# Vulnerabilities published in 2019


- [CVE-2019-8158](https://insights.sbomify.com/CVE-2019-8158/): Magento 2 Community Edition XML Injection (critical 9.8)
- [CVE-2019-8157](https://insights.sbomify.com/CVE-2019-8157/): Magento Cross-Site Scripting via admin panel (medium 5.4)
- [CVE-2019-8156](https://insights.sbomify.com/CVE-2019-8156/): Magento 2 Community Edition SSRF vulnerability (high 7.2)
- [CVE-2019-8155](https://insights.sbomify.com/CVE-2019-8155/): Cross-site request forgery in Magento 1 (high 7.5)
- [CVE-2019-8154](https://insights.sbomify.com/CVE-2019-8154/): Magento remote code execution vulnerability (high 8.8)
- [CVE-2019-8153](https://insights.sbomify.com/CVE-2019-8153/): Magento Cross-site Scripting (XSS) (medium 6.1)
- [CVE-2019-8152](https://insights.sbomify.com/CVE-2019-8152/): Magento 2 Community Edition XSS Vulnerability (medium 5.4)
- [CVE-2019-8151](https://insights.sbomify.com/CVE-2019-8151/): Magento Server-Side Request Forgery (SSRF) (high 7.2)
- [CVE-2019-8150](https://insights.sbomify.com/CVE-2019-8150/): Magento 2 Community Edition RCE Vulnerability (high 8.8)
- [CVE-2019-8149](https://insights.sbomify.com/CVE-2019-8149/): Magento Broken authentication and session managememt (critical 9.8)
- [CVE-2019-8148](https://insights.sbomify.com/CVE-2019-8148/): Magento 2 Community Edition XSS Vulnerability (medium 4.8)
- [CVE-2019-8147](https://insights.sbomify.com/CVE-2019-8147/): Magento 2 Community Edition XSS Vulnerability (medium 5.4)
- [CVE-2019-8146](https://insights.sbomify.com/CVE-2019-8146/): Magento 2 Community Edition XSS Vulnerability (medium 5.4)
- [CVE-2019-8145](https://insights.sbomify.com/CVE-2019-8145/): Magento Cross-Site Scripting via Attribute Set Name (medium 5.4)
- [CVE-2019-8144](https://insights.sbomify.com/CVE-2019-8144/): Magento 2 Community Edition RCE Vulnerability (critical 9.8)
- [CVE-2019-8143](https://insights.sbomify.com/CVE-2019-8143/): Magento Injection vulnerability via email templates (medium 6.5)
- [CVE-2019-8142](https://insights.sbomify.com/CVE-2019-8142/): Magento 2 Community Edition XSS Vulnerability (medium 5.4)
- [CVE-2019-8141](https://insights.sbomify.com/CVE-2019-8141/): Magento 2 Community Edition RCE Vulnerability (high 7.2)
- [CVE-2019-8140](https://insights.sbomify.com/CVE-2019-8140/): Magento Unrestricted file upload vulnerability (medium 4.9)
- [CVE-2019-8139](https://insights.sbomify.com/CVE-2019-8139/): Magento 2 Community Edition XSS Vulnerability (medium 5.4)
- [CVE-2019-8138](https://insights.sbomify.com/CVE-2019-8138/): Magento 2 Community Edition XSS Vulnerability (medium 5.4)
- [CVE-2019-8137](https://insights.sbomify.com/CVE-2019-8137/): Magento 2 Community Edition RCE Vulnerability (high 8.8)
- [CVE-2019-8136](https://insights.sbomify.com/CVE-2019-8136/): Magento 2 Community Edition Insecure Component (critical 9.8)
- [CVE-2019-8135](https://insights.sbomify.com/CVE-2019-8135/): Remote code execution via vulnerable Symphony dependecy injection (critical 9.8)
- [CVE-2019-8134](https://insights.sbomify.com/CVE-2019-8134/): Magento SQL injection via marketing account with access to email templates variables (high 8.8)
