# Vulnerabilities published in 2019


- [CVE-2019-7346](https://insights.sbomify.com/CVE-2019-7346/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2019-7345](https://insights.sbomify.com/CVE-2019-7345/): Cross-site scripting in n/a (medium 4.8)
- [CVE-2019-7344](https://insights.sbomify.com/CVE-2019-7344/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7343](https://insights.sbomify.com/CVE-2019-7343/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7342](https://insights.sbomify.com/CVE-2019-7342/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7341](https://insights.sbomify.com/CVE-2019-7341/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7340](https://insights.sbomify.com/CVE-2019-7340/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7339](https://insights.sbomify.com/CVE-2019-7339/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7338](https://insights.sbomify.com/CVE-2019-7338/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7337](https://insights.sbomify.com/CVE-2019-7337/): Cross-site scripting in n/a (medium 4.8)
- [CVE-2019-7336](https://insights.sbomify.com/CVE-2019-7336/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7335](https://insights.sbomify.com/CVE-2019-7335/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7334](https://insights.sbomify.com/CVE-2019-7334/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7333](https://insights.sbomify.com/CVE-2019-7333/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7332](https://insights.sbomify.com/CVE-2019-7332/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7331](https://insights.sbomify.com/CVE-2019-7331/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7330](https://insights.sbomify.com/CVE-2019-7330/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7329](https://insights.sbomify.com/CVE-2019-7329/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7328](https://insights.sbomify.com/CVE-2019-7328/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7327](https://insights.sbomify.com/CVE-2019-7327/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7326](https://insights.sbomify.com/CVE-2019-7326/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7325](https://insights.sbomify.com/CVE-2019-7325/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7324](https://insights.sbomify.com/CVE-2019-7324/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7323](https://insights.sbomify.com/CVE-2019-7323/): Supply chain in n/a (high 7.5)
- [CVE-2019-7321](https://insights.sbomify.com/CVE-2019-7321/): Memory corruption in n/a (critical 9.8)
- [CVE-2019-7319](https://insights.sbomify.com/CVE-2019-7319/): Privilege escalation in n/a (high 8.3)
- [CVE-2019-7317](https://insights.sbomify.com/CVE-2019-7317/): Use after free in n/a (medium 5.3)
- [CVE-2019-7316](https://insights.sbomify.com/CVE-2019-7316/): SQL injection in n/a (critical 9.8)
- [CVE-2019-7315](https://insights.sbomify.com/CVE-2019-7315/): Path traversal in n/a (high 7.5)
- [CVE-2019-7314](https://insights.sbomify.com/CVE-2019-7314/): Use after free in n/a (critical 9.8)
- [CVE-2019-7313](https://insights.sbomify.com/CVE-2019-7313/): Buildbot CRLF Injection (medium 6.1)
- [CVE-2019-7312](https://insights.sbomify.com/CVE-2019-7312/): Information disclosure in n/a (medium 5.3)
- [CVE-2019-7311](https://insights.sbomify.com/CVE-2019-7311/): Information disclosure in n/a (high 7.8)
- [CVE-2019-7310](https://insights.sbomify.com/CVE-2019-7310/): Integer overflow in n/a (high 7.8)
- [CVE-2019-7309](https://insights.sbomify.com/CVE-2019-7309/): Other in n/a (medium 5.5)
- [CVE-2019-7308](https://insights.sbomify.com/CVE-2019-7308/): Information disclosure in n/a (medium 5.6)
- [CVE-2019-7307](https://insights.sbomify.com/CVE-2019-7307/): Apport contains a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xml (medium 6.5)
- [CVE-2019-7306](https://insights.sbomify.com/CVE-2019-7306/): Byobu apport hook uploads user's ~/.screenrc (medium 4.3)
