# Vulnerabilities published in 2019 - [CVE-2019-8404](https://insights.sbomify.com/CVE-2019-8404/): File upload in n/a (medium 6.5) - [CVE-2019-8400](https://insights.sbomify.com/CVE-2019-8400/): Hydra has Reflected XSS via error_hint parameter (medium 6.1) - [CVE-2019-8398](https://insights.sbomify.com/CVE-2019-8398/): Information disclosure in n/a (medium 6.5) - [CVE-2019-8397](https://insights.sbomify.com/CVE-2019-8397/): Memory corruption in n/a (medium 6.5) - [CVE-2019-8396](https://insights.sbomify.com/CVE-2019-8396/): Memory corruption in n/a (medium 6.5) - [CVE-2019-8395](https://insights.sbomify.com/CVE-2019-8395/): Path traversal in n/a (critical 9.8) - [CVE-2019-8394](https://insights.sbomify.com/CVE-2019-8394/): Zoho ManageEngine ServiceDesk Plus (SDP) File Upload (high 7.5, exploited in the wild) - [CVE-2019-8393](https://insights.sbomify.com/CVE-2019-8393/): SQL injection in n/a (critical 9.8) - [CVE-2019-8392](https://insights.sbomify.com/CVE-2019-8392/): Missing authorization in n/a (high 7.5) - [CVE-2019-8391](https://insights.sbomify.com/CVE-2019-8391/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-8390](https://insights.sbomify.com/CVE-2019-8390/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-8389](https://insights.sbomify.com/CVE-2019-8389/): Path traversal in n/a (high 8.1) - [CVE-2019-8387](https://insights.sbomify.com/CVE-2019-8387/): Command injection in n/a (critical 9.8) - [CVE-2019-8385](https://insights.sbomify.com/CVE-2019-8385/): Path traversal in n/a (critical 9.8) - [CVE-2019-8383](https://insights.sbomify.com/CVE-2019-8383/): Memory corruption in n/a (high 7.8) - [CVE-2019-8382](https://insights.sbomify.com/CVE-2019-8382/): Null dereference in n/a (high 8.8) - [CVE-2019-8381](https://insights.sbomify.com/CVE-2019-8381/): Memory corruption in n/a (high 7.8) - [CVE-2019-8380](https://insights.sbomify.com/CVE-2019-8380/): Null dereference in n/a (high 8.8) - [CVE-2019-8379](https://insights.sbomify.com/CVE-2019-8379/): Null dereference in n/a (high 7.8) - [CVE-2019-8378](https://insights.sbomify.com/CVE-2019-8378/): Memory corruption in n/a (high 8.8) - [CVE-2019-8377](https://insights.sbomify.com/CVE-2019-8377/): Null dereference in n/a (high 7.8) - [CVE-2019-8376](https://insights.sbomify.com/CVE-2019-8376/): Null dereference in n/a (high 7.8) - [CVE-2019-8375](https://insights.sbomify.com/CVE-2019-8375/): Memory corruption in n/a (critical 9.8) - [CVE-2019-8372](https://insights.sbomify.com/CVE-2019-8372/): Privilege escalation in n/a (high 7.0) - [CVE-2019-8371](https://insights.sbomify.com/CVE-2019-8371/): OpenEMR v5.0.1-6 allows code execution. (high 7.2) - [CVE-2019-8368](https://insights.sbomify.com/CVE-2019-8368/): OpenEMR v5.0.1-6 allows XSS. (medium 6.1) - [CVE-2019-8363](https://insights.sbomify.com/CVE-2019-8363/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-8362](https://insights.sbomify.com/CVE-2019-8362/): File upload in n/a (high 7.5) - [CVE-2019-8361](https://insights.sbomify.com/CVE-2019-8361/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-8360](https://insights.sbomify.com/CVE-2019-8360/): SQL injection in n/a (critical 9.8) - [CVE-2019-8359](https://insights.sbomify.com/CVE-2019-8359/): Memory corruption in n/a (critical 9.8) - [CVE-2019-8358](https://insights.sbomify.com/CVE-2019-8358/): Path traversal in n/a (high 8.1) - [CVE-2019-8357](https://insights.sbomify.com/CVE-2019-8357/): Null dereference in n/a (medium 5.5) - [CVE-2019-8356](https://insights.sbomify.com/CVE-2019-8356/): Memory corruption in n/a (medium 5.5) - [CVE-2019-8355](https://insights.sbomify.com/CVE-2019-8355/): Integer overflow