- [CVE-2019-8133](https://insights.sbomify.com/CVE-2019-8133/): Bypass of sitemp access restrictions (medium 6.5)
- [CVE-2019-8132](https://insights.sbomify.com/CVE-2019-8132/): Magento 2 Community Edition XSS Vulnerability (medium 5.4)
- [CVE-2019-8131](https://insights.sbomify.com/CVE-2019-8131/): Magento 2 Community Edition XSS Vulnerability (medium 5.4)
- [CVE-2019-8130](https://insights.sbomify.com/CVE-2019-8130/): Magento SQL injection vulnerability (high 8.8)
- [CVE-2019-8129](https://insights.sbomify.com/CVE-2019-8129/): Magento Cross-Site Scripting via Signifyd Guarantee Option Translation Override (medium 5.4)
- [CVE-2019-8128](https://insights.sbomify.com/CVE-2019-8128/): Magento Cross-Site Scripting via store name (medium 5.4)
- [CVE-2019-8127](https://insights.sbomify.com/CVE-2019-8127/): Magento 2 Community Edition SQLi Vulnerability (high 8.8)
- [CVE-2019-8126](https://insights.sbomify.com/CVE-2019-8126/): Information disclosure through processing of external XML entities (medium 4.9)
- [CVE-2019-8125](https://insights.sbomify.com/CVE-2019-8125/): Code injection in Magento 1 (high 7.2)
- [CVE-2019-8124](https://insights.sbomify.com/CVE-2019-8124/): Magento 2 Community Edition Insufficient Logging (medium 4.9)
- [CVE-2019-8123](https://insights.sbomify.com/CVE-2019-8123/): Magento 2 Community Edition Insufficient Logging (medium 5.3)
- [CVE-2019-8122](https://insights.sbomify.com/CVE-2019-8122/): Magento 2 Community Edition RCE Vulnerability (high 8.8)
- [CVE-2019-8121](https://insights.sbomify.com/CVE-2019-8121/): Using JS libraries with known security vulnerabilities (critical 9.8)
- [CVE-2019-8120](https://insights.sbomify.com/CVE-2019-8120/): Magento 2 Community Edition XSS Vulnerability (medium 5.4)
- [CVE-2019-8119](https://insights.sbomify.com/CVE-2019-8119/): Magento 2 Community Edition RCE Vulnerability (high 7.2)
- [CVE-2019-8118](https://insights.sbomify.com/CVE-2019-8118/): Magento 2 Community Edition Weak Cryptography (medium 5.3)
- [CVE-2019-8117](https://insights.sbomify.com/CVE-2019-8117/): Magento 2 Community Edition XSS Vulnerability (medium 5.4)
- [CVE-2019-8116](https://insights.sbomify.com/CVE-2019-8116/): Auth bypass in Magento 2 (high 7.5)
- [CVE-2019-8115](https://insights.sbomify.com/CVE-2019-8115/): Magento 2 Community Edition XSS Vulnerability (medium 4.8)
- [CVE-2019-8114](https://insights.sbomify.com/CVE-2019-8114/): Magento 2 Community Edition RCE Vulnerability (high 7.2)
- [CVE-2019-8113](https://insights.sbomify.com/CVE-2019-8113/): Magento 2 Community Weak PRNG (medium 5.3)
- [CVE-2019-8112](https://insights.sbomify.com/CVE-2019-8112/): Magento 2 Community Edition Security Bypass (high 7.5)
- [CVE-2019-8111](https://insights.sbomify.com/CVE-2019-8111/): Magento 2 Community Edition RCE Vulnerability (high 8.8)
- [CVE-2019-8110](https://insights.sbomify.com/CVE-2019-8110/): Magento 2 Community Edition RCE Vulnerability (high 8.8)
- [CVE-2019-8109](https://insights.sbomify.com/CVE-2019-8109/): Magento 2 Community Edition RCE Vulnerability via CSRF (high 8.0)
