# Vulnerabilities published in 2019


- [CVE-2019-10196](https://insights.sbomify.com/CVE-2019-10196/): Resource Exhaustion Denial of Service in http-proxy-agent (critical 9.8)
- [CVE-2019-10195](https://insights.sbomify.com/CVE-2019-10195/): FreeIPA logs passwords embedded in commands in calls using batch (medium 5.7)
- [CVE-2019-10194](https://insights.sbomify.com/CVE-2019-10194/): Information disclosure in ovirt-engine-metrics (medium 5.9)
- [CVE-2019-10193](https://insights.sbomify.com/CVE-2019-10193/): Memory corruption in redis (high 7.2)
- [CVE-2019-10192](https://insights.sbomify.com/CVE-2019-10192/): Memory corruption in redis (high 7.2)
- [CVE-2019-10191](https://insights.sbomify.com/CVE-2019-10191/): Security feature bypass in knot-resolver (medium 6.3)
- [CVE-2019-10190](https://insights.sbomify.com/CVE-2019-10190/): Security feature bypass in knot-resolver (medium 5.4)
- [CVE-2019-1019](https://insights.sbomify.com/CVE-2019-1019/): Microsoft Windows Security Feature Bypass Vulnerability (high 8.5)
- [CVE-2019-10189](https://insights.sbomify.com/CVE-2019-10189/): moodle Improper Access Control (medium 4.0)
- [CVE-2019-10188](https://insights.sbomify.com/CVE-2019-10188/): moodle Improper Access Control (medium 4.0)
- [CVE-2019-10187](https://insights.sbomify.com/CVE-2019-10187/): Moodle Ability to delete glossary entries that belong to another glossary (medium 4.0)
- [CVE-2019-10186](https://insights.sbomify.com/CVE-2019-10186/): Moodle CSRF Vulnerability (medium 6.5)
- [CVE-2019-10185](https://insights.sbomify.com/CVE-2019-10185/): Path traversal in icedtea-web (high 8.2)
- [CVE-2019-10184](https://insights.sbomify.com/CVE-2019-10184/): Undertow Missing Authorization when requesting a protected directory without trailing slash (medium 5.3)
- [CVE-2019-10183](https://insights.sbomify.com/CVE-2019-10183/): Information disclosure in virt-install (low 3.2)
- [CVE-2019-10182](https://insights.sbomify.com/CVE-2019-10182/): Path traversal in icedtea-web (high 8.2)
- [CVE-2019-10181](https://insights.sbomify.com/CVE-2019-10181/): Security feature bypass in icedtea-web (medium 6.3)
- [CVE-2019-10180](https://insights.sbomify.com/CVE-2019-10180/): Cross-site scripting in pki-core (low 2.4)
- [CVE-2019-1018](https://insights.sbomify.com/CVE-2019-1018/): DirectX Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2019-10179](https://insights.sbomify.com/CVE-2019-10179/): Cross-site scripting in pki-core/pki-kra (medium 4.3)
- [CVE-2019-10178](https://insights.sbomify.com/CVE-2019-10178/): Cross-site scripting in pki-core (medium 4.6)
- [CVE-2019-10177](https://insights.sbomify.com/CVE-2019-10177/): Cross-site scripting in CloudForms (medium 6.5)
- [CVE-2019-10176](https://insights.sbomify.com/CVE-2019-10176/): Cross-site request forgery in atomic-openshift (medium 4.2)
- [CVE-2019-10175](https://insights.sbomify.com/CVE-2019-10175/): Missing authorization in containerized-data-importer (medium 6.5)
- [CVE-2019-10174](https://insights.sbomify.com/CVE-2019-10174/): Use of Externally-Controlled Input to Select Classes or Code in Infinispan (high 7.5)
- [CVE-2019-10173](https://insights.sbomify.com/CVE-2019-10173/): Deserialization of Untrusted Data and Code Injection in xstream (high 7.3)
- [CVE-2019-10172](https://insights.sbomify.com/CVE-2019-10172/): Improper Restriction of XML External Entity Reference in jackson-mapper-asl (medium 5.9)
- [CVE-2019-10171](https://insights.sbomify.com/CVE-2019-10171/): Denial of service in 389-ds-base (high 7.5)
- [CVE-2019-10170](https://insights.sbomify.com/CVE-2019-10170/): Privilege Defined With Unsafe Actions in Keycloak (medium 6.6)
- [CVE-2019-1017](https://insights.sbomify.com/CVE-2019-1017/): Win32k Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2019-10169](https://insights.sbomify.com/CVE-2019-10169/): Keycloak code execution via UMA policy abuse (medium 6.6)
- [CVE-2019-10168](https://insights.sbomify.com/CVE-2019-10168/): Command injection in libvirt (high 8.8)