in n/a (medium 5.5) - [CVE-2019-8354](https://insights.sbomify.com/CVE-2019-8354/): Integer overflow in n/a (medium 5.0) - [CVE-2019-8352](https://insights.sbomify.com/CVE-2019-8352/): Hardcoded credentials in n/a (critical 9.8) - [CVE-2019-8351](https://insights.sbomify.com/CVE-2019-8351/): Weak cryptography in n/a (critical 9.1) - [CVE-2019-8350](https://insights.sbomify.com/CVE-2019-8350/): Information disclosure in n/a (medium 6.6) - [CVE-2019-8349](https://insights.sbomify.com/CVE-2019-8349/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-8347](https://insights.sbomify.com/CVE-2019-8347/): Cross-site request forgery in n/a (high 8.8) - [CVE-2019-8346](https://insights.sbomify.com/CVE-2019-8346/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-8345](https://insights.sbomify.com/CVE-2019-8345/): Other in n/a (medium 4.2) - [CVE-2019-8343](https://insights.sbomify.com/CVE-2019-8343/): Use after free in n/a (high 7.8) - [CVE-2019-8342](https://insights.sbomify.com/CVE-2019-8342/): Privilege escalation in n/a (high 7.8) - [CVE-2019-8341](https://insights.sbomify.com/CVE-2019-8341/): Code injection in n/a (critical 9.8) - [CVE-2019-8339](https://insights.sbomify.com/CVE-2019-8339/): Security feature bypass in n/a (medium 5.5) - [CVE-2019-8338](https://insights.sbomify.com/CVE-2019-8338/): Security feature bypass in n/a (medium 5.9) - [CVE-2019-8337](https://insights.sbomify.com/CVE-2019-8337/): Security feature bypass in n/a (medium 5.3) - [CVE-2019-8336](https://insights.sbomify.com/CVE-2019-8336/): HashiCorp Consul Access Restriction Bypass (high 8.1) - [CVE-2019-8335](https://insights.sbomify.com/CVE-2019-8335/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-8334](https://insights.sbomify.com/CVE-2019-8334/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-8331](https://insights.sbomify.com/CVE-2019-8331/): Bootstrap Vulnerable to Cross-Site Scripting (medium 6.1) - [CVE-2019-8325](https://insights.sbomify.com/CVE-2019-8325/): RubyGems Escape sequence injection in errors (high 7.5) - [CVE-2019-8324](https://insights.sbomify.com/CVE-2019-8324/): Code injection in RubyGems (high 8.8) - [CVE-2019-8323](https://insights.sbomify.com/CVE-2019-8323/): RubyGems Escape sequence injection vulnerability in api response handling (high 7.5) - [CVE-2019-8322](https://insights.sbomify.com/CVE-2019-8322/): RubyGems Escape sequence injection vulnerability in gem owner (high 7.5) - [CVE-2019-8321](https://insights.sbomify.com/CVE-2019-8321/): RubyGems Escape sequence injection vulnerability in verbose (high 7.5) - [CVE-2019-8320](https://insights.sbomify.com/CVE-2019-8320/): RubyGems Delete directory using symlink when decompressing tar (high 7.4) - [CVE-2019-8319](https://insights.sbomify.com/CVE-2019-8319/): Command injection in n/a (high 8.8) - [CVE-2019-8318](https://insights.sbomify.com/CVE-2019-8318/): Command injection in n/a (high 8.8) - [CVE-2019-8317](https://insights.sbomify.com/CVE-2019-8317/): Command injection in n/a (high 8.8) - [CVE-2019-8316](https://insights.sbomify.com/CVE-2019-8316/): Command injection in n/a (high 8.8) - [CVE-2019-8315](https://insights.sbomify.com/CVE-2019-8315/): Command injection in n/a (high 8.8) - [CVE-2019-8314](https://insights.sbomify.com/CVE-2019-8314/): Command injection in n/a (high 8.8) - [CVE-2019-8313](https://insights.sbomify.com/CVE-2019-8313/): Command injection in n/a (high 8.8) - [CVE-2019-8312](https://insights.sbomify.com/CVE-2019-8312/): Command injection in n/a (high 8.8) - [CVE-2019-8308](https://insights.sbomify.com/CVE-2019-8308/): Path traversal in n/a (high 8.2) - [CVE-2019-8293](https://insights.sbomify.com/CVE-2019-8293/): File