# Vulnerabilities published in 2019


- [CVE-2019-0216](https://insights.sbomify.com/CVE-2019-0216/): Apache Airflow vulnerable to Stored XSS (medium 4.8)
- [CVE-2019-0215](https://insights.sbomify.com/CVE-2019-0215/): Security feature bypass in Apache HTTP Server (high 7.5)
- [CVE-2019-0214](https://insights.sbomify.com/CVE-2019-0214/): Improper Input Validation in Apache Archiva (medium 6.5)
- [CVE-2019-0213](https://insights.sbomify.com/CVE-2019-0213/): Cross-site scripting in Apache Archiva (medium 6.5)
- [CVE-2019-0212](https://insights.sbomify.com/CVE-2019-0212/): Improper Authorization in org.apache.hbase:hbase (high 7.5)
- [CVE-2019-0211](https://insights.sbomify.com/CVE-2019-0211/): Apache HTTP Server Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2019-0210](https://insights.sbomify.com/CVE-2019-0210/): Out-of-bounds read in Apache Thrift (high 7.5)
- [CVE-2019-0207](https://insights.sbomify.com/CVE-2019-0207/): Path traversal attack on Windows platforms (high 7.5)
- [CVE-2019-0205](https://insights.sbomify.com/CVE-2019-0205/): Loop with Unreachable Exit Condition in Apache Thrift (high 7.5)
- [CVE-2019-0204](https://insights.sbomify.com/CVE-2019-0204/): Docker image code execution with Apache Mesos (high 7.8)
- [CVE-2019-0203](https://insights.sbomify.com/CVE-2019-0203/): Null dereference in Apache Subversion (high 7.5)
- [CVE-2019-0202](https://insights.sbomify.com/CVE-2019-0202/): Exposure of Sensitive Information in Apache Storm Logviewer (high 7.5)
- [CVE-2019-0201](https://insights.sbomify.com/CVE-2019-0201/): Access control bypass in Apache ZooKeeper (medium 5.9)
- [CVE-2019-0200](https://insights.sbomify.com/CVE-2019-0200/): Improper Input Validation in Apache Qpid Broker-J (high 7.5)
- [CVE-2019-0199](https://insights.sbomify.com/CVE-2019-0199/): Apache Tomcat Denial of Service vulnerability (high 7.5)
- [CVE-2019-0197](https://insights.sbomify.com/CVE-2019-0197/): Denial of service in Apache HTTP Server (medium 4.2)
- [CVE-2019-0196](https://insights.sbomify.com/CVE-2019-0196/): Use after free in Apache HTTP Server (medium 5.3)
- [CVE-2019-0195](https://insights.sbomify.com/CVE-2019-0195/): Deserialization of Untrusted Data in Apache Tapestry (critical 9.8)
- [CVE-2019-0194](https://insights.sbomify.com/CVE-2019-0194/): Path Traversal in Apache Camel (high 7.5)
- [CVE-2019-0193](https://insights.sbomify.com/CVE-2019-0193/): Apache Solr DataImportHandler Code Injection (high 7.2, exploited in the wild)
- [CVE-2019-0192](https://insights.sbomify.com/CVE-2019-0192/): Critical severity vulnerability that affects org.apache.solr:solr-core (critical 9.8)
- [CVE-2019-0191](https://insights.sbomify.com/CVE-2019-0191/): Moderate severity vulnerability that affects org.apache.karaf:apache-karaf and org.apache.karaf:karaf (medium 6.5)
- [CVE-2019-0190](https://insights.sbomify.com/CVE-2019-0190/): Denial of service in Apache HTTP Server (high 7.5)
- [CVE-2019-0189](https://insights.sbomify.com/CVE-2019-0189/): Deserialization in OFBiz (critical 9.8)
- [CVE-2019-0188](https://insights.sbomify.com/CVE-2019-0188/): XML External Entity injection in Apache Camel (high 7.5)
- [CVE-2019-0187](https://insights.sbomify.com/CVE-2019-0187/): Unauthenticated Remote Code Execution in Apache JMeter (critical 9.8)
- [CVE-2019-0186](https://insights.sbomify.com/CVE-2019-0186/): Cross-site Scripting in Apache Pluto Chatroom demo (medium 6.1)
