# Vulnerabilities published in 2019


- [CVE-2019-1003002](https://insights.sbomify.com/CVE-2019-1003002/): Jenkins Pipeline Declarative Plugin sandbox bypass vulnerability (high 8.8)
- [CVE-2019-1003001](https://insights.sbomify.com/CVE-2019-1003001/): Jenkins Groovy Plugin sandbox bypass vulnerability (high 8.8)
- [CVE-2019-1003000](https://insights.sbomify.com/CVE-2019-1003000/): Protection Mechanism Failure in Jenkins Script Security Plugin (high 8.8)
- [CVE-2019-1003](https://insights.sbomify.com/CVE-2019-1003/): Chakra Scripting Engine Memory Corruption Vulnerability (medium 4.2)
- [CVE-2019-10028](https://insights.sbomify.com/CVE-2019-10028/): Denial of service in Dial Reference Source Code Repo (https://github.com/Netflix/dial-reference) (high 7.5)
- [CVE-2019-10027](https://insights.sbomify.com/CVE-2019-10027/): Cross-site scripting in phpcms:phpcms (medium 4.8)
- [CVE-2019-10026](https://insights.sbomify.com/CVE-2019-10026/): Denial of service in xpdfreader:xpdf (medium 5.5)
- [CVE-2019-10025](https://insights.sbomify.com/CVE-2019-10025/): Denial of service in xpdfreader:xpdf (medium 5.5)
- [CVE-2019-10024](https://insights.sbomify.com/CVE-2019-10024/): Denial of service in xpdfreader:xpdf (medium 5.5)
- [CVE-2019-10023](https://insights.sbomify.com/CVE-2019-10023/): Denial of service in xpdfreader:xpdf (medium 5.5)
- [CVE-2019-10022](https://insights.sbomify.com/CVE-2019-10022/): Null dereference in xpdfreader:xpdf (medium 5.5)
- [CVE-2019-1002101](https://insights.sbomify.com/CVE-2019-1002101/): kubectl cp path traversal (medium 6.4)
- [CVE-2019-1002100](https://insights.sbomify.com/CVE-2019-1002100/): Kubernetes DoS Vulnerability (medium 6.5)
- [CVE-2019-10021](https://insights.sbomify.com/CVE-2019-10021/): Denial of service in xpdfreader:xpdf (medium 5.5)
- [CVE-2019-10020](https://insights.sbomify.com/CVE-2019-10020/): Denial of service in xpdfreader:xpdf (medium 5.5)
- [CVE-2019-1002](https://insights.sbomify.com/CVE-2019-1002/): Chakra Scripting Engine Memory Corruption Vulnerability (medium 4.2)
- [CVE-2019-10019](https://insights.sbomify.com/CVE-2019-10019/): Denial of service in xpdfreader:xpdf (medium 5.5)
- [CVE-2019-10018](https://insights.sbomify.com/CVE-2019-10018/): Denial of service in canonical:ubuntu linux (medium 5.5)
- [CVE-2019-10017](https://insights.sbomify.com/CVE-2019-10017/): Cross-site scripting in cmsmadesimple:cms made simple (medium 5.4)
- [CVE-2019-10016](https://insights.sbomify.com/CVE-2019-10016/): Cross-site scripting in gforge:advanced server (medium 6.1)
- [CVE-2019-10015](https://insights.sbomify.com/CVE-2019-10015/): Code injection in baigo:baigo sso (high 7.2)
- [CVE-2019-10014](https://insights.sbomify.com/CVE-2019-10014/): Missing authorization in dedecms:dedecms (medium 6.5)
- [CVE-2019-10013](https://insights.sbomify.com/CVE-2019-10013/): Memory corruption in axtls project:axtls (high 7.5)
- [CVE-2019-10012](https://insights.sbomify.com/CVE-2019-10012/): File upload in jenzabar:internet campus solution (high 7.5)
- [CVE-2019-10011](https://insights.sbomify.com/CVE-2019-10011/): Hardcoded credentials in jenzabar:internet campus solution (critical 9.8)