- [CVE-2019-10167](https://insights.sbomify.com/CVE-2019-10167/): Command injection in libvirt (high 8.8)
- [CVE-2019-10166](https://insights.sbomify.com/CVE-2019-10166/): Missing authorization in libvirt (high 7.8)
- [CVE-2019-10165](https://insights.sbomify.com/CVE-2019-10165/): Information disclosure in openshift (low 2.3)
- [CVE-2019-10164](https://insights.sbomify.com/CVE-2019-10164/): Memory corruption in PostgreSQL (high 7.5)
- [CVE-2019-10163](https://insights.sbomify.com/CVE-2019-10163/): Denial of service in pdns (low 3.5)
- [CVE-2019-10162](https://insights.sbomify.com/CVE-2019-10162/): Denial of service in pdns (low 3.5)
- [CVE-2019-10161](https://insights.sbomify.com/CVE-2019-10161/): Path traversal in libvirt (high 8.8)
- [CVE-2019-10160](https://insights.sbomify.com/CVE-2019-10160/): Information disclosure in python (critical 9.8)
- [CVE-2019-1016](https://insights.sbomify.com/CVE-2019-1016/): Windows GDI Information Disclosure Vulnerability (medium 4.7)
- [CVE-2019-10159](https://insights.sbomify.com/CVE-2019-10159/): Missing authorization in cfme (medium 4.3)
- [CVE-2019-10158](https://insights.sbomify.com/CVE-2019-10158/): Improper implementation of the session fixation protection in Infinispan (medium 5.4)
- [CVE-2019-10157](https://insights.sbomify.com/CVE-2019-10157/): Forced Logout in keycloak-connect (medium 4.7)
- [CVE-2019-10156](https://insights.sbomify.com/CVE-2019-10156/): Exposure of Sensitive Information to an Unauthorized Actor in ansible (medium 4.6)
- [CVE-2019-10155](https://insights.sbomify.com/CVE-2019-10155/): Security feature bypass in libreswan (low 3.1)
- [CVE-2019-10154](https://insights.sbomify.com/CVE-2019-10154/): Moodle all messaging conversations could be viewed (medium 6.5)
- [CVE-2019-10153](https://insights.sbomify.com/CVE-2019-10153/): Denial of service in fence-agents (medium 5.0)
- [CVE-2019-10152](https://insights.sbomify.com/CVE-2019-10152/): Podman Path Traversal Vulnerability leads to arbitrary file read/write (high 7.5)
- [CVE-2019-10150](https://insights.sbomify.com/CVE-2019-10150/): Security feature bypass in atomic-openshift (medium 5.9)
- [CVE-2019-1015](https://insights.sbomify.com/CVE-2019-1015/): Windows GDI Information Disclosure Vulnerability (medium 4.7)
- [CVE-2019-10149](https://insights.sbomify.com/CVE-2019-10149/): Exim Mail Transfer Agent (MTA) Improper Input Validation (critical 9.0, exploited in the wild)
- [CVE-2019-10147](https://insights.sbomify.com/CVE-2019-10147/): Security feature bypass in rkt (medium 4.7)
- [CVE-2019-10146](https://insights.sbomify.com/CVE-2019-10146/): Cross-site scripting in pki-core (medium 4.7)
- [CVE-2019-10145](https://insights.sbomify.com/CVE-2019-10145/): Security feature bypass in rkt (high 7.0)
- [CVE-2019-10144](https://insights.sbomify.com/CVE-2019-10144/): Privilege escalation in rkt (high 7.0)
- [CVE-2019-10143](https://insights.sbomify.com/CVE-2019-10143/): Privilege escalation in freeradius (medium 6.4)
- [CVE-2019-10142](https://insights.sbomify.com/CVE-2019-10142/): Integer overflow in kernel (high 7.1)
- [CVE-2019-10141](https://insights.sbomify.com/CVE-2019-10141/): Openstack ironic-inspector has SQL injection vulnerability in node_cache (high 8.3)
- [CVE-2019-10140](https://insights.sbomify.com/CVE-2019-10140/): Null dereference in kernel: (medium 5.5)
- [CVE-2019-1014](https://insights.sbomify.com/CVE-2019-1014/): Win32k Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2019-10139](https://insights.sbomify.com/CVE-2019-10139/): Information disclosure in cockpit-ovirt (medium 5.6)
- [CVE-2019-10138](https://insights.sbomify.com/CVE-2019-10138/): Improper Access Control in novajoin (high 7.1)
- [CVE-2019-10137](https://insights.sbomify.com/CVE-2019-10137/): Path traversal in spacewalk-proxy (high 8.1)
- [CVE-2019-10136](https://insights.sbomify.com/CVE-2019-10136/): Weak cryptography in spacewalk (medium 4.3)
- [CVE-2019-10135](https://insights.sbomify.com/CVE-2019-10135/): Deserialization in osbs-client (high 7.2)
