# Vulnerabilities published in 2019


- [CVE-2019-13121](https://insights.sbomify.com/CVE-2019-13121/): Server-side request forgery in gitlab:gitlab (high 7.5)
- [CVE-2019-13120](https://insights.sbomify.com/CVE-2019-13120/): Memory corruption in amazon:amazon web services freertos (high 7.5)
- [CVE-2019-13118](https://insights.sbomify.com/CVE-2019-13118/): libxslt Type Confusion vulnerability that affects Nokogiri (medium 5.3)
- [CVE-2019-13117](https://insights.sbomify.com/CVE-2019-13117/): Uninitialized read in Nokogiri gem (medium 5.3)
- [CVE-2019-13116](https://insights.sbomify.com/CVE-2019-13116/): Mulesoft Mule Unsafe Deserialization (critical 9.8)
- [CVE-2019-13115](https://insights.sbomify.com/CVE-2019-13115/): Integer overflow in debian:debian linux (high 8.1)
- [CVE-2019-13114](https://insights.sbomify.com/CVE-2019-13114/): Null dereference in canonical:ubuntu linux (medium 6.5)
- [CVE-2019-13113](https://insights.sbomify.com/CVE-2019-13113/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2019-13112](https://insights.sbomify.com/CVE-2019-13112/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2019-13111](https://insights.sbomify.com/CVE-2019-13111/): Integer overflow in exiv2:exiv2 (medium 5.5)
- [CVE-2019-13110](https://insights.sbomify.com/CVE-2019-13110/): Integer overflow in canonical:ubuntu linux (medium 6.5)
- [CVE-2019-1311](https://insights.sbomify.com/CVE-2019-1311/): Memory corruption in Windows (high 7.8)
- [CVE-2019-13109](https://insights.sbomify.com/CVE-2019-13109/): Integer overflow in exiv2:exiv2 (medium 6.5)
- [CVE-2019-13108](https://insights.sbomify.com/CVE-2019-13108/): Integer overflow in exiv2:exiv2 (medium 6.5)
- [CVE-2019-13107](https://insights.sbomify.com/CVE-2019-13107/): Integer overflow in fedoraproject:fedora (critical 9.8)
- [CVE-2019-13106](https://insights.sbomify.com/CVE-2019-13106/): Memory corruption in denx:u-boot (high 7.8)
- [CVE-2019-13105](https://insights.sbomify.com/CVE-2019-13105/): Memory corruption in denx:u-boot (high 7.8)
- [CVE-2019-13104](https://insights.sbomify.com/CVE-2019-13104/): Memory corruption in denx:u-boot (high 7.8)
- [CVE-2019-13103](https://insights.sbomify.com/CVE-2019-13103/): Denial of service in denx:u-boot (high 7.1)
- [CVE-2019-13101](https://insights.sbomify.com/CVE-2019-13101/): Missing authorization in dlink:dir-600m firmware (critical 9.8)
- [CVE-2019-13100](https://insights.sbomify.com/CVE-2019-13100/): Information disclosure in send-anywhere:send anywhere (medium 6.5)
- [CVE-2019-1310](https://insights.sbomify.com/CVE-2019-1310/): Denial of service in Windows (medium 6.8)
- [CVE-2019-13099](https://insights.sbomify.com/CVE-2019-13099/): Information disclosure in momo project:momo (medium 6.5)
- [CVE-2019-13098](https://insights.sbomify.com/CVE-2019-13098/): Information disclosure in tronlink:wallet (medium 6.5)
- [CVE-2019-13097](https://insights.sbomify.com/CVE-2019-13097/): Business logic in cat runner\: decorate home project (high 7.5)
- [CVE-2019-13096](https://insights.sbomify.com/CVE-2019-13096/): Information disclosure in tronlink:wallet (critical 9.8)
- [CVE-2019-1309](https://insights.sbomify.com/CVE-2019-1309/): Denial of service in Windows (medium 6.8)
- [CVE-2019-13086](https://insights.sbomify.com/CVE-2019-13086/): SQL injection in cszcms:csz cms (critical 9.8)
- [CVE-2019-13085](https://insights.sbomify.com/CVE-2019-13085/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2019-13084](https://insights.sbomify.com/CVE-2019-13084/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2019-13083](https://insights.sbomify.com/CVE-2019-13083/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2019-13082](https://insights.sbomify.com/CVE-2019-13082/): File upload in chamilo:chamilo lms (critical 9.8)
- [CVE-2019-13081](https://insights.sbomify.com/CVE-2019-13081/): Cross-site scripting in quest:kace systems management appliance (medium 5.4)
- [CVE-2019-13080](https://insights.sbomify.com/CVE-2019-13080/): Cross-site scripting in quest:kace systems management appliance (medium 5.4)