- [CVE-2019-10010](https://insights.sbomify.com/CVE-2019-10010/): Moderate severity vulnerability that affects league/commonmark (medium 6.1)
- [CVE-2019-1001](https://insights.sbomify.com/CVE-2019-1001/): Memory corruption in ChakraCore (high 7.5)
- [CVE-2019-10009](https://insights.sbomify.com/CVE-2019-10009/): Path traversal in southrivertech:titan ftp server (medium 6.5)
- [CVE-2019-10008](https://insights.sbomify.com/CVE-2019-10008/): Auth bypass in zohocorp:servicedesk plus (high 8.8)
- [CVE-2019-1000031](https://insights.sbomify.com/CVE-2019-1000031/): Denial of service in article2pdf Wordpress plug-in (high 7.5)
- [CVE-2019-1000024](https://insights.sbomify.com/CVE-2019-1000024/): Cross-site scripting in opt-net:ng-netms (medium 6.1)
- [CVE-2019-1000023](https://insights.sbomify.com/CVE-2019-1000023/): SQL injection in opt-net:ng-netms (critical 9.8)
- [CVE-2019-1000022](https://insights.sbomify.com/CVE-2019-1000022/): Cross-site request forgery in taoensso:sente (high 8.8)
- [CVE-2019-1000021](https://insights.sbomify.com/CVE-2019-1000021/): slixmpp Incorrect Access Control (high 7.5)
- [CVE-2019-1000020](https://insights.sbomify.com/CVE-2019-1000020/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2019-1000019](https://insights.sbomify.com/CVE-2019-1000019/): Memory corruption in canonical:ubuntu linux (medium 6.5)
- [CVE-2019-1000018](https://insights.sbomify.com/CVE-2019-1000018/): Command injection in canonical:ubuntu linux (high 7.8)
- [CVE-2019-1000017](https://insights.sbomify.com/CVE-2019-1000017/): Missing authorization in chamilo:chamilo lms (medium 6.5)
- [CVE-2019-1000016](https://insights.sbomify.com/CVE-2019-1000016/): Memory corruption in ffmpeg:ffmpeg (medium 6.5)
- [CVE-2019-1000015](https://insights.sbomify.com/CVE-2019-1000015/): Cross-site scripting in chamilo:chamilo lms (medium 6.1)
- [CVE-2019-1000014](https://insights.sbomify.com/CVE-2019-1000014/): Security feature bypass in erlang:rebar3 (high 8.8)
- [CVE-2019-1000013](https://insights.sbomify.com/CVE-2019-1000013/): Hex authenticity of signed packages not validated (high 8.8)
- [CVE-2019-1000012](https://insights.sbomify.com/CVE-2019-1000012/): Security feature bypass in hex:hex (high 8.8)
- [CVE-2019-1000011](https://insights.sbomify.com/CVE-2019-1000011/): Incorrect Access Control vulnerability in api-platform/core (medium 6.5)
- [CVE-2019-1000010](https://insights.sbomify.com/CVE-2019-1000010/): Cross-site scripting in phpipam:phpipam (medium 6.1)
- [CVE-2019-1000009](https://insights.sbomify.com/CVE-2019-1000009/): Path traversal in helm:chartmuseum (medium 6.5)
- [CVE-2019-1000008](https://insights.sbomify.com/CVE-2019-1000008/): Helm Path Traversal (medium 6.5)
- [CVE-2019-1000007](https://insights.sbomify.com/CVE-2019-1000007/): Depth counting error in guard() leading to multiple potential security issues in aioxmpp (high 7.4)
- [CVE-2019-1000006](https://insights.sbomify.com/CVE-2019-1000006/): Memory corruption in riot-os:riot (critical 9.8)
- [CVE-2019-1000005](https://insights.sbomify.com/CVE-2019-1000005/): mPDF Unsafe Deserialization (high 8.8)
- [CVE-2019-1000004](https://insights.sbomify.com/CVE-2019-1000004/): Cross-site scripting in jspmyadmin:jspmyadmin2 (medium 6.1)
