# Vulnerabilities published in 2019


- [CVE-2019-1323](https://insights.sbomify.com/CVE-2019-1323/): Privilege escalation in Windows (high 7.8)
- [CVE-2019-13229](https://insights.sbomify.com/CVE-2019-13229/): Other in deepin:deepin clone (medium 5.5)
- [CVE-2019-13228](https://insights.sbomify.com/CVE-2019-13228/): Race condition in deepin:deepin-clone (medium 4.7)
- [CVE-2019-13227](https://insights.sbomify.com/CVE-2019-13227/): Other in deepin:deepin-clone (medium 5.5)
- [CVE-2019-13226](https://insights.sbomify.com/CVE-2019-13226/): Race condition in deepin:deepin-clone (high 7.0)
- [CVE-2019-13225](https://insights.sbomify.com/CVE-2019-13225/): Null dereference in fedoraproject:fedora (medium 6.5)
- [CVE-2019-13224](https://insights.sbomify.com/CVE-2019-13224/): Use after free in canonical:ubuntu linux (critical 9.8)
- [CVE-2019-13223](https://insights.sbomify.com/CVE-2019-13223/): Denial of service in debian:debian linux (medium 5.5)
- [CVE-2019-13222](https://insights.sbomify.com/CVE-2019-13222/): Memory corruption in debian:debian linux (high 7.1)
- [CVE-2019-13221](https://insights.sbomify.com/CVE-2019-13221/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2019-13220](https://insights.sbomify.com/CVE-2019-13220/): Memory corruption in debian:debian linux (high 7.1)
- [CVE-2019-1322](https://insights.sbomify.com/CVE-2019-1322/): Microsoft Windows Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2019-13219](https://insights.sbomify.com/CVE-2019-13219/): Null dereference in debian:debian linux (medium 5.5)
- [CVE-2019-13218](https://insights.sbomify.com/CVE-2019-13218/): Denial of service in debian:debian linux (medium 5.5)
- [CVE-2019-13217](https://insights.sbomify.com/CVE-2019-13217/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2019-1321](https://insights.sbomify.com/CVE-2019-1321/): Privilege escalation in Windows (high 7.8)
- [CVE-2019-13209](https://insights.sbomify.com/CVE-2019-13209/): Rancher Vulnerable to Cross-site Request Forgery (CSRF) (medium 6.1)
- [CVE-2019-13208](https://insights.sbomify.com/CVE-2019-13208/): Privilege escalation in maxx:waves maxx audio (high 7.3)
- [CVE-2019-13207](https://insights.sbomify.com/CVE-2019-13207/): Memory corruption in nlnetlabs:name server daemon (critical 9.8)
- [CVE-2019-13206](https://insights.sbomify.com/CVE-2019-13206/): Memory corruption in kyocera:ecosys m5526cdw firmware (high 8.8)
- [CVE-2019-13205](https://insights.sbomify.com/CVE-2019-13205/): Missing authorization in kyocera:ecosys m5526cdw firmware (high 7.5)
- [CVE-2019-13204](https://insights.sbomify.com/CVE-2019-13204/): Memory corruption in kyocera:ecosys m5526cdw firmware (critical 9.8)
- [CVE-2019-13203](https://insights.sbomify.com/CVE-2019-13203/): Integer overflow in kyocera:ecosys m5526cdw firmware (high 8.8)
- [CVE-2019-13202](https://insights.sbomify.com/CVE-2019-13202/): Memory corruption in kyocera:ecosys m5526cdw firmware (critical 9.8)
- [CVE-2019-13201](https://insights.sbomify.com/CVE-2019-13201/): Memory corruption in kyocera:ecosys m5526cdw firmware (critical 9.8)
- [CVE-2019-13200](https://insights.sbomify.com/CVE-2019-13200/): Cross-site scripting in kyocera:ecosys m5526cdw firmware (medium 6.1)
- [CVE-2019-1320](https://insights.sbomify.com/CVE-2019-1320/): Privilege escalation in Windows (high 7.8)
- [CVE-2019-13199](https://insights.sbomify.com/CVE-2019-13199/): Cross-site request forgery in kyocera:ecosys m5526cdw firmware (medium 6.5)
- [CVE-2019-13198](https://insights.sbomify.com/CVE-2019-13198/): Cross-site scripting in kyocera:ecosys m5526cdw firmware (medium 6.1)
- [CVE-2019-13197](https://insights.sbomify.com/CVE-2019-13197/): Memory corruption in kyocera:ecosys m5526cdw firmware (critical 9.8)
- [CVE-2019-13196](https://insights.sbomify.com/CVE-2019-13196/): Memory corruption in kyocera:ecosys m5526cdw firmware (high 8.8)
- [CVE-2019-13195](https://insights.sbomify.com/CVE-2019-13195/): Path traversal in kyocera:ecosys m5526cdw firmware (high 7.5)
- [CVE-2019-13194](https://insights.sbomify.com/CVE-2019-13194/): Information disclosure in brother:ads-2400n firmware (high 7.5)
