# Vulnerabilities published in 2019


- [CVE-2019-1010317](https://insights.sbomify.com/CVE-2019-1010317/): Memory corruption in WavPack (medium 5.5)
- [CVE-2019-1010316](https://insights.sbomify.com/CVE-2019-1010316/): Security feature bypass in pyxtrlock (high 7.8)
- [CVE-2019-1010315](https://insights.sbomify.com/CVE-2019-1010315/): Denial of service in WavPack (medium 5.5)
- [CVE-2019-1010314](https://insights.sbomify.com/CVE-2019-1010314/): Gitea XSS Vulnerability in Repository Description (medium 6.1)
- [CVE-2019-1010310](https://insights.sbomify.com/CVE-2019-1010310/): Cross-site scripting in GLPI Product (low 3.5)
- [CVE-2019-1010308](https://insights.sbomify.com/CVE-2019-1010308/): Information disclosure in Aquarius CMS (critical 9.8)
- [CVE-2019-1010307](https://insights.sbomify.com/CVE-2019-1010307/): Cross-site scripting in GLPI Product (medium 5.4)
- [CVE-2019-1010306](https://insights.sbomify.com/CVE-2019-1010306/): Slanger Arbitrary command execution (critical 9.8)
- [CVE-2019-1010305](https://insights.sbomify.com/CVE-2019-1010305/): Memory corruption in libmspack (medium 5.5)
- [CVE-2019-1010304](https://insights.sbomify.com/CVE-2019-1010304/): Missing authorization in Saleor (medium 5.3)
- [CVE-2019-1010302](https://insights.sbomify.com/CVE-2019-1010302/): Memory corruption in jhead (medium 5.5)
- [CVE-2019-1010301](https://insights.sbomify.com/CVE-2019-1010301/): Memory corruption in jhead (medium 5.5)
- [CVE-2019-1010300](https://insights.sbomify.com/CVE-2019-1010300/): Memory corruption in libiec61850 (high 7.5)
- [CVE-2019-10103](https://insights.sbomify.com/CVE-2019-10103/): Weak cryptography in jetbrains:kotlin (high 8.1)
- [CVE-2019-1010299](https://insights.sbomify.com/CVE-2019-1010299/): Information disclosure in Standard Library (medium 5.3)
- [CVE-2019-1010298](https://insights.sbomify.com/CVE-2019-1010298/): Memory corruption in OP-TEE (critical 9.8)
- [CVE-2019-1010297](https://insights.sbomify.com/CVE-2019-1010297/): Memory corruption in OP-TEE (critical 9.8)
- [CVE-2019-1010296](https://insights.sbomify.com/CVE-2019-1010296/): Memory corruption in OP-TEE (critical 9.8)
- [CVE-2019-1010295](https://insights.sbomify.com/CVE-2019-1010295/): Memory corruption in OP-TEE (critical 9.8)
- [CVE-2019-1010294](https://insights.sbomify.com/CVE-2019-1010294/): Information disclosure in OP-TEE (high 7.5)
- [CVE-2019-1010293](https://insights.sbomify.com/CVE-2019-1010293/): Memory corruption in OP-TEE (critical 9.8)
- [CVE-2019-1010292](https://insights.sbomify.com/CVE-2019-1010292/): Memory corruption in OP-TEE (critical 9.8)
- [CVE-2019-1010290](https://insights.sbomify.com/CVE-2019-1010290/): Open redirect in Babel (medium 6.1)
- [CVE-2019-1010287](https://insights.sbomify.com/CVE-2019-1010287/): Cross-site scripting in Timesheet Next Gen (medium 6.1)
- [CVE-2019-1010283](https://insights.sbomify.com/CVE-2019-1010283/): Information disclosure in univention-directory-notifier (high 7.5)
- [CVE-2019-1010279](https://insights.sbomify.com/CVE-2019-1010279/): Security feature bypass in Suricata (high 7.5)
- [CVE-2019-1010275](https://insights.sbomify.com/CVE-2019-1010275/): Helm Improper Certificate Validation (critical 9.8)
- [CVE-2019-1010268](https://insights.sbomify.com/CVE-2019-1010268/): Improper Restriction of XML External Entity Reference in ladon (critical 9.8)
- [CVE-2019-1010266](https://insights.sbomify.com/CVE-2019-1010266/): Regular Expression Denial of Service (ReDoS) in lodash (medium 6.5)
- [CVE-2019-1010263](https://insights.sbomify.com/CVE-2019-1010263/): Auth bypass in Perl Crypt::JWT (critical 9.8)
- [CVE-2019-1010261](https://insights.sbomify.com/CVE-2019-1010261/): Gitea XSS Vulnerability (medium 6.1)
- [CVE-2019-1010260](https://insights.sbomify.com/CVE-2019-1010260/): High severity vulnerability that affects com.github.shyiko.ktlint:ktlint-core (high 8.1)
