# Vulnerabilities published in 2019


- [CVE-2019-12998](https://insights.sbomify.com/CVE-2019-12998/): Missing authorization in elementsproject:c-lightning (high 7.5)
- [CVE-2019-12997](https://insights.sbomify.com/CVE-2019-12997/): Command injection in icon:loopchain (high 8.8)
- [CVE-2019-12996](https://insights.sbomify.com/CVE-2019-12996/): XML external entity in mendix:mendix (medium 5.3)
- [CVE-2019-12995](https://insights.sbomify.com/CVE-2019-12995/): Null dereference in istio:istio (high 7.5)
- [CVE-2019-12994](https://insights.sbomify.com/CVE-2019-12994/): Server-side request forgery in zohocorp:manageengine assetexplorer (critical 9.1)
- [CVE-2019-12992](https://insights.sbomify.com/CVE-2019-12992/): Command injection in citrix:netscaler sd-wan (high 8.8)
- [CVE-2019-12991](https://insights.sbomify.com/CVE-2019-12991/): Citrix SD-WAN and NetScaler Command Injection (high 8.8, exploited in the wild)
- [CVE-2019-12990](https://insights.sbomify.com/CVE-2019-12990/): Path traversal in citrix:netscaler sd-wan (critical 9.8)
- [CVE-2019-1299](https://insights.sbomify.com/CVE-2019-1299/): Information disclosure in Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems (medium 6.5)
- [CVE-2019-12989](https://insights.sbomify.com/CVE-2019-12989/): Citrix SD-WAN and NetScaler SQL Injection (critical 9.8, exploited in the wild)
- [CVE-2019-12988](https://insights.sbomify.com/CVE-2019-12988/): Command injection in citrix:netscaler sd-wan (critical 9.8)
- [CVE-2019-12987](https://insights.sbomify.com/CVE-2019-12987/): Command injection in citrix:netscaler sd-wan (critical 9.8)
- [CVE-2019-12986](https://insights.sbomify.com/CVE-2019-12986/): Command injection in citrix:netscaler sd-wan (critical 9.8)
- [CVE-2019-12985](https://insights.sbomify.com/CVE-2019-12985/): Command injection in citrix:netscaler sd-wan (critical 9.8)
- [CVE-2019-12984](https://insights.sbomify.com/CVE-2019-12984/): Null dereference in linux:linux kernel (medium 5.5)
- [CVE-2019-12982](https://insights.sbomify.com/CVE-2019-12982/): Memory corruption in libming:libming (medium 6.5)
- [CVE-2019-12981](https://insights.sbomify.com/CVE-2019-12981/): Memory corruption in libming:libming (high 8.8)
- [CVE-2019-12980](https://insights.sbomify.com/CVE-2019-12980/): Integer overflow in libming:libming (medium 6.5)
- [CVE-2019-1298](https://insights.sbomify.com/CVE-2019-1298/): Out-of-bounds write (high 7.5)
- [CVE-2019-12979](https://insights.sbomify.com/CVE-2019-12979/): Memory corruption in canonical:ubuntu linux (high 7.8)
- [CVE-2019-12978](https://insights.sbomify.com/CVE-2019-12978/): Memory corruption in imagemagick:imagemagick (high 7.8)
- [CVE-2019-12977](https://insights.sbomify.com/CVE-2019-12977/): Memory corruption in imagemagick:imagemagick (high 7.8)
- [CVE-2019-12976](https://insights.sbomify.com/CVE-2019-12976/): Denial of service in canonical:ubuntu linux (medium 5.5)
- [CVE-2019-12975](https://insights.sbomify.com/CVE-2019-12975/): Denial of service in canonical:ubuntu linux (medium 5.5)
- [CVE-2019-12974](https://insights.sbomify.com/CVE-2019-12974/): Null dereference in imagemagick:imagemagick (medium 5.5)
- [CVE-2019-12973](https://insights.sbomify.com/CVE-2019-12973/): Denial of service in debian:debian linux (medium 5.5)
- [CVE-2019-12972](https://insights.sbomify.com/CVE-2019-12972/): Memory corruption in canonical:ubuntu linux (medium 5.5)
- [CVE-2019-12971](https://insights.sbomify.com/CVE-2019-12971/): File upload in g-u:bks ebk ethernet-buskoppler pro firmware (critical 9.8)
- [CVE-2019-12970](https://insights.sbomify.com/CVE-2019-12970/): Cross-site scripting in squirrelmail:squirrelmail (medium 6.1)
- [CVE-2019-1297](https://insights.sbomify.com/CVE-2019-1297/): Microsoft Excel Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2019-12968](https://insights.sbomify.com/CVE-2019-12968/): Memory corruption in drdteam:doomseeker (medium 5.3)
- [CVE-2019-12967](https://insights.sbomify.com/CVE-2019-12967/): Information disclosure in themooltipass:moolticute (medium 6.5)
- [CVE-2019-12966](https://insights.sbomify.com/CVE-2019-12966/): Code injection in fehelper project:fehelper (critical 9.8)