- [CVE-2019-13193](https://insights.sbomify.com/CVE-2019-13193/): Memory corruption in brother:ads-2400n firmware (high 8.8)
- [CVE-2019-13192](https://insights.sbomify.com/CVE-2019-13192/): Memory corruption in brother:ads-2400n firmware (critical 9.8)
- [CVE-2019-13191](https://insights.sbomify.com/CVE-2019-13191/): SQL injection in mapsolutions:intramaps (high 7.5)
- [CVE-2019-13190](https://insights.sbomify.com/CVE-2019-13190/): Security feature bypass in eng:knowage (medium 5.3)
- [CVE-2019-1319](https://insights.sbomify.com/CVE-2019-1319/): Privilege escalation in Windows (high 7.8)
- [CVE-2019-13189](https://insights.sbomify.com/CVE-2019-13189/): Cross-site scripting in eng:knowage (medium 6.1)
- [CVE-2019-13188](https://insights.sbomify.com/CVE-2019-13188/): Auth bypass in eng:knowage (critical 9.8)
- [CVE-2019-13187](https://insights.sbomify.com/CVE-2019-13187/): File upload in symphonyextensions:rich text formatter (critical 9.8)
- [CVE-2019-13186](https://insights.sbomify.com/CVE-2019-13186/): Cross-site scripting in 1234n:minicms (medium 6.1)
- [CVE-2019-13183](https://insights.sbomify.com/CVE-2019-13183/): Cross-site request forgery in flarum:flarum (high 8.8)
- [CVE-2019-13182](https://insights.sbomify.com/CVE-2019-13182/): Cross-site scripting in solarwinds:serv-u ftp server (medium 5.4)
- [CVE-2019-13181](https://insights.sbomify.com/CVE-2019-13181/): Code injection in solarwinds:serv-u ftp server (medium 6.5)
- [CVE-2019-1318](https://insights.sbomify.com/CVE-2019-1318/): Auth bypass in Windows (medium 5.9)
- [CVE-2019-13179](https://insights.sbomify.com/CVE-2019-13179/): Information disclosure in calamares:calamares (high 7.5)
- [CVE-2019-13178](https://insights.sbomify.com/CVE-2019-13178/): Race condition in calamares:calamares (high 8.1)
- [CVE-2019-13177](https://insights.sbomify.com/CVE-2019-13177/): Improper Verification of Cryptographic Signature in django-rest-registration (critical 9.8)
- [CVE-2019-13176](https://insights.sbomify.com/CVE-2019-13176/): XML external entity in 3cx:3cx (high 7.5)
- [CVE-2019-13175](https://insights.sbomify.com/CVE-2019-13175/): Open redirect in readthedocs:read the docs (medium 6.1)
- [CVE-2019-13173](https://insights.sbomify.com/CVE-2019-13173/): Arbitrary File Overwrite in fstream (high 7.5)
- [CVE-2019-13172](https://insights.sbomify.com/CVE-2019-13172/): Memory corruption in xerox:phaser 3320 firmware (critical 9.8)
- [CVE-2019-13171](https://insights.sbomify.com/CVE-2019-13171/): Memory corruption in xerox:phaser 3320 firmware (critical 9.8)
- [CVE-2019-13170](https://insights.sbomify.com/CVE-2019-13170/): Cross-site request forgery in xerox:phaser 3320 firmware (medium 6.5)
- [CVE-2019-1317](https://insights.sbomify.com/CVE-2019-1317/): Denial of service in Windows (high 7.3)
- [CVE-2019-13169](https://insights.sbomify.com/CVE-2019-13169/): Memory corruption in xerox:phaser 3320 firmware (critical 9.8)
- [CVE-2019-13168](https://insights.sbomify.com/CVE-2019-13168/): Memory corruption in xerox:phaser 3320 firmware (critical 9.8)
- [CVE-2019-13167](https://insights.sbomify.com/CVE-2019-13167/): Cross-site scripting in xerox:phaser 3320 firmware (medium 6.1)
- [CVE-2019-13166](https://insights.sbomify.com/CVE-2019-13166/): Auth bypass in xerox:phaser 3320 firmware (high 7.5)
- [CVE-2019-13165](https://insights.sbomify.com/CVE-2019-13165/): Memory corruption in xerox:phaser 3320 firmware (critical 9.8)
- [CVE-2019-13164](https://insights.sbomify.com/CVE-2019-13164/): Security feature bypass in canonical:ubuntu linux (high 7.8)
- [CVE-2019-13163](https://insights.sbomify.com/CVE-2019-13163/): Weak cryptography in fujitsu:celsius firmware (medium 5.9)
- [CVE-2019-13161](https://insights.sbomify.com/CVE-2019-13161/): Null dereference in debian:debian linux (medium 5.3)
- [CVE-2019-1316](https://insights.sbomify.com/CVE-2019-1316/): Privilege escalation in Windows (high 7.8)
- [CVE-2019-13157](https://insights.sbomify.com/CVE-2019-13157/): Path traversal in Naver Vaccine (high 7.5)
- [CVE-2019-13156](https://insights.sbomify.com/CVE-2019-13156/): Memory corruption in NDrive (high 7.5)
