# Vulnerabilities published in 2019


- [CVE-2019-1010104](https://insights.sbomify.com/CVE-2019-1010104/): SQL injection in Quick Chat WordPress Plugin (critical 9.8)
- [CVE-2019-1010101](https://insights.sbomify.com/CVE-2019-1010101/): Misconfiguration in Rufus (critical 9.8)
- [CVE-2019-1010100](https://insights.sbomify.com/CVE-2019-1010100/): Privilege escalation in Rufus (high 7.8)
- [CVE-2019-10101](https://insights.sbomify.com/CVE-2019-10101/): Weak cryptography in jetbrains:kotlin (high 8.1)
- [CVE-2019-1010096](https://insights.sbomify.com/CVE-2019-1010096/): Cross-site request forgery in DomainMOD (high 8.8)
- [CVE-2019-1010095](https://insights.sbomify.com/CVE-2019-1010095/): Cross-site request forgery in DomainMOD (high 8.8)
- [CVE-2019-1010094](https://insights.sbomify.com/CVE-2019-1010094/): Cross-site request forgery in DomainMOD (high 8.8)
- [CVE-2019-1010091](https://insights.sbomify.com/CVE-2019-1010091/): XSS in TinyMCE (medium 6.1)
- [CVE-2019-1010084](https://insights.sbomify.com/CVE-2019-1010084/): Missing authorization in Dancer::Plugin::SimpleCRUD (medium 6.5)
- [CVE-2019-1010083](https://insights.sbomify.com/CVE-2019-1010083/): Pallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage (high 7.5)
- [CVE-2019-1010069](https://insights.sbomify.com/CVE-2019-1010069/): Memory corruption in abcm2ps (medium 5.5)
- [CVE-2019-1010066](https://insights.sbomify.com/CVE-2019-1010066/): Missing authorization in msr-safe (high 7.5)
- [CVE-2019-1010065](https://insights.sbomify.com/CVE-2019-1010065/): Integer overflow in The Sleuth Kit (medium 6.5)
- [CVE-2019-1010062](https://insights.sbomify.com/CVE-2019-1010062/): File upload in PluckCMS (critical 9.8)
- [CVE-2019-1010060](https://insights.sbomify.com/CVE-2019-1010060/): Memory corruption in CFITSIO (critical 9.8)
- [CVE-2019-1010057](https://insights.sbomify.com/CVE-2019-1010057/): Memory corruption in nfdump (high 7.8)
- [CVE-2019-1010054](https://insights.sbomify.com/CVE-2019-1010054/): Dolibarr Cross Site Request Forgery (CSRF) (high 8.8)
- [CVE-2019-1010044](https://insights.sbomify.com/CVE-2019-1010044/): Memory corruption in borg-reducer (critical 9.8)
- [CVE-2019-1010043](https://insights.sbomify.com/CVE-2019-1010043/): Memory corruption in Quake3e (critical 9.8)
- [CVE-2019-1010039](https://insights.sbomify.com/CVE-2019-1010039/): Memory corruption in uLaunchELF (critical 9.8)
- [CVE-2019-1010038](https://insights.sbomify.com/CVE-2019-1010038/): Memory corruption in OMCompiler (critical 9.8)
- [CVE-2019-1010034](https://insights.sbomify.com/CVE-2019-1010034/): SQL injection in WebLibrarian (medium 6.5)
- [CVE-2019-1010028](https://insights.sbomify.com/CVE-2019-1010028/): Cross-site scripting in School College Portal with ERP Script (medium 6.1)
- [CVE-2019-1010025](https://insights.sbomify.com/CVE-2019-1010025/): Information disclosure in glibc (medium 5.3)
- [CVE-2019-1010024](https://insights.sbomify.com/CVE-2019-1010024/): Information disclosure in glibc (medium 5.3)
- [CVE-2019-1010023](https://insights.sbomify.com/CVE-2019-1010023/): Other in glibc (medium 5.4)
- [CVE-2019-1010022](https://insights.sbomify.com/CVE-2019-1010022/): Security feature bypass in glibc (critical 9.8)
- [CVE-2019-1010018](https://insights.sbomify.com/CVE-2019-1010018/): Cross-site scripting in Zammad (medium 6.1)
- [CVE-2019-1010017](https://insights.sbomify.com/CVE-2019-1010017/): XML Injection in python-libnmap (high 7.5)
- [CVE-2019-1010016](https://insights.sbomify.com/CVE-2019-1010016/): Dolibarr Cross Site Scripting (XSS) (medium 6.1)
- [CVE-2019-1010009](https://insights.sbomify.com/CVE-2019-1010009/): Misconfiguration in DGLux Server (critical 9.8)
- [CVE-2019-1010008](https://insights.sbomify.com/CVE-2019-1010008/): Cross-site scripting in Emoncms (medium 5.4)
- [CVE-2019-1010006](https://insights.sbomify.com/CVE-2019-1010006/): Integer overflow in Evince (high 7.8)
- [CVE-2019-1010005](https://insights.sbomify.com/CVE-2019-1010005/): Cross-site scripting in HexoEditor (medium 6.1)