- [CVE-2019-1000003](https://insights.sbomify.com/CVE-2019-1000003/): Cross-site request forgery in mapsvg:mapsvg lite (high 8.8)
- [CVE-2019-1000002](https://insights.sbomify.com/CVE-2019-1000002/): Gitea Arbitrary File Delete Vulnerability (medium 6.5)
- [CVE-2019-1000001](https://insights.sbomify.com/CVE-2019-1000001/): TeamPass Storing Passwords in a Recoverable Format vulnerability (critical 9.8)
- [CVE-2019-1000](https://insights.sbomify.com/CVE-2019-1000/): Privilege escalation in Microsoft Azure Active Directory Connect (medium 5.3)
- [CVE-2019-0999](https://insights.sbomify.com/CVE-2019-0999/): Privilege escalation in Windows (high 7.8)
- [CVE-2019-0998](https://insights.sbomify.com/CVE-2019-0998/): Windows Storage Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2019-0996](https://insights.sbomify.com/CVE-2019-0996/): Azure DevOps Server Spoofing Vulnerability (medium 6.5)
- [CVE-2019-0995](https://insights.sbomify.com/CVE-2019-0995/): Security feature bypass in Internet Explorer 11 (high 8.8)
- [CVE-2019-0993](https://insights.sbomify.com/CVE-2019-0993/): Chakra Scripting Engine Memory Corruption Vulnerability (medium 4.2)
- [CVE-2019-0992](https://insights.sbomify.com/CVE-2019-0992/): Chakra Scripting Engine Memory Corruption Vulnerability (medium 4.2)
- [CVE-2019-0991](https://insights.sbomify.com/CVE-2019-0991/): Chakra Scripting Engine Memory Corruption Vulnerability (medium 4.2)
- [CVE-2019-0990](https://insights.sbomify.com/CVE-2019-0990/): Chakra Scripting Engine Memory Corruption Vulnerability (medium 6.5)
- [CVE-2019-0989](https://insights.sbomify.com/CVE-2019-0989/): Chakra Scripting Engine Memory Corruption Vulnerability (medium 4.2)
- [CVE-2019-0988](https://insights.sbomify.com/CVE-2019-0988/): Scripting Engine Memory Corruption Vulnerability (high 7.5)
- [CVE-2019-0986](https://insights.sbomify.com/CVE-2019-0986/): Windows User Profile Service Elevation of Privilege Vulnerability (medium 6.3)
- [CVE-2019-0985](https://insights.sbomify.com/CVE-2019-0985/): Microsoft Speech API Remote Code Execution Vulnerability (high 7.8)
- [CVE-2019-0984](https://insights.sbomify.com/CVE-2019-0984/): Windows Common Log File System Driver Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2019-0983](https://insights.sbomify.com/CVE-2019-0983/): Windows Storage Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2019-0982](https://insights.sbomify.com/CVE-2019-0982/): Denial of service in ASP.NET Core (high 7.5)
- [CVE-2019-0981](https://insights.sbomify.com/CVE-2019-0981/): Denial of service in ASP.NET Core (high 7.5)
- [CVE-2019-0980](https://insights.sbomify.com/CVE-2019-0980/): Denial of service in ASP.NET Core (high 7.5)
- [CVE-2019-0979](https://insights.sbomify.com/CVE-2019-0979/): Cross-site scripting in Azure DevOps Server (medium 5.4)
- [CVE-2019-0977](https://insights.sbomify.com/CVE-2019-0977/): Windows GDI Information Disclosure Vulnerability (medium 4.7)
- [CVE-2019-0976](https://insights.sbomify.com/CVE-2019-0976/): NuGet Package Manager Tampering Vulnerability (medium 5.5)