- [CVE-2019-0185](https://insights.sbomify.com/CVE-2019-0185/): Information disclosure in 2019.2 IPU – Intel(R) Processor Graphics SMM (medium 5.5)
- [CVE-2019-0184](https://insights.sbomify.com/CVE-2019-0184/): Information disclosure in 2019.2 IPU – Intel(R) TXT (medium 5.5)
- [CVE-2019-0183](https://insights.sbomify.com/CVE-2019-0183/): Information disclosure in Open Cloud Integrity Technology and OpenAttestation (low 3.3)
- [CVE-2019-0182](https://insights.sbomify.com/CVE-2019-0182/): Information disclosure in Open Cloud Integrity Technology and OpenAttestation (low 3.3)
- [CVE-2019-0181](https://insights.sbomify.com/CVE-2019-0181/): Information disclosure in Open Cloud Integrity Technology and OpenAttestation (medium 6.7)
- [CVE-2019-0180](https://insights.sbomify.com/CVE-2019-0180/): Information disclosure in Open Cloud Integrity Technology and OpenAttestation (medium 4.4)
- [CVE-2019-0179](https://insights.sbomify.com/CVE-2019-0179/): Information disclosure in Open Cloud Integrity Technology and OpenAttestation (medium 4.4)
- [CVE-2019-0178](https://insights.sbomify.com/CVE-2019-0178/): Information disclosure in Open Cloud Integrity Technology and OpenAttestation (low 3.6)
- [CVE-2019-0177](https://insights.sbomify.com/CVE-2019-0177/): Information disclosure in Open Cloud Integrity Technology and OpenAttestation (medium 4.4)
- [CVE-2019-0175](https://insights.sbomify.com/CVE-2019-0175/): Information disclosure in Open Cloud Integrity Technology and OpenAttestation (medium 4.4)
- [CVE-2019-0174](https://insights.sbomify.com/CVE-2019-0174/): Information disclosure in Central Processing Units (CPUs) (low 3.3)
- [CVE-2019-0173](https://insights.sbomify.com/CVE-2019-0173/): Auth bypass in Intel(R) RAID Web Console 2 Advisory (high 7.6)
- [CVE-2019-0172](https://insights.sbomify.com/CVE-2019-0172/): Business logic in Intel Unite(R) Client for Android (critical 9.8)
- [CVE-2019-0171](https://insights.sbomify.com/CVE-2019-0171/): Privilege escalation in Intel(R) Quartus(R) (high 7.8)
- [CVE-2019-0170](https://insights.sbomify.com/CVE-2019-0170/): Memory corruption in Intel(R) Dynamic Application Loader (DAL) (medium 6.7)
- [CVE-2019-0169](https://insights.sbomify.com/CVE-2019-0169/): Memory corruption in Intel(R) TXE (high 8.8)
- [CVE-2019-0168](https://insights.sbomify.com/CVE-2019-0168/): Information disclosure in Intel(R) CSME, Intel(R) TXE (medium 4.4)
- [CVE-2019-0166](https://insights.sbomify.com/CVE-2019-0166/): Information disclosure in Intel(R) AMT (high 7.5)
- [CVE-2019-0165](https://insights.sbomify.com/CVE-2019-0165/): Denial of service in Intel(R) CSME (medium 4.4)
- [CVE-2019-0164](https://insights.sbomify.com/CVE-2019-0164/): Privilege escalation in Intel(R) Turbo Boost Max Technology 3.0 (high 7.3)
- [CVE-2019-0163](https://insights.sbomify.com/CVE-2019-0163/): Other in Intel(R) NUC Advisory (high 8.2)
- [CVE-2019-0162](https://insights.sbomify.com/CVE-2019-0162/): Information disclosure in Microprocessor Memory Mapping Advisory (low 3.8)
- [CVE-2019-0161](https://insights.sbomify.com/CVE-2019-0161/): Memory corruption in Extensible Firmware Interface Development Kit (EDK II) (medium 5.5)
- [CVE-2019-0160](https://insights.sbomify.com/CVE-2019-0160/): Memory corruption in Extensible Firmware Interface Development Kit (EDK II) (high 8.7)
- [CVE-2019-0159](https://insights.sbomify.com/CVE-2019-0159/): Privilege escalation in Linux Administrative Tools for Intel(R) Network Adapters (high 7.8)