upload in abcprintf upload-image-with-ajax (critical 9.8) - [CVE-2019-8292](https://insights.sbomify.com/CVE-2019-8292/): Missing authorization in Online Store (medium 5.3) - [CVE-2019-8291](https://insights.sbomify.com/CVE-2019-8291/): Path traversal in Online Store (high 7.5) - [CVE-2019-8290](https://insights.sbomify.com/CVE-2019-8290/): Cross-site scripting in Online Store (medium 6.1) - [CVE-2019-8289](https://insights.sbomify.com/CVE-2019-8289/): Cross-site scripting in Online Store (medium 5.4) - [CVE-2019-8288](https://insights.sbomify.com/CVE-2019-8288/): Cross-site scripting in Online Store (medium 5.4) - [CVE-2019-8287](https://insights.sbomify.com/CVE-2019-8287/): Memory corruption in TightVNC (critical 9.8) - [CVE-2019-8286](https://insights.sbomify.com/CVE-2019-8286/): Information disclosure in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security (medium 4.3) - [CVE-2019-8285](https://insights.sbomify.com/CVE-2019-8285/): Memory corruption in Kaspersky Lab Antivirus Engine (high 8.8) - [CVE-2019-8283](https://insights.sbomify.com/CVE-2019-8283/): Cross-site scripting in Sentinel LDK RTE (medium 6.5) - [CVE-2019-8282](https://insights.sbomify.com/CVE-2019-8282/): Supply chain in Sentinel LDK RTE (medium 5.3) - [CVE-2019-8280](https://insights.sbomify.com/CVE-2019-8280/): Memory corruption in UltraVNC (critical 9.8) - [CVE-2019-8279](https://insights.sbomify.com/CVE-2019-8279/): Cross-site scripting in Vanilla Forums (medium 5.4) - [CVE-2019-8278](https://insights.sbomify.com/CVE-2019-8278/): Cross-site scripting in Invision Power Board (medium 6.1) - [CVE-2019-8277](https://insights.sbomify.com/CVE-2019-8277/): Information disclosure in UltraVNC (high 7.5) - [CVE-2019-8276](https://insights.sbomify.com/CVE-2019-8276/): Memory corruption in UltraVNC (high 7.5) - [CVE-2019-8275](https://insights.sbomify.com/CVE-2019-8275/): Null dereference in UltraVNC (critical 9.8) - [CVE-2019-8274](https://insights.sbomify.com/CVE-2019-8274/): Memory corruption in UltraVNC (critical 9.8) - [CVE-2019-8273](https://insights.sbomify.com/CVE-2019-8273/): Memory corruption in UltraVNC (critical 9.8) - [CVE-2019-8272](https://insights.sbomify.com/CVE-2019-8272/): Integer overflow in UltraVNC (critical 9.8) - [CVE-2019-8271](https://insights.sbomify.com/CVE-2019-8271/): Memory corruption in UltraVNC (critical 9.8) - [CVE-2019-8270](https://insights.sbomify.com/CVE-2019-8270/): Memory corruption in UltraVNC (high 7.5) - [CVE-2019-8269](https://insights.sbomify.com/CVE-2019-8269/): Memory corruption in UltraVNC (high 7.5) - [CVE-2019-8268](https://insights.sbomify.com/CVE-2019-8268/): Memory corruption in UltraVNC (critical 9.8) - [CVE-2019-8267](https://insights.sbomify.com/CVE-2019-8267/): Memory corruption in UltraVNC (high 7.5) - [CVE-2019-8266](https://insights.sbomify.com/CVE-2019-8266/): Memory corruption in UltraVNC (critical 9.8) - [CVE-2019-8265](https://insights.sbomify.com/CVE-2019-8265/): Memory corruption in UltraVNC (critical 9.8) - [CVE-2019-8264](https://insights.sbomify.com/CVE-2019-8264/): Memory corruption in UltraVNC (critical 9.8) - [CVE-2019-8263](https://insights.sbomify.com/CVE-2019-8263/): Memory corruption in UltraVNC (medium 6.5) - [CVE-2019-8262](https://insights.sbomify.com/CVE-2019-8262/): Memory corruption in UltraVNC (critical 9.8) - [CVE-2019-8261](https://insights.sbomify.com/CVE-2019-8261/): Integer overflow in UltraVNC (critical 9.8) - [CVE-2019-8260](https://insights.sbomify.com/CVE-2019-8260/): Integer overflow in UltraVNC (critical 9.8) --- From sbomify Insights: https://insights.sbomify.com/years/2019/page/16/