- [CVE-2019-1010259](https://insights.sbomify.com/CVE-2019-1010259/): SaltStack Salt SQL Injection vulnerability in mysql.user_chpass function (critical 9.8)
- [CVE-2019-1010258](https://insights.sbomify.com/CVE-2019-1010258/): Memory corruption in nanosvg (medium 6.5)
- [CVE-2019-1010257](https://insights.sbomify.com/CVE-2019-1010257/): Path traversal in article2pdf Wordpress plug-in (critical 9.1)
- [CVE-2019-1010252](https://insights.sbomify.com/CVE-2019-1010252/): Other in ONOS (medium 4.9)
- [CVE-2019-1010251](https://insights.sbomify.com/CVE-2019-1010251/): Security feature bypass in Suricata (high 7.5)
- [CVE-2019-1010250](https://insights.sbomify.com/CVE-2019-1010250/): Other in ONOS (medium 4.9)
- [CVE-2019-1010249](https://insights.sbomify.com/CVE-2019-1010249/): Integer overflow in ONOS (medium 4.9)
- [CVE-2019-1010248](https://insights.sbomify.com/CVE-2019-1010248/): SQL injection in I-doit (critical 9.8)
- [CVE-2019-1010247](https://insights.sbomify.com/CVE-2019-1010247/): Cross-site scripting in mod auth openidc (medium 6.1)
- [CVE-2019-1010246](https://insights.sbomify.com/CVE-2019-1010246/): Missing authorization in MailCleaner (high 7.5)
- [CVE-2019-1010245](https://insights.sbomify.com/CVE-2019-1010245/): Command injection in ONOS SDN Controller (critical 9.8)
- [CVE-2019-1010241](https://insights.sbomify.com/CVE-2019-1010241/): Jenkins Credentials Binding Plugin Stores Passwords in a Recoverable Format (medium 6.5)
- [CVE-2019-1010239](https://insights.sbomify.com/CVE-2019-1010239/): Null dereference in cJSON (high 7.5)
- [CVE-2019-1010238](https://insights.sbomify.com/CVE-2019-1010238/): Memory corruption in Pango (critical 9.8)
- [CVE-2019-1010237](https://insights.sbomify.com/CVE-2019-1010237/): Cross-site scripting in Ilias (medium 6.1)
- [CVE-2019-1010235](https://insights.sbomify.com/CVE-2019-1010235/): Cross-site scripting in Frog CMS (medium 5.4)
- [CVE-2019-1010234](https://insights.sbomify.com/CVE-2019-1010234/): Command injection in ONOS (critical 9.8)
- [CVE-2019-1010232](https://insights.sbomify.com/CVE-2019-1010232/): Memory corruption in juniper/libslax (medium 6.5)
- [CVE-2019-1010228](https://insights.sbomify.com/CVE-2019-1010228/): Memory corruption in DCMTK (critical 9.8)
- [CVE-2019-1010221](https://insights.sbomify.com/CVE-2019-1010221/): Privilege escalation in LineageOS (medium 6.8)
- [CVE-2019-1010220](https://insights.sbomify.com/CVE-2019-1010220/): Memory corruption in tcpdump (low 3.3)
- [CVE-2019-1010218](https://insights.sbomify.com/CVE-2019-1010218/): Memory corruption in Latest Cherokee Web server (high 7.5)
- [CVE-2019-1010209](https://insights.sbomify.com/CVE-2019-1010209/): File upload in GoURL Wordpress Plugin (high 7.5)
- [CVE-2019-1010208](https://insights.sbomify.com/CVE-2019-1010208/): Memory corruption in Veracrypt, Truecrypt (low 3.3)
- [CVE-2019-1010207](https://insights.sbomify.com/CVE-2019-1010207/): Cross-site scripting in Pie Register (medium 6.1)
- [CVE-2019-1010206](https://insights.sbomify.com/CVE-2019-1010206/): kevinsawicki/http-request Missing certificate validation (medium 5.9)
- [CVE-2019-1010205](https://insights.sbomify.com/CVE-2019-1010205/): Path traversal in hublin (high 7.5)
- [CVE-2019-1010204](https://insights.sbomify.com/CVE-2019-1010204/): Memory corruption in gold (medium 5.5)
- [CVE-2019-1010202](https://insights.sbomify.com/CVE-2019-1010202/): XML external entity in Jeesite (medium 6.5)
- [CVE-2019-1010201](https://insights.sbomify.com/CVE-2019-1010201/): SQL injection in Jeesite (medium 6.5)
- [CVE-2019-1010200](https://insights.sbomify.com/CVE-2019-1010200/): Command injection in Voice Builder (critical 9.8)
- [CVE-2019-10102](https://insights.sbomify.com/CVE-2019-10102/): Weak cryptography in jetbrains:kotlin (high 8.1)
- [CVE-2019-1010199](https://insights.sbomify.com/CVE-2019-1010199/): Cross site scripting attack in ServiceStack Framework (medium 6.1)
- [CVE-2019-1010193](https://insights.sbomify.com/CVE-2019-1010193/): Cross-site scripting in hisiphp (medium 6.1)