- [CVE-2019-8108](https://insights.sbomify.com/CVE-2019-8108/): Magento Broken authentication and session managememt (medium 6.5)
- [CVE-2019-8107](https://insights.sbomify.com/CVE-2019-8107/): Magento 2 Community Edition Arbitrary File Deletion (medium 6.5)
- [CVE-2019-8106](https://insights.sbomify.com/CVE-2019-8106/): Information disclosure in Adobe Acrobat and Reader (high 7.5)
- [CVE-2019-8105](https://insights.sbomify.com/CVE-2019-8105/): Information disclosure in Adobe Acrobat and Reader (high 7.5)
- [CVE-2019-8104](https://insights.sbomify.com/CVE-2019-8104/): Information disclosure in Adobe Acrobat and Reader (high 7.5)
- [CVE-2019-8103](https://insights.sbomify.com/CVE-2019-8103/): Information disclosure in Adobe Acrobat and Reader (high 7.5)
- [CVE-2019-8102](https://insights.sbomify.com/CVE-2019-8102/): Information disclosure in Adobe Acrobat and Reader (high 7.5)
- [CVE-2019-8101](https://insights.sbomify.com/CVE-2019-8101/): Integer overflow in Adobe Acrobat and Reader (high 7.5)
- [CVE-2019-8100](https://insights.sbomify.com/CVE-2019-8100/): Memory corruption in Adobe Acrobat and Reader (critical 9.8)
- [CVE-2019-8099](https://insights.sbomify.com/CVE-2019-8099/): Integer overflow in Adobe Acrobat and Reader (high 7.5)
- [CVE-2019-8098](https://insights.sbomify.com/CVE-2019-8098/): Memory corruption in Adobe Acrobat and Reader (critical 9.8)
- [CVE-2019-8097](https://insights.sbomify.com/CVE-2019-8097/): Information disclosure in Adobe Acrobat and Reader (medium 5.3)
- [CVE-2019-8096](https://insights.sbomify.com/CVE-2019-8096/): Information disclosure in Adobe Acrobat and Reader (high 7.5)
- [CVE-2019-8095](https://insights.sbomify.com/CVE-2019-8095/): Information disclosure in Adobe Acrobat and Reader (high 7.5)
- [CVE-2019-8094](https://insights.sbomify.com/CVE-2019-8094/): Information disclosure in Adobe Acrobat and Reader (high 7.5)
- [CVE-2019-8093](https://insights.sbomify.com/CVE-2019-8093/): Magento Information Disclosure via File upload functionality (high 8.8)
- [CVE-2019-8092](https://insights.sbomify.com/CVE-2019-8092/): Magento 2 Community Edition XSS Vulnerability (medium 5.4)
- [CVE-2019-8091](https://insights.sbomify.com/CVE-2019-8091/): Code injection in Magento 1 (high 7.2)
- [CVE-2019-8090](https://insights.sbomify.com/CVE-2019-8090/): Magento 2 Community Edition Arbitrary File Deletion (medium 6.5)
- [CVE-2019-8089](https://insights.sbomify.com/CVE-2019-8089/): Cross-site scripting in Adobe Experience Manager Forms (medium 6.1)
- [CVE-2019-8088](https://insights.sbomify.com/CVE-2019-8088/): Command injection in Adobe Experience Manager (critical 9.8)
- [CVE-2019-8087](https://insights.sbomify.com/CVE-2019-8087/): XML external entity in Adobe Experience Manager (high 7.5)
- [CVE-2019-8086](https://insights.sbomify.com/CVE-2019-8086/): XML external entity in Adobe Experience Manager (high 7.5)
- [CVE-2019-8085](https://insights.sbomify.com/CVE-2019-8085/): Cross-site scripting in Adobe Experience Manager (medium 6.1)