- [CVE-2019-13155](https://insights.sbomify.com/CVE-2019-13155/): Command injection in trendnet:tew-827dru firmware (high 8.8)
- [CVE-2019-13154](https://insights.sbomify.com/CVE-2019-13154/): Command injection in trendnet:tew-827dru firmware (high 8.8)
- [CVE-2019-13153](https://insights.sbomify.com/CVE-2019-13153/): Command injection in trendnet:tew-827dru firmware (high 8.8)
- [CVE-2019-13152](https://insights.sbomify.com/CVE-2019-13152/): Command injection in trendnet:tew-827dru firmware (high 8.8)
- [CVE-2019-13151](https://insights.sbomify.com/CVE-2019-13151/): Command injection in trendnet:tew-827dru firmware (high 8.8)
- [CVE-2019-13150](https://insights.sbomify.com/CVE-2019-13150/): Command injection in trendnet:tew-827dru firmware (high 8.8)
- [CVE-2019-1315](https://insights.sbomify.com/CVE-2019-1315/): Microsoft Windows Error Reporting Manager Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2019-13149](https://insights.sbomify.com/CVE-2019-13149/): Command injection in trendnet:tew-827dru firmware (high 8.8)
- [CVE-2019-13148](https://insights.sbomify.com/CVE-2019-13148/): Command injection in trendnet:tew-827dru firmware (high 8.8)
- [CVE-2019-13147](https://insights.sbomify.com/CVE-2019-13147/): Null dereference in audiofile:audiofile (medium 6.5)
- [CVE-2019-13146](https://insights.sbomify.com/CVE-2019-13146/): field_test gem contains injection vulnerability (medium 5.3)
- [CVE-2019-13144](https://insights.sbomify.com/CVE-2019-13144/): Code injection in mytinytodo:mytinytodo (critical 9.8)
- [CVE-2019-13143](https://insights.sbomify.com/CVE-2019-13143/): Business logic in shenzhen dragon brothers:fb50 firmware (critical 9.8)
- [CVE-2019-13142](https://insights.sbomify.com/CVE-2019-13142/): Privilege escalation in razer:surround (medium 5.5)
- [CVE-2019-13140](https://insights.sbomify.com/CVE-2019-13140/): Misconfiguration in intenogroup:eg200 firmware (medium 6.5)
- [CVE-2019-1314](https://insights.sbomify.com/CVE-2019-1314/): Security feature bypass in Windows 10 Mobile (medium 6.8)
- [CVE-2019-13139](https://insights.sbomify.com/CVE-2019-13139/): Command injection in docker:docker (high 8.4)
- [CVE-2019-13137](https://insights.sbomify.com/CVE-2019-13137/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2019-13136](https://insights.sbomify.com/CVE-2019-13136/): Integer overflow in imagemagick:imagemagick (high 7.8)
- [CVE-2019-13135](https://insights.sbomify.com/CVE-2019-13135/): Memory corruption in canonical:ubuntu linux (high 8.8)
- [CVE-2019-13134](https://insights.sbomify.com/CVE-2019-13134/): Denial of service in imagemagick:imagemagick (medium 5.5)
- [CVE-2019-13133](https://insights.sbomify.com/CVE-2019-13133/): Denial of service in imagemagick:imagemagick (medium 5.5)
- [CVE-2019-13132](https://insights.sbomify.com/CVE-2019-13132/): Memory corruption in canonical:ubuntu linux (critical 9.8)
- [CVE-2019-13131](https://insights.sbomify.com/CVE-2019-13131/): Missing authorization in supermicro:superdoctor 5 (critical 9.8)
- [CVE-2019-1313](https://insights.sbomify.com/CVE-2019-1313/): Information disclosure in SQL Server Management Studio (medium 6.5)
- [CVE-2019-13129](https://insights.sbomify.com/CVE-2019-13129/): Denial of service in motorola:cx2l mwr04l firmware (high 7.5)
- [CVE-2019-13128](https://insights.sbomify.com/CVE-2019-13128/): Command injection in dlink:dir-823g firmware (high 8.8)
- [CVE-2019-13127](https://insights.sbomify.com/CVE-2019-13127/): mxGraph vulnerable to cross-site scripting in color field (medium 6.1)
- [CVE-2019-13126](https://insights.sbomify.com/CVE-2019-13126/): Integer Overflow or Wraparound in NATS Server (high 7.5)
- [CVE-2019-13125](https://insights.sbomify.com/CVE-2019-13125/): Security feature bypass in tencent:habomalhunter (high 7.8)
- [CVE-2019-13124](https://insights.sbomify.com/CVE-2019-13124/): Denial of service in foxitsoftware:foxit reader (high 7.5)
- [CVE-2019-13123](https://insights.sbomify.com/CVE-2019-13123/): Denial of service in foxitsoftware:foxit reader (high 7.5)
- [CVE-2019-13122](https://insights.sbomify.com/CVE-2019-13122/): Cross-site scripting in ozlabs:patchwork (medium 6.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/125/