- [CVE-2019-12964](https://insights.sbomify.com/CVE-2019-12964/): Cross-site scripting in livezilla:livezilla (medium 6.1)
- [CVE-2019-12963](https://insights.sbomify.com/CVE-2019-12963/): Cross-site scripting in livezilla:livezilla (medium 6.1)
- [CVE-2019-12962](https://insights.sbomify.com/CVE-2019-12962/): Cross-site scripting in livezilla:livezilla (medium 6.1)
- [CVE-2019-12961](https://insights.sbomify.com/CVE-2019-12961/): Code injection in livezilla:livezilla (high 8.8)
- [CVE-2019-12960](https://insights.sbomify.com/CVE-2019-12960/): SQL injection in livezilla:livezilla (critical 9.8)
- [CVE-2019-1296](https://insights.sbomify.com/CVE-2019-1296/): Code injection in Microsoft SharePoint Enterprise Server (high 8.8)
- [CVE-2019-12959](https://insights.sbomify.com/CVE-2019-12959/): Server-side request forgery in zohocorp:manageengine assetexplorer (high 8.8)
- [CVE-2019-12958](https://insights.sbomify.com/CVE-2019-12958/): Memory corruption in glyphandcog:xpdfreader (medium 5.5)
- [CVE-2019-12957](https://insights.sbomify.com/CVE-2019-12957/): Memory corruption in fedoraproject:fedora (high 7.8)
- [CVE-2019-12954](https://insights.sbomify.com/CVE-2019-12954/): Cross-site scripting in solarwinds:network performance monitor orion platform 2018 netpath (medium 5.4)
- [CVE-2019-12953](https://insights.sbomify.com/CVE-2019-12953/): Information disclosure in dropbear ssh project:dropbear ssh (medium 5.3)
- [CVE-2019-12951](https://insights.sbomify.com/CVE-2019-12951/): Memory corruption in cesanta:mongoose (critical 9.8)
- [CVE-2019-12950](https://insights.sbomify.com/CVE-2019-12950/): TeamPass Cross-site Scripting (XSS) (medium 5.4)
- [CVE-2019-1295](https://insights.sbomify.com/CVE-2019-1295/): Code injection in Microsoft SharePoint Enterprise Server (high 8.8)
- [CVE-2019-12949](https://insights.sbomify.com/CVE-2019-12949/): Cross-site scripting in netgate:pfsense (medium 6.1)
- [CVE-2019-12948](https://insights.sbomify.com/CVE-2019-12948/): Other in polycom:unified communications software (high 8.3)
- [CVE-2019-12946](https://insights.sbomify.com/CVE-2019-12946/): SQL injection in elcom:elcom cms (high 7.5)
- [CVE-2019-12944](https://insights.sbomify.com/CVE-2019-12944/): Missing authorization in gluehome:glue smart lock firmware (high 7.5)
- [CVE-2019-12943](https://insights.sbomify.com/CVE-2019-12943/): Auth bypass in ttlock:ttlock (high 8.1)
- [CVE-2019-12942](https://insights.sbomify.com/CVE-2019-12942/): Missing authorization in ttlock:ttlock (medium 6.5)
- [CVE-2019-12941](https://insights.sbomify.com/CVE-2019-12941/): Weak cryptography in autopi:4g\/lte firmware (critical 9.8)
- [CVE-2019-12940](https://insights.sbomify.com/CVE-2019-12940/): Denial of service in livezilla:livezilla (medium 5.9)
- [CVE-2019-1294](https://insights.sbomify.com/CVE-2019-1294/): Security feature bypass in Windows (medium 4.6)
- [CVE-2019-12939](https://insights.sbomify.com/CVE-2019-12939/): SQL injection in livezilla:livezilla (critical 9.8)
- [CVE-2019-12938](https://insights.sbomify.com/CVE-2019-12938/): Information disclosure in analogic:poste.io (medium 4.3)
- [CVE-2019-12937](https://insights.sbomify.com/CVE-2019-12937/): Memory corruption in toaruos project:toaruos (high 7.8)
- [CVE-2019-12936](https://insights.sbomify.com/CVE-2019-12936/): Security feature bypass in bluestacks:bluestacks app player (high 7.1)
- [CVE-2019-12935](https://insights.sbomify.com/CVE-2019-12935/): Shopware Cross-site Scripting Vulnerability (high 7.4)
- [CVE-2019-12934](https://insights.sbomify.com/CVE-2019-12934/): Cross-site request forgery in wp-code-highlightjs project:wp-code-highlightjs (high 8.8)
- [CVE-2019-12932](https://insights.sbomify.com/CVE-2019-12932/): Cross-site scripting in seeddms:seeddms (medium 6.1)
- [CVE-2019-12930](https://insights.sbomify.com/CVE-2019-12930/): Cross-site scripting in wikindx project:wikindx (medium 6.1)
- [CVE-2019-1293](https://insights.sbomify.com/CVE-2019-1293/): Information disclosure in Windows (medium 5.5)
- [CVE-2019-12929](https://insights.sbomify.com/CVE-2019-12929/): Command injection in qemu:qemu (critical 9.8)