- [CVE-2019-1010191](https://insights.sbomify.com/CVE-2019-1010191/): SQL Injection in marginalia (critical 9.8)
- [CVE-2019-1010190](https://insights.sbomify.com/CVE-2019-1010190/): Memory corruption in mgetty (medium 5.5)
- [CVE-2019-1010189](https://insights.sbomify.com/CVE-2019-1010189/): Denial of service in mgetty (medium 5.5)
- [CVE-2019-1010183](https://insights.sbomify.com/CVE-2019-1010183/): Denial of service in serde yaml (medium 6.5)
- [CVE-2019-1010182](https://insights.sbomify.com/CVE-2019-1010182/): Denial of service in yaml-rust (medium 6.5)
- [CVE-2019-1010180](https://insights.sbomify.com/CVE-2019-1010180/): Memory corruption in gdb (high 7.8)
- [CVE-2019-1010179](https://insights.sbomify.com/CVE-2019-1010179/): Command injection in PHKP (critical 9.8)
- [CVE-2019-1010178](https://insights.sbomify.com/CVE-2019-1010178/): File upload in MODX Revolution (critical 9.8)
- [CVE-2019-1010177](https://insights.sbomify.com/CVE-2019-1010177/): Use after free in Jsi (critical 9.8)
- [CVE-2019-1010176](https://insights.sbomify.com/CVE-2019-1010176/): Memory corruption in JerryScript (critical 9.8)
- [CVE-2019-1010174](https://insights.sbomify.com/CVE-2019-1010174/): Command injection in The CImg Library (critical 9.8)
- [CVE-2019-1010173](https://insights.sbomify.com/CVE-2019-1010173/): Denial of service in Jsi (high 7.5)
- [CVE-2019-1010172](https://insights.sbomify.com/CVE-2019-1010172/): Denial of service in Jsish (high 7.5)
- [CVE-2019-1010171](https://insights.sbomify.com/CVE-2019-1010171/): Null dereference in Jsi (high 7.5)
- [CVE-2019-1010170](https://insights.sbomify.com/CVE-2019-1010170/): Use after free in Jsi (high 7.5)
- [CVE-2019-1010169](https://insights.sbomify.com/CVE-2019-1010169/): Memory corruption in Jsi (high 7.5)
- [CVE-2019-1010163](https://insights.sbomify.com/CVE-2019-1010163/): Memory corruption in Photo 2 Video Converter (high 7.8)
- [CVE-2019-1010162](https://insights.sbomify.com/CVE-2019-1010162/): Null dereference in jsi (medium 5.5)
- [CVE-2019-1010161](https://insights.sbomify.com/CVE-2019-1010161/): Auth bypass in perl-CRYPT-JWT (critical 9.8)
- [CVE-2019-1010155](https://insights.sbomify.com/CVE-2019-1010155/): Auth bypass in DSL-2750U (critical 9.1)
- [CVE-2019-1010153](https://insights.sbomify.com/CVE-2019-1010153/): SQL injection in zzcms (critical 9.8)
- [CVE-2019-1010152](https://insights.sbomify.com/CVE-2019-1010152/): Missing authorization in zzcms (critical 9.8)
- [CVE-2019-1010151](https://insights.sbomify.com/CVE-2019-1010151/): Path traversal in zzmcms (critical 9.8)
- [CVE-2019-1010150](https://insights.sbomify.com/CVE-2019-1010150/): Missing authorization in zzcms (critical 9.8)
- [CVE-2019-1010149](https://insights.sbomify.com/CVE-2019-1010149/): Missing authorization in zzcms (critical 9.8)
- [CVE-2019-1010148](https://insights.sbomify.com/CVE-2019-1010148/): SQL injection in zzcms (critical 9.8)
- [CVE-2019-1010147](https://insights.sbomify.com/CVE-2019-1010147/): Cross-site scripting in Smart Reporting (medium 5.4)
- [CVE-2019-1010142](https://insights.sbomify.com/CVE-2019-1010142/): Infinite Loop in scapy (high 7.5)
- [CVE-2019-1010136](https://insights.sbomify.com/CVE-2019-1010136/): Missing authorization in GPN2.4P21-C-CN (high 7.5)
- [CVE-2019-1010127](https://insights.sbomify.com/CVE-2019-1010127/): Use after free in vcftools (high 7.8)
- [CVE-2019-1010124](https://insights.sbomify.com/CVE-2019-1010124/): Cross-site scripting in WooCommerce Product Feed (medium 5.4)
- [CVE-2019-1010123](https://insights.sbomify.com/CVE-2019-1010123/): File upload in Gallery (high 7.5)
- [CVE-2019-1010113](https://insights.sbomify.com/CVE-2019-1010113/): Cross-site scripting in CLEditor (medium 6.1)
- [CVE-2019-1010112](https://insights.sbomify.com/CVE-2019-1010112/): Cross-site request forgery in OECMS (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/153/