- [CVE-2019-0975](https://insights.sbomify.com/CVE-2019-0975/): Security feature bypass in Windows Server (medium 6.3)
- [CVE-2019-0974](https://insights.sbomify.com/CVE-2019-0974/): Jet Database Engine Remote Code Execution Vulnerability (high 7.8)
- [CVE-2019-0973](https://insights.sbomify.com/CVE-2019-0973/): Windows Installer Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2019-0972](https://insights.sbomify.com/CVE-2019-0972/): Local Security Authority Subsystem Service Denial of Service Vulnerability (medium 6.5)
- [CVE-2019-0971](https://insights.sbomify.com/CVE-2019-0971/): Information disclosure in Azure DevOps Server (medium 6.5)
- [CVE-2019-0968](https://insights.sbomify.com/CVE-2019-0968/): Windows GDI Information Disclosure Vulnerability (medium 5.5)
- [CVE-2019-0966](https://insights.sbomify.com/CVE-2019-0966/): Denial of service in Windows (medium 6.8)
- [CVE-2019-0965](https://insights.sbomify.com/CVE-2019-0965/): Windows Hyper-V Remote Code Execution Vulnerability (high 7.6)
- [CVE-2019-0963](https://insights.sbomify.com/CVE-2019-0963/): Cross-site scripting in Microsoft SharePoint Foundation (medium 5.4)
- [CVE-2019-0962](https://insights.sbomify.com/CVE-2019-0962/): Privilege escalation in Azure Automation (medium 4.9)
- [CVE-2019-0961](https://insights.sbomify.com/CVE-2019-0961/): Information disclosure in Windows (medium 6.5)
- [CVE-2019-0960](https://insights.sbomify.com/CVE-2019-0960/): Win32k Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2019-0959](https://insights.sbomify.com/CVE-2019-0959/): Windows Common Log File System Driver Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2019-0958](https://insights.sbomify.com/CVE-2019-0958/): Cross-site scripting in Microsoft SharePoint Foundation (high 8.8)
- [CVE-2019-0957](https://insights.sbomify.com/CVE-2019-0957/): Privilege escalation in Microsoft SharePoint Enterprise Server (high 8.8)
- [CVE-2019-0956](https://insights.sbomify.com/CVE-2019-0956/): Information disclosure in Microsoft SharePoint Enterprise Server (medium 6.5)
- [CVE-2019-0953](https://insights.sbomify.com/CVE-2019-0953/): Memory corruption in Microsoft Office (high 7.8)
- [CVE-2019-0952](https://insights.sbomify.com/CVE-2019-0952/): Code injection in Microsoft SharePoint Enterprise Server (high 8.8)
- [CVE-2019-0951](https://insights.sbomify.com/CVE-2019-0951/): Cross-site scripting in Microsoft SharePoint Foundation (medium 5.4)
- [CVE-2019-0950](https://insights.sbomify.com/CVE-2019-0950/): Cross-site scripting in Microsoft SharePoint Enterprise Server (medium 5.7)
- [CVE-2019-0949](https://insights.sbomify.com/CVE-2019-0949/): Cross-site scripting in Microsoft SharePoint Enterprise Server (medium 5.7)
- [CVE-2019-0948](https://insights.sbomify.com/CVE-2019-0948/): Windows Event Viewer Information Disclosure Vulnerability (medium 4.7)
- [CVE-2019-0947](https://insights.sbomify.com/CVE-2019-0947/): Memory corruption in Microsoft Office (high 7.8)
- [CVE-2019-0946](https://insights.sbomify.com/CVE-2019-0946/): Memory corruption in Microsoft Office (high 7.8)
- [CVE-2019-0945](https://insights.sbomify.com/CVE-2019-0945/): Memory corruption in Microsoft Office (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/156/