- [CVE-2019-12928](https://insights.sbomify.com/CVE-2019-12928/): Command injection in qemu:qemu (critical 9.8)
- [CVE-2019-12927](https://insights.sbomify.com/CVE-2019-12927/): Cross-site scripting in mailenable:mailenable (medium 6.1)
- [CVE-2019-12926](https://insights.sbomify.com/CVE-2019-12926/): Missing authorization in mailenable:mailenable (high 8.8)
- [CVE-2019-12925](https://insights.sbomify.com/CVE-2019-12925/): Path traversal in mailenable:mailenable (high 8.1)
- [CVE-2019-12924](https://insights.sbomify.com/CVE-2019-12924/): XML external entity in mailenable:mailenable (critical 9.8)
- [CVE-2019-12923](https://insights.sbomify.com/CVE-2019-12923/): Cross-site request forgery in mailenable:mailenable (medium 6.5)
- [CVE-2019-12922](https://insights.sbomify.com/CVE-2019-12922/): phpMyAdmin Cross-Site Request Forgery (CSRF) (medium 6.5)
- [CVE-2019-12921](https://insights.sbomify.com/CVE-2019-12921/): Path traversal in debian:debian linux (medium 6.5)
- [CVE-2019-12920](https://insights.sbomify.com/CVE-2019-12920/): Hardcoded credentials in cylan:clever dog smart camera panorama dog-2w firmware (critical 9.8)
- [CVE-2019-1292](https://insights.sbomify.com/CVE-2019-1292/): Denial of service in Windows (medium 4.9)
- [CVE-2019-12919](https://insights.sbomify.com/CVE-2019-12919/): Missing authorization in cylan:clever dog smart camera panorama dog-2w firmware (medium 5.5)
- [CVE-2019-12918](https://insights.sbomify.com/CVE-2019-12918/): SQL injection in quest:kace systems management appliance (critical 9.8)
- [CVE-2019-12917](https://insights.sbomify.com/CVE-2019-12917/): Cross-site scripting in quest:kace systems management appliance (medium 6.1)
- [CVE-2019-12914](https://insights.sbomify.com/CVE-2019-12914/): Information disclosure in rdbrck:shift (high 7.5)
- [CVE-2019-12913](https://insights.sbomify.com/CVE-2019-12913/): Information disclosure in rdbrck:shift (medium 5.5)
- [CVE-2019-12912](https://insights.sbomify.com/CVE-2019-12912/): Information disclosure in rdbrck:shift (medium 5.5)
- [CVE-2019-12911](https://insights.sbomify.com/CVE-2019-12911/): Information disclosure in rdbrck:shift (high 7.5)
- [CVE-2019-1291](https://insights.sbomify.com/CVE-2019-1291/): Other in Windows (high 8.8)
- [CVE-2019-12905](https://insights.sbomify.com/CVE-2019-12905/): Cross-site scripting in afian:filerun (medium 6.1)
- [CVE-2019-12904](https://insights.sbomify.com/CVE-2019-12904/): Information disclosure in gnupg:libgcrypt (medium 5.9)
- [CVE-2019-12903](https://insights.sbomify.com/CVE-2019-12903/): Information disclosure in pydio:cells (medium 4.3)
- [CVE-2019-12902](https://insights.sbomify.com/CVE-2019-12902/): Missing authorization in pydio:cells (medium 6.5)
- [CVE-2019-12901](https://insights.sbomify.com/CVE-2019-12901/): Path traversal in pydio:cells (high 8.8)
- [CVE-2019-12900](https://insights.sbomify.com/CVE-2019-12900/): Memory corruption in bzip:bzip2 (critical 9.8)
- [CVE-2019-1290](https://insights.sbomify.com/CVE-2019-1290/): Other in Windows (high 8.8)
- [CVE-2019-12899](https://insights.sbomify.com/CVE-2019-12899/): Memory corruption in deltaww:devicenet builder (critical 9.8)
- [CVE-2019-12898](https://insights.sbomify.com/CVE-2019-12898/): Memory corruption in deltaww:devicenet builder (critical 9.8)
- [CVE-2019-12897](https://insights.sbomify.com/CVE-2019-12897/): Memory corruption in edrawsoft:edraw max (high 7.5)
- [CVE-2019-12896](https://insights.sbomify.com/CVE-2019-12896/): Memory corruption in edrawsoft:edraw max (high 7.5)
- [CVE-2019-12895](https://insights.sbomify.com/CVE-2019-12895/): Memory corruption in alternate-tools:alternate pic view (high 7.5)
- [CVE-2019-12894](https://insights.sbomify.com/CVE-2019-12894/): Memory corruption in alternate-tools:alternate pic view (high 7.5)
- [CVE-2019-12893](https://insights.sbomify.com/CVE-2019-12893/): Memory corruption in alternate-tools:alternate pic view (high 7.5)
- [CVE-2019-12890](https://insights.sbomify.com/CVE-2019-12890/): Missing authorization in redwoodhq:redwoodhq (critical 9.8)
- [CVE-2019-1289](https://insights.sbomify.com/CVE-2019-1289/): Privilege escalation in Windows (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/127/