- [CVE-2019-10134](https://insights.sbomify.com/CVE-2019-10134/): Moodle Private files uploaded via incoming mail processing could bypass quota restrictions (medium 4.2)
- [CVE-2019-10133](https://insights.sbomify.com/CVE-2019-10133/): Moodle Open Redirect Vulnerability (low 3.1)
- [CVE-2019-10132](https://insights.sbomify.com/CVE-2019-10132/): Misconfiguration in libvirt (high 8.8)
- [CVE-2019-10131](https://insights.sbomify.com/CVE-2019-10131/): Memory corruption in ImageMagick (medium 6.5)
- [CVE-2019-10130](https://insights.sbomify.com/CVE-2019-10130/): Security feature bypass in postgresql (low 3.1)
- [CVE-2019-1013](https://insights.sbomify.com/CVE-2019-1013/): Windows GDI Information Disclosure Vulnerability (medium 4.7)
- [CVE-2019-10129](https://insights.sbomify.com/CVE-2019-10129/): Memory corruption in postgresql (medium 6.5)
- [CVE-2019-10128](https://insights.sbomify.com/CVE-2019-10128/): Misconfiguration in postgresql (high 7.8)
- [CVE-2019-10127](https://insights.sbomify.com/CVE-2019-10127/): Misconfiguration in postgresql (high 8.8)
- [CVE-2019-10126](https://insights.sbomify.com/CVE-2019-10126/): Memory corruption in kernel (medium 5.9)
- [CVE-2019-10125](https://insights.sbomify.com/CVE-2019-10125/): Use after free in linux:linux kernel (critical 9.8)
- [CVE-2019-10123](https://insights.sbomify.com/CVE-2019-10123/): SQL injection in ais:logistic software (critical 9.8)
- [CVE-2019-10122](https://insights.sbomify.com/CVE-2019-10122/): Memory corruption in eq-3:ccu2 firmware (critical 9.8)
- [CVE-2019-10121](https://insights.sbomify.com/CVE-2019-10121/): Auth bypass in eq-3:ccu2 firmware (critical 9.8)
- [CVE-2019-10120](https://insights.sbomify.com/CVE-2019-10120/): Auth bypass in eq-3:ccu2 firmware (high 8.8)
- [CVE-2019-1012](https://insights.sbomify.com/CVE-2019-1012/): Windows GDI Information Disclosure Vulnerability (medium 4.7)
- [CVE-2019-10119](https://insights.sbomify.com/CVE-2019-10119/): Auth bypass in eq-3:ccu2 firmware (critical 9.8)
- [CVE-2019-10118](https://insights.sbomify.com/CVE-2019-10118/): Snipe-IT XSS Vulnerability (medium 6.1)
- [CVE-2019-10117](https://insights.sbomify.com/CVE-2019-10117/): Open redirect in gitlab:gitlab (medium 6.1)
- [CVE-2019-10116](https://insights.sbomify.com/CVE-2019-10116/): Missing authorization in gitlab:gitlab (medium 4.3)
- [CVE-2019-10115](https://insights.sbomify.com/CVE-2019-10115/): Missing authorization in gitlab:gitlab (medium 6.5)
- [CVE-2019-10114](https://insights.sbomify.com/CVE-2019-10114/): Information disclosure in gitlab:gitlab (high 7.5)
- [CVE-2019-10113](https://insights.sbomify.com/CVE-2019-10113/): Denial of service in gitlab:gitlab (high 7.5)
- [CVE-2019-10112](https://insights.sbomify.com/CVE-2019-10112/): Weak cryptography in gitlab:gitlab (high 7.5)
- [CVE-2019-10111](https://insights.sbomify.com/CVE-2019-10111/): Cross-site scripting in gitlab:gitlab (medium 5.4)
- [CVE-2019-10110](https://insights.sbomify.com/CVE-2019-10110/): Missing authorization in gitlab:gitlab (medium 6.5)
- [CVE-2019-1011](https://insights.sbomify.com/CVE-2019-1011/): Windows GDI Information Disclosure Vulnerability (medium 4.7)
- [CVE-2019-10109](https://insights.sbomify.com/CVE-2019-10109/): Information disclosure in gitlab:gitlab (medium 5.3)
- [CVE-2019-10108](https://insights.sbomify.com/CVE-2019-10108/): Missing authorization in gitlab:gitlab (medium 5.4)
- [CVE-2019-10107](https://insights.sbomify.com/CVE-2019-10107/): Cross-site scripting in cmsmadesimple:cms made simple (medium 5.4)
- [CVE-2019-10106](https://insights.sbomify.com/CVE-2019-10106/): Cross-site scripting in cmsmadesimple:cms made simple (medium 5.4)
- [CVE-2019-10105](https://insights.sbomify.com/CVE-2019-10105/): Cross-site scripting in cmsmadesimple:cms made simple (medium 5.4)
- [CVE-2019-10104](https://insights.sbomify.com/CVE-2019-10104/): Misconfiguration in jetbrains:intellij idea (critical 9.8)
- [CVE-2019-1010319](https://insights.sbomify.com/CVE-2019-1010319/): Memory corruption in WavPack (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/152/