in smanos:w100 firmware (medium 6.5) - [CVE-2019-13360](https://insights.sbomify.com/CVE-2019-13360/): Auth bypass in control-webpanel:webpanel (critical 9.8) - [CVE-2019-1336](https://insights.sbomify.com/CVE-2019-1336/): Privilege escalation in Windows (high 7.8) - [CVE-2019-13359](https://insights.sbomify.com/CVE-2019-13359/): Privilege escalation in control-webpanel:webpanel (high 7.5) - [CVE-2019-13358](https://insights.sbomify.com/CVE-2019-13358/): XML external entity in opencats:opencats (high 7.5) - [CVE-2019-13357](https://insights.sbomify.com/CVE-2019-13357/): Privilege escalation in totaldefense:anti-virus (high 7.8) - [CVE-2019-13356](https://insights.sbomify.com/CVE-2019-13356/): Privilege escalation in totaldefense:anti-virus (high 7.8) - [CVE-2019-13355](https://insights.sbomify.com/CVE-2019-13355/): Privilege escalation in totaldefense:anti-virus (high 7.8) - [CVE-2019-13354](https://insights.sbomify.com/CVE-2019-13354/): strong_password Ruby gem malicious version causing Remote Code Execution vulnerability (critical 9.8) - [CVE-2019-13352](https://insights.sbomify.com/CVE-2019-13352/): Hardcoded credentials in wolfvision:cynap (critical 9.8) - [CVE-2019-13351](https://insights.sbomify.com/CVE-2019-13351/): Race condition in alsa-project:alsa (high 8.1) - [CVE-2019-1335](https://insights.sbomify.com/CVE-2019-1335/): Out-of-bounds write (high 7.5) - [CVE-2019-13349](https://insights.sbomify.com/CVE-2019-13349/): Information disclosure in knowage-suite:knowage (medium 4.9) - [CVE-2019-13348](https://insights.sbomify.com/CVE-2019-13348/): Information disclosure in eng:knowage (high 8.8) - [CVE-2019-13347](https://insights.sbomify.com/CVE-2019-13347/): Security feature bypass in atlassian:saml single sign on (high 7.5) - [CVE-2019-13346](https://insights.sbomify.com/CVE-2019-13346/): Cross-site scripting in myt project:myt (medium 6.1) - [CVE-2019-13345](https://insights.sbomify.com/CVE-2019-13345/): Cross-site scripting in debian:debian linux (medium 6.1) - [CVE-2019-13344](https://insights.sbomify.com/CVE-2019-13344/): Auth bypass in crudlab:wp like button (medium 5.3) - [CVE-2019-13343](https://insights.sbomify.com/CVE-2019-13343/): Path traversal in butor:portal (critical 9.9) - [CVE-2019-13341](https://insights.sbomify.com/CVE-2019-13341/): Cross-site scripting in 1234n:minicms (medium 4.8) - [CVE-2019-13340](https://insights.sbomify.com/CVE-2019-13340/): Cross-site scripting in 1234n:minicms (medium 4.8) - [CVE-2019-1334](https://insights.sbomify.com/CVE-2019-1334/): Information disclosure in Windows (medium 5.5) - [CVE-2019-13339](https://insights.sbomify.com/CVE-2019-13339/): Cross-site scripting in 1234n:minicms (medium 4.8) - [CVE-2019-13338](https://insights.sbomify.com/CVE-2019-13338/): Missing authorization in weseek:growi (high 7.5) - [CVE-2019-13337](https://insights.sbomify.com/CVE-2019-13337/): Auth bypass in weseek:growi (high 7.5) - [CVE-2019-13336](https://insights.sbomify.com/CVE-2019-13336/): Auth bypass in dbell:db01-s firmware (critical 9.8) - [CVE-2019-13335](https://insights.sbomify.com/CVE-2019-13335/): Server-side request forgery in salesagility:suitecrm (critical 9.8) - [CVE-2019-13334](https://insights.sbomify.com/CVE-2019-13334/): Memory corruption in PhantomPDF (high 7.8) - [CVE-2019-13333](https://insights.sbomify.com/CVE-2019-13333/): Memory corruption in PhantomPDF (high 7.8) - [CVE-2019-13332](https://insights.sbomify.com/CVE-2019-13332/): Use after free in Reader (high 7.8) - [CVE-2019-13331](https://insights.sbomify.com/CVE-2019-13331/): Memory corruption in Reader (high 7.8) - [CVE-2019-13330](https://insights.sbomify.com/CVE-2019-13330/): Memory corruption in Reader (high 7.8) - [CVE-2019-1333](https://insights.sbomify.com/CVE-2019-1333/): Other in Windows (high 8.8) - [CVE-2019-13329](https://insights.sbomify.com/CVE-2019-13329/): Memory corruption in Reader (high 7.8) - [CVE-2019-13328](https://insights.sbomify.com/CVE-2019-13328/): Use after free in Reader (high 7.8) - [CVE-2019-13327](https://insights.sbomify.com/CVE-2019-13327/): Use after free in Reader (high 7.8) - [CVE-2019-13326](https://insights.sbomify.com/CVE-2019-13326/): Use after free in Reader (high 7.8) - [CVE-2019-13325](https://insights.sbomify.com/CVE-2019-13325/): Memory corruption in Studio Photo (high 7.8) --- From sbomify Insights: https://insights.sbomify.com/years/2019/page/123/