- [CVE-2019-0158](https://insights.sbomify.com/CVE-2019-0158/): Privilege escalation in Intel(R) Graphics Performance Analyzer for Linux Advisory (high 7.8)
- [CVE-2019-0157](https://insights.sbomify.com/CVE-2019-0157/): Denial of service in Intel(R) SGX for Linux (medium 5.5)
- [CVE-2019-0155](https://insights.sbomify.com/CVE-2019-0155/): Privilege escalation in 2019.2 IPU – Intel(R) Graphics Driver for Windows* and Linux (high 7.8)
- [CVE-2019-0154](https://insights.sbomify.com/CVE-2019-0154/): Missing authorization in 2019.2 IPU – Intel(R) Processor Graphics Update (medium 5.5)
- [CVE-2019-0153](https://insights.sbomify.com/CVE-2019-0153/): Memory corruption in Intel(R) Converged Security & Management Engine (CSME) (critical 9.8)
- [CVE-2019-0152](https://insights.sbomify.com/CVE-2019-0152/): Memory corruption in 2019.2 IPU – Intel(R) Processor Security (medium 6.7)
- [CVE-2019-0151](https://insights.sbomify.com/CVE-2019-0151/): Memory corruption in 2019.2 IPU – Intel(R) Processor Security (medium 6.7)
- [CVE-2019-0150](https://insights.sbomify.com/CVE-2019-0150/): Missing authorization in 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers (medium 5.1)
- [CVE-2019-0149](https://insights.sbomify.com/CVE-2019-0149/): Denial of service in 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers (medium 5.5)
- [CVE-2019-0148](https://insights.sbomify.com/CVE-2019-0148/): Denial of service in 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers (medium 5.5)
- [CVE-2019-0147](https://insights.sbomify.com/CVE-2019-0147/): Denial of service in 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers (medium 5.5)
- [CVE-2019-0146](https://insights.sbomify.com/CVE-2019-0146/): Denial of service in 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers (medium 5.5)
- [CVE-2019-0145](https://insights.sbomify.com/CVE-2019-0145/): Memory corruption in 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers (high 7.8)
- [CVE-2019-0144](https://insights.sbomify.com/CVE-2019-0144/): Denial of service in 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers (medium 6.5)
- [CVE-2019-0143](https://insights.sbomify.com/CVE-2019-0143/): Denial of service in 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers (medium 5.5)
- [CVE-2019-0142](https://insights.sbomify.com/CVE-2019-0142/): Privilege escalation in 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers (high 8.2)
- [CVE-2019-0140](https://insights.sbomify.com/CVE-2019-0140/): Memory corruption in 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers (high 8.8)
- [CVE-2019-0139](https://insights.sbomify.com/CVE-2019-0139/): Missing authorization in 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers (medium 6.7)
- [CVE-2019-0138](https://insights.sbomify.com/CVE-2019-0138/): Privilege escalation in Intel(R) ACU Wizard (high 7.8)
- [CVE-2019-0136](https://insights.sbomify.com/CVE-2019-0136/): Missing authorization in Intel® PROSet/Wireless WiFi Software (high 7.4)
- [CVE-2019-0135](https://insights.sbomify.com/CVE-2019-0135/): Privilege escalation in Intel(R) Accelerated Storage Manager in RSTe Advisory (high 7.8)
- [CVE-2019-0134](https://insights.sbomify.com/CVE-2019-0134/): Misconfiguration in Intel(R) Dynamic Platform and Thermal Framework (high 7.8)
- [CVE-2019-0132](https://insights.sbomify.com/CVE-2019-0132/): Denial of service in Intel Unite(R) Client (high 7.5)