- [CVE-2019-1010004](https://insights.sbomify.com/CVE-2019-1010004/): Memory corruption in SoX - Sound eXchange (medium 5.5)
- [CVE-2019-1010003](https://insights.sbomify.com/CVE-2019-1010003/): Cross-site scripting in Leanote (medium 6.1)
- [CVE-2019-10100](https://insights.sbomify.com/CVE-2019-10100/): Code injection in jetbrains:youtrack integration (critical 9.8)
- [CVE-2019-1010](https://insights.sbomify.com/CVE-2019-1010/): Windows GDI Information Disclosure Vulnerability (medium 4.7)
- [CVE-2019-10099](https://insights.sbomify.com/CVE-2019-10099/): Sensitive data written to disk unencrypted in Spark (high 7.5)
- [CVE-2019-10098](https://insights.sbomify.com/CVE-2019-10098/): Open redirect in Apache HTTP Server (medium 6.1)
- [CVE-2019-10097](https://insights.sbomify.com/CVE-2019-10097/): Memory corruption in Apache HTTP Server (high 7.2)
- [CVE-2019-10095](https://insights.sbomify.com/CVE-2019-10095/): bash command injection in spark interpreter (critical 9.8)
- [CVE-2019-10094](https://insights.sbomify.com/CVE-2019-10094/): Allocation of Resources Without Limits or Throttling in Apache Tika (high 7.8)
- [CVE-2019-10093](https://insights.sbomify.com/CVE-2019-10093/): Allocation of Resources Without Limits or Throttling in Apache Tika (medium 6.5)
- [CVE-2019-10092](https://insights.sbomify.com/CVE-2019-10092/): Cross-site scripting in Apache HTTP Server (medium 6.1)
- [CVE-2019-10091](https://insights.sbomify.com/CVE-2019-10091/): Apache Geode SSL endpoint verification vulnerability (high 7.4)
- [CVE-2019-10090](https://insights.sbomify.com/CVE-2019-10090/): Cross-site scripting in Apache JSPWiki (medium 6.1)
- [CVE-2019-1009](https://insights.sbomify.com/CVE-2019-1009/): Windows GDI Information Disclosure Vulnerability (medium 4.7)
- [CVE-2019-10089](https://insights.sbomify.com/CVE-2019-10089/): Cross-site scripting in Apache JSPWiki (medium 6.1)
- [CVE-2019-10088](https://insights.sbomify.com/CVE-2019-10088/): Allocation of Resources Without Limits or Throttling in Apache Tika (high 8.8)
- [CVE-2019-10087](https://insights.sbomify.com/CVE-2019-10087/): Cross-site scripting in Apache JSPWiki (medium 6.1)
- [CVE-2019-10086](https://insights.sbomify.com/CVE-2019-10086/): Insecure Deserialization in Apache Commons Beanutils (high 7.3)
- [CVE-2019-10085](https://insights.sbomify.com/CVE-2019-10085/): Cross-site scripting in Apache Allura (medium 6.1)
- [CVE-2019-10084](https://insights.sbomify.com/CVE-2019-10084/): Auth bypass in Impala (high 7.5)
- [CVE-2019-10083](https://insights.sbomify.com/CVE-2019-10083/): Apache NiFi process group information disclosure (medium 5.3)
- [CVE-2019-10082](https://insights.sbomify.com/CVE-2019-10082/): Use after free in Apache HTTP Server (critical 9.1)
- [CVE-2019-10081](https://insights.sbomify.com/CVE-2019-10081/): Memory corruption in Apache HTTP Server (high 7.5)
- [CVE-2019-10080](https://insights.sbomify.com/CVE-2019-10080/): Apache NiFi information disclosure by XXE (medium 6.5)
- [CVE-2019-1008](https://insights.sbomify.com/CVE-2019-1008/): Security feature bypass in Microsoft Dynamics 365 (on-premises) (medium 5.9)
- [CVE-2019-10079](https://insights.sbomify.com/CVE-2019-10079/): Denial of service in Apache Traffic Server (high 7.5)
- [CVE-2019-10078](https://insights.sbomify.com/CVE-2019-10078/): Cross-site Scriptin in JSPWiki (medium 6.1)
- [CVE-2019-10077](https://insights.sbomify.com/CVE-2019-10077/): Cross-site Scripting in JSPWiki (medium 6.1)
- [CVE-2019-10076](https://insights.sbomify.com/CVE-2019-10076/): Cross-Site Scripting in JSPWiki (medium 6.1)
- [CVE-2019-10074](https://insights.sbomify.com/CVE-2019-10074/): Code injection in OFBiz (critical 9.8)
- [CVE-2019-10073](https://insights.sbomify.com/CVE-2019-10073/): Cross-site scripting in OFBiz (medium 6.1)
- [CVE-2019-10072](https://insights.sbomify.com/CVE-2019-10072/): Improper Locking in Apache Tomcat (high 7.5)
- [CVE-2019-10071](https://insights.sbomify.com/CVE-2019-10071/): Timing attack on HMAC signature comparison in Apache Tapestry (critical 9.8)