- [CVE-2019-1308](https://insights.sbomify.com/CVE-2019-1308/): Out-of-bounds write (high 7.5)
- [CVE-2019-13079](https://insights.sbomify.com/CVE-2019-13079/): SQL injection in quest:kace systems management appliance (high 8.8)
- [CVE-2019-13078](https://insights.sbomify.com/CVE-2019-13078/): SQL injection in quest:kace systems management appliance (high 8.8)
- [CVE-2019-13077](https://insights.sbomify.com/CVE-2019-13077/): Cross-site scripting in quest:kace systems management appliance (medium 6.1)
- [CVE-2019-13076](https://insights.sbomify.com/CVE-2019-13076/): SQL injection in quest:kace systems management appliance (high 8.8)
- [CVE-2019-13075](https://insights.sbomify.com/CVE-2019-13075/): Information disclosure in torproject:tor browser (medium 5.3)
- [CVE-2019-13074](https://insights.sbomify.com/CVE-2019-13074/): Denial of service in mikrotik:routeros (high 7.5)
- [CVE-2019-13072](https://insights.sbomify.com/CVE-2019-13072/): Cross-site scripting in zoneminder:zoneminder (medium 5.4)
- [CVE-2019-13071](https://insights.sbomify.com/CVE-2019-13071/): Cross-site request forgery in cyberpowersystems:powerpanel (high 8.8)
- [CVE-2019-13070](https://insights.sbomify.com/CVE-2019-13070/): Cross-site scripting in cyberpowersystems:powerpanel (medium 5.4)
- [CVE-2019-1307](https://insights.sbomify.com/CVE-2019-1307/): Out-of-bounds write (high 7.5)
- [CVE-2019-13069](https://insights.sbomify.com/CVE-2019-13069/): Privilege escalation in extenua:silvershield (high 7.8)
- [CVE-2019-13068](https://insights.sbomify.com/CVE-2019-13068/): Grafana Cross-site Scripting vulnerability (medium 5.4)
- [CVE-2019-13067](https://insights.sbomify.com/CVE-2019-13067/): Memory corruption in f5:njs (critical 9.8)
- [CVE-2019-13066](https://insights.sbomify.com/CVE-2019-13066/): Cross-site scripting in sahipro:sahi pro (medium 6.1)
- [CVE-2019-13063](https://insights.sbomify.com/CVE-2019-13063/): Path traversal in sahipro:sahi pro (high 7.5)
- [CVE-2019-1306](https://insights.sbomify.com/CVE-2019-1306/): Code injection in Azure DevOps Server (critical 9.8)
- [CVE-2019-13057](https://insights.sbomify.com/CVE-2019-13057/): Privilege escalation in apple:mac os x (medium 4.9)
- [CVE-2019-13056](https://insights.sbomify.com/CVE-2019-13056/): Cross-site request forgery in cyberpanel:cyberpanel (high 8.8)
- [CVE-2019-13055](https://insights.sbomify.com/CVE-2019-13055/): Information disclosure in logitech:k360 firmware (medium 6.5)
- [CVE-2019-13054](https://insights.sbomify.com/CVE-2019-13054/): Weak cryptography in logitech:r500 firmware (medium 6.5)
- [CVE-2019-13053](https://insights.sbomify.com/CVE-2019-13053/): Weak cryptography in logitech:unifying receiver firmware (medium 6.5)
- [CVE-2019-13052](https://insights.sbomify.com/CVE-2019-13052/): Weak cryptography in logitech:unifying receiver firmware (medium 6.5)
- [CVE-2019-13051](https://insights.sbomify.com/CVE-2019-13051/): Pi-Hole 4.3 allows Command Injection. (high 8.8)
- [CVE-2019-13050](https://insights.sbomify.com/CVE-2019-13050/): Denial of service in f5:traffix signaling delivery controller (high 7.5)
- [CVE-2019-1305](https://insights.sbomify.com/CVE-2019-1305/): Cross-site scripting in Azure DevOps Server (medium 5.4)
- [CVE-2019-13049](https://insights.sbomify.com/CVE-2019-13049/): Integer overflow in toaruos project:toaruos (high 7.8)
- [CVE-2019-13048](https://insights.sbomify.com/CVE-2019-13048/): Integer overflow in toaruos project:toaruos (medium 5.5)
- [CVE-2019-13047](https://insights.sbomify.com/CVE-2019-13047/): Privilege escalation in toaruos project:toaruos (high 7.8)
- [CVE-2019-13046](https://insights.sbomify.com/CVE-2019-13046/): Privilege escalation in toaruos project:toaruos (high 7.8)
- [CVE-2019-13045](https://insights.sbomify.com/CVE-2019-13045/): Use after free in irssi:irssi (high 8.1)
- [CVE-2019-13038](https://insights.sbomify.com/CVE-2019-13038/): Open redirect in canonical:ubuntu linux (medium 6.1)
- [CVE-2019-13035](https://insights.sbomify.com/CVE-2019-13035/): Privilege escalation in pandorafms:pandora fms (high 7.8)