- [CVE-2019-8084](https://insights.sbomify.com/CVE-2019-8084/): Cross-site scripting in Adobe Experience Manager (medium 6.1)
- [CVE-2019-8083](https://insights.sbomify.com/CVE-2019-8083/): Cross-site scripting in Adobe Experience Manager (medium 6.1)
- [CVE-2019-8082](https://insights.sbomify.com/CVE-2019-8082/): XML external entity in Adobe Experience Manager (high 7.5)
- [CVE-2019-8081](https://insights.sbomify.com/CVE-2019-8081/): Auth bypass in Adobe Experience Manager (high 7.5)
- [CVE-2019-8080](https://insights.sbomify.com/CVE-2019-8080/): Cross-site scripting in Adobe Experience Manager (medium 6.1)
- [CVE-2019-8079](https://insights.sbomify.com/CVE-2019-8079/): Cross-site scripting in Adobe Experience Manager (medium 6.1)
- [CVE-2019-8078](https://insights.sbomify.com/CVE-2019-8078/): Cross-site scripting in Adobe Experience Manager (medium 6.1)
- [CVE-2019-8077](https://insights.sbomify.com/CVE-2019-8077/): Information disclosure in Adobe Acrobat and Reader (high 7.5)
- [CVE-2019-8076](https://insights.sbomify.com/CVE-2019-8076/): Other in Application Manager (high 7.8)
- [CVE-2019-8075](https://insights.sbomify.com/CVE-2019-8075/): Security feature bypass in Flash Player (high 7.5)
- [CVE-2019-8074](https://insights.sbomify.com/CVE-2019-8074/): Path traversal in Cold Fusion (critical 9.8)
- [CVE-2019-8073](https://insights.sbomify.com/CVE-2019-8073/): Command injection in Cold Fusion (critical 9.8)
- [CVE-2019-8072](https://insights.sbomify.com/CVE-2019-8072/): Security feature bypass in Cold Fusion (high 7.5)
- [CVE-2019-8071](https://insights.sbomify.com/CVE-2019-8071/): Privilege escalation in Adobe Download Manager (critical 9.8)
- [CVE-2019-8070](https://insights.sbomify.com/CVE-2019-8070/): Use after free in Flash Player (critical 9.8)
- [CVE-2019-8069](https://insights.sbomify.com/CVE-2019-8069/): Other in Flash Player (critical 9.8)
- [CVE-2019-8066](https://insights.sbomify.com/CVE-2019-8066/): Memory corruption in Adobe Acrobat and Reader (high 7.8)
- [CVE-2019-8064](https://insights.sbomify.com/CVE-2019-8064/): Information disclosure in Adobe Acrobat and Reader (medium 4.3)
- [CVE-2019-8063](https://insights.sbomify.com/CVE-2019-8063/): Information disclosure in Creative Cloud Desktop Application (high 7.5)
- [CVE-2019-8062](https://insights.sbomify.com/CVE-2019-8062/): Other in Adobe After Effects (high 7.8)
- [CVE-2019-8061](https://insights.sbomify.com/CVE-2019-8061/): Use after free in Adobe Acrobat and Reader (critical 9.8)
- [CVE-2019-8060](https://insights.sbomify.com/CVE-2019-8060/): Command injection in Adobe Acrobat and Reader (critical 9.8)
- [CVE-2019-8059](https://insights.sbomify.com/CVE-2019-8059/): Use after free in Adobe Acrobat and Reader (medium 4.3)
- [CVE-2019-8058](https://insights.sbomify.com/CVE-2019-8058/): Use after free in Adobe Acrobat and Reader (medium 4.3)
- [CVE-2019-8057](https://insights.sbomify.com/CVE-2019-8057/): Use after free in Adobe Acrobat and Reader (high 8.8)
- [CVE-2019-8056](https://insights.sbomify.com/CVE-2019-8056/): Use after free in Adobe Acrobat and Reader (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/18/