- [CVE-2019-0131](https://insights.sbomify.com/CVE-2019-0131/): Other in Intel(R) AMT (high 8.1)
- [CVE-2019-0130](https://insights.sbomify.com/CVE-2019-0130/): Cross-site scripting in Intel(R) Accelerated Storage Manager in Intel® Rapid Storage Technology Enterprise Advisory (high 7.4)
- [CVE-2019-0129](https://insights.sbomify.com/CVE-2019-0129/): Privilege escalation in Intel(R) USB 3.0 Creator Utility (high 7.8)
- [CVE-2019-0128](https://insights.sbomify.com/CVE-2019-0128/): Privilege escalation in Intel(R) Chipset Device Software (INF Update Utility) Advisory (high 7.8)
- [CVE-2019-0127](https://insights.sbomify.com/CVE-2019-0127/): Information disclosure in intel:openvino (low 3.9)
- [CVE-2019-0126](https://insights.sbomify.com/CVE-2019-0126/): Missing authorization in Intel(R) Unified Extensible Firmware Interface (UEFI) (medium 6.7)
- [CVE-2019-0124](https://insights.sbomify.com/CVE-2019-0124/): Privilege escalation in 2019.2 IPU – Intel(R) SGX and TXT (high 7.8)
- [CVE-2019-0123](https://insights.sbomify.com/CVE-2019-0123/): Privilege escalation in 2019.2 IPU – Intel(R) SGX and TXT (high 7.8)
- [CVE-2019-0122](https://insights.sbomify.com/CVE-2019-0122/): Memory corruption in Intel(R) Software Guard Extensions SDK (high 7.1)
- [CVE-2019-0121](https://insights.sbomify.com/CVE-2019-0121/): Privilege escalation in Intel(R) Matrix Storage Manager (high 7.8)
- [CVE-2019-0120](https://insights.sbomify.com/CVE-2019-0120/): Weak cryptography in Intel(R) Unified Extensible Firmware Interface (UEFI) (medium 4.4)
- [CVE-2019-0119](https://insights.sbomify.com/CVE-2019-0119/): Memory corruption in Intel(R) Unified Extensible Firmware Interface (UEFI) (medium 6.7)
- [CVE-2019-0117](https://insights.sbomify.com/CVE-2019-0117/): Information disclosure in 2019.2 IPU – Intel(R) SGX with Intel(R) Processor Graphics Update (medium 4.4)
- [CVE-2019-0116](https://insights.sbomify.com/CVE-2019-0116/): Memory corruption in Intel(R) Graphics Driver KMD module (medium 4.4)
- [CVE-2019-0115](https://insights.sbomify.com/CVE-2019-0115/): Denial of service in Intel(R) Graphics Driver KMD module (medium 5.5)
- [CVE-2019-0114](https://insights.sbomify.com/CVE-2019-0114/): Race condition in Intel(R) Graphics Drivers (medium 4.7)
- [CVE-2019-0113](https://insights.sbomify.com/CVE-2019-0113/): Memory corruption in Intel(R) Graphics Drivers (medium 5.5)
- [CVE-2019-0112](https://insights.sbomify.com/CVE-2019-0112/): Denial of service in intel:data center manager (medium 4.4)
- [CVE-2019-0111](https://insights.sbomify.com/CVE-2019-0111/): Misconfiguration in intel:data center manager (medium 5.5)
- [CVE-2019-0110](https://insights.sbomify.com/CVE-2019-0110/): Weak cryptography in intel:data center manager (medium 5.5)
- [CVE-2019-0109](https://insights.sbomify.com/CVE-2019-0109/): Privilege escalation in intel:data center manager (high 7.8)
- [CVE-2019-0108](https://insights.sbomify.com/CVE-2019-0108/): Misconfiguration in intel:data center manager (medium 5.5)
- [CVE-2019-0107](https://insights.sbomify.com/CVE-2019-0107/): Privilege escalation in intel:data center manager (medium 6.7)
- [CVE-2019-0106](https://insights.sbomify.com/CVE-2019-0106/): Privilege escalation in intel:data center manager (medium 6.7)
- [CVE-2019-0105](https://insights.sbomify.com/CVE-2019-0105/): Privilege escalation in intel:data center manager (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/162/