- [CVE-2019-13033](https://insights.sbomify.com/CVE-2019-13033/): Information disclosure in cisofy:lynis (low 3.3)
- [CVE-2019-13032](https://insights.sbomify.com/CVE-2019-13032/): Null dereference in flightcrew project:flightcrew (medium 5.5)
- [CVE-2019-13031](https://insights.sbomify.com/CVE-2019-13031/): XML external entity in debian:debian linux (high 8.1)
- [CVE-2019-13030](https://insights.sbomify.com/CVE-2019-13030/): Missing authorization in mediola:neo server (high 8.2)
- [CVE-2019-1303](https://insights.sbomify.com/CVE-2019-1303/): Privilege escalation in Windows (high 7.8)
- [CVE-2019-13029](https://insights.sbomify.com/CVE-2019-13029/): Cross-site scripting in vanderbilt:redcap (medium 4.8)
- [CVE-2019-13028](https://insights.sbomify.com/CVE-2019-13028/): Code injection in minv:electronic identification cards client (high 8.8)
- [CVE-2019-13027](https://insights.sbomify.com/CVE-2019-13027/): SQL injection in realization:concerto critical chain planner (critical 9.8)
- [CVE-2019-13026](https://insights.sbomify.com/CVE-2019-13026/): SQL injection in oxid-esales:eshop (critical 9.8)
- [CVE-2019-13025](https://insights.sbomify.com/CVE-2019-13025/): Command injection in compal:ch7465lg firmware (critical 9.8)
- [CVE-2019-13024](https://insights.sbomify.com/CVE-2019-13024/): Command injection in centreon:centreon (high 8.8)
- [CVE-2019-13023](https://insights.sbomify.com/CVE-2019-13023/): Information disclosure in jetstream:jetselect (medium 6.5)
- [CVE-2019-13022](https://insights.sbomify.com/CVE-2019-13022/): Weak cryptography in jetstream:jetselect (critical 9.8)
- [CVE-2019-13021](https://insights.sbomify.com/CVE-2019-13021/): Information disclosure in jetstream:jetselect (medium 6.5)
- [CVE-2019-13020](https://insights.sbomify.com/CVE-2019-13020/): Server-side request forgery in trms:tightrope media carousel (critical 10.0)
- [CVE-2019-1302](https://insights.sbomify.com/CVE-2019-1302/): Elevation of privilege in ASP.NET Core (high 8.8)
- [CVE-2019-13014](https://insights.sbomify.com/CVE-2019-13014/): Privilege escalation in Little Snitch (medium 5.5)
- [CVE-2019-13013](https://insights.sbomify.com/CVE-2019-13013/): Privilege escalation in Little Snitch (medium 5.5)
- [CVE-2019-13012](https://insights.sbomify.com/CVE-2019-13012/): Misconfiguration in gnome:glib (high 7.5)
- [CVE-2019-13011](https://insights.sbomify.com/CVE-2019-13011/): Information disclosure in gitlab:gitlab (medium 4.3)
- [CVE-2019-13010](https://insights.sbomify.com/CVE-2019-13010/): Denial of service in gitlab:gitlab (medium 5.9)
- [CVE-2019-1301](https://insights.sbomify.com/CVE-2019-1301/): High severity vulnerability that affects System.Management.Automation (high 7.5)
- [CVE-2019-13009](https://insights.sbomify.com/CVE-2019-13009/): Missing authorization in gitlab:gitlab (medium 6.5)
- [CVE-2019-13007](https://insights.sbomify.com/CVE-2019-13007/): Denial of service in gitlab:gitlab (medium 4.9)
- [CVE-2019-13006](https://insights.sbomify.com/CVE-2019-13006/): Missing authorization in gitlab:gitlab (medium 4.3)
- [CVE-2019-13005](https://insights.sbomify.com/CVE-2019-13005/): Missing authorization in gitlab:gitlab (medium 4.3)
- [CVE-2019-13004](https://insights.sbomify.com/CVE-2019-13004/): Denial of service in gitlab:gitlab (medium 5.3)
- [CVE-2019-13003](https://insights.sbomify.com/CVE-2019-13003/): Denial of service in gitlab:gitlab (high 7.5)
- [CVE-2019-13002](https://insights.sbomify.com/CVE-2019-13002/): Missing authorization in gitlab:gitlab (medium 4.3)
- [CVE-2019-13001](https://insights.sbomify.com/CVE-2019-13001/): Missing authorization in gitlab:gitlab (medium 4.3)
- [CVE-2019-13000](https://insights.sbomify.com/CVE-2019-13000/): Missing authorization in acinq:eclair (high 7.5)
- [CVE-2019-1300](https://insights.sbomify.com/CVE-2019-1300/): Out-of-bounds write (high 7.5)
- [CVE-2019-12999](https://insights.sbomify.com/CVE-2019-12999/): Improper Access Control in Lightning Network Daemon (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/126/