- [CVE-2019-10070](https://insights.sbomify.com/CVE-2019-10070/): Stored XSS in Apache Atlas (medium 6.1)
- [CVE-2019-1007](https://insights.sbomify.com/CVE-2019-1007/): Windows Audio Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2019-10069](https://insights.sbomify.com/CVE-2019-10069/): Deserialization in godotengine:godot (critical 9.8)
- [CVE-2019-10068](https://insights.sbomify.com/CVE-2019-10068/): Kentico Xperience Deserialization of Untrusted Data (critical 9.8, exploited in the wild)
- [CVE-2019-10067](https://insights.sbomify.com/CVE-2019-10067/): Cross-site scripting in otrs:otrs (medium 5.4)
- [CVE-2019-10066](https://insights.sbomify.com/CVE-2019-10066/): Cross-site scripting in otrs:otrs (medium 5.4)
- [CVE-2019-10065](https://insights.sbomify.com/CVE-2019-10065/): Information disclosure in otrs:otrs (medium 4.3)
- [CVE-2019-10064](https://insights.sbomify.com/CVE-2019-10064/): Weak cryptography in debian:debian linux (high 7.5)
- [CVE-2019-10063](https://insights.sbomify.com/CVE-2019-10063/): Security feature bypass in flatpak:flatpak (critical 9.0)
- [CVE-2019-10062](https://insights.sbomify.com/CVE-2019-10062/): Cross-site Scripting in aurelia-framework (medium 6.1)
- [CVE-2019-10061](https://insights.sbomify.com/CVE-2019-10061/): OS Command Injection in node-opencv (critical 9.8)
- [CVE-2019-10060](https://insights.sbomify.com/CVE-2019-10060/): Memory corruption in verifone:verix multi-app conductor (high 8.1)
- [CVE-2019-1006](https://insights.sbomify.com/CVE-2019-1006/): Auth bypass in Microsoft .NET Framework 2.0 (high 7.5)
- [CVE-2019-10059](https://insights.sbomify.com/CVE-2019-10059/): Misconfiguration in lexmark:6500e firmware (medium 5.3)
- [CVE-2019-10058](https://insights.sbomify.com/CVE-2019-10058/): Missing authorization in lexmark:6500e firmware (critical 9.1)
- [CVE-2019-10057](https://insights.sbomify.com/CVE-2019-10057/): Various Lexmark products have CSRF. (medium 6.5)
- [CVE-2019-10056](https://insights.sbomify.com/CVE-2019-10056/): Memory corruption in suricata-ids:suricata (high 7.5)
- [CVE-2019-10055](https://insights.sbomify.com/CVE-2019-10055/): Integer overflow in suricata-ids:suricata (high 7.5)
- [CVE-2019-10054](https://insights.sbomify.com/CVE-2019-10054/): Memory corruption in suricata-ids:suricata (high 7.5)
- [CVE-2019-10053](https://insights.sbomify.com/CVE-2019-10053/): Integer overflow in suricata-ids:suricata (critical 9.8)
- [CVE-2019-10052](https://insights.sbomify.com/CVE-2019-10052/): Denial of service in suricata-ids:suricata (high 7.5)
- [CVE-2019-10051](https://insights.sbomify.com/CVE-2019-10051/): Denial of service in suricata-ids:suricata (high 7.5)
- [CVE-2019-10050](https://insights.sbomify.com/CVE-2019-10050/): Memory corruption in oisf:suricata (high 7.5)
- [CVE-2019-1005](https://insights.sbomify.com/CVE-2019-1005/): Scripting Engine Memory Corruption Vulnerability (high 7.5)
- [CVE-2019-10049](https://insights.sbomify.com/CVE-2019-10049/): Cross-site scripting in pydio:pydio (high 7.3)
- [CVE-2019-10048](https://insights.sbomify.com/CVE-2019-10048/): Command injection in pydio:pydio (high 7.2)
- [CVE-2019-10047](https://insights.sbomify.com/CVE-2019-10047/): PyDio Stored XSS Vulnerability (medium 5.4)
- [CVE-2019-10046](https://insights.sbomify.com/CVE-2019-10046/): Information disclosure in pydio:pydio (medium 5.3)
- [CVE-2019-10045](https://insights.sbomify.com/CVE-2019-10045/): Information disclosure in pydio:pydio (medium 6.5)
- [CVE-2019-10044](https://insights.sbomify.com/CVE-2019-10044/): Security feature bypass in telegram:telegram (high 8.8)
- [CVE-2019-10042](https://insights.sbomify.com/CVE-2019-10042/): Auth bypass in dlink:dir-816 firmware (high 7.5)
- [CVE-2019-10041](https://insights.sbomify.com/CVE-2019-10041/): Auth bypass in dlink:dir-816 firmware (critical 9.8)
- [CVE-2019-10040](https://insights.sbomify.com/CVE-2019-10040/): Auth bypass in dlink:dir-816 firmware (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/154/