- [CVE-2019-7305](https://insights.sbomify.com/CVE-2019-7305/): eXtplorer exposes /usr and /etc/extplorer over HTTP (medium 5.8)
- [CVE-2019-7304](https://insights.sbomify.com/CVE-2019-7304/): Local privilege escalation via snapd socket (high 8.8)
- [CVE-2019-7303](https://insights.sbomify.com/CVE-2019-7303/): Snapd seccomp filter TIOCSTI ioctl bypass (medium 5.7)
- [CVE-2019-7301](https://insights.sbomify.com/CVE-2019-7301/): Command injection in n/a (high 7.2)
- [CVE-2019-7300](https://insights.sbomify.com/CVE-2019-7300/): Hardcoded credentials in n/a (high 7.2)
- [CVE-2019-7299](https://insights.sbomify.com/CVE-2019-7299/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7298](https://insights.sbomify.com/CVE-2019-7298/): Command injection in n/a (high 8.1)
- [CVE-2019-7297](https://insights.sbomify.com/CVE-2019-7297/): Command injection in n/a (critical 9.8)
- [CVE-2019-7296](https://insights.sbomify.com/CVE-2019-7296/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7295](https://insights.sbomify.com/CVE-2019-7295/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7293](https://insights.sbomify.com/CVE-2019-7293/): Memory corruption in iOS (medium 5.5)
- [CVE-2019-7292](https://insights.sbomify.com/CVE-2019-7292/): Information disclosure in Safari (medium 6.5)
- [CVE-2019-7291](https://insights.sbomify.com/CVE-2019-7291/): Denial of service in AirPort Base Station Firmware Update (medium 6.5)
- [CVE-2019-7290](https://insights.sbomify.com/CVE-2019-7290/): Security feature bypass in Shortcuts (critical 10.0)
- [CVE-2019-7289](https://insights.sbomify.com/CVE-2019-7289/): Path traversal in Shortcuts (medium 5.5)
- [CVE-2019-7288](https://insights.sbomify.com/CVE-2019-7288/): Other in iOS (critical 9.8)
- [CVE-2019-7287](https://insights.sbomify.com/CVE-2019-7287/): Apple iOS Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2019-7286](https://insights.sbomify.com/CVE-2019-7286/): Apple Multiple Products Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2019-7285](https://insights.sbomify.com/CVE-2019-7285/): Use after free in Safari (high 8.8)
- [CVE-2019-7284](https://insights.sbomify.com/CVE-2019-7284/): Security feature bypass in iOS (medium 4.3)
- [CVE-2019-7283](https://insights.sbomify.com/CVE-2019-7283/): Path traversal in n/a (high 7.4)
- [CVE-2019-7282](https://insights.sbomify.com/CVE-2019-7282/): Missing authorization in n/a (medium 5.9)
- [CVE-2019-7281](https://insights.sbomify.com/CVE-2019-7281/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2019-7280](https://insights.sbomify.com/CVE-2019-7280/): Auth bypass in n/a (high 8.8)
- [CVE-2019-7279](https://insights.sbomify.com/CVE-2019-7279/): Hardcoded credentials in n/a (high 7.3)
- [CVE-2019-7278](https://insights.sbomify.com/CVE-2019-7278/): Missing authorization in n/a (medium 6.5)
- [CVE-2019-7277](https://insights.sbomify.com/CVE-2019-7277/): Information disclosure in n/a (medium 5.3)
- [CVE-2019-7276](https://insights.sbomify.com/CVE-2019-7276/): Auth bypass in n/a (critical 9.8)
- [CVE-2019-7275](https://insights.sbomify.com/CVE-2019-7275/): Open redirect in n/a (medium 6.1)
- [CVE-2019-7274](https://insights.sbomify.com/CVE-2019-7274/): File upload in n/a (critical 9.8)
- [CVE-2019-7273](https://insights.sbomify.com/CVE-2019-7273/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2019-7272](https://insights.sbomify.com/CVE-2019-7272/): Information disclosure in n/a (medium 5.3)
- [CVE-2019-7271](https://insights.sbomify.com/CVE-2019-7271/): Hardcoded credentials in n/a (critical 9.8)
- [CVE-2019-7270](https://insights.sbomify.com/CVE-2019-7270/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2019-7269](https://insights.sbomify.com/CVE-2019-7269/): Command injection in n/a (critical 9.8)
- [CVE-2019-7268](https://insights.sbomify.com/CVE-2019-7268/): File upload in n/a (critical 10.0)
- [CVE-2019-7267](https://insights.sbomify.com/CVE-2019-7267/): Path traversal in n/a (critical 9.8)
- [CVE-2019-7266](https://insights.sbomify.com/CVE-2019-7266/): Auth bypass in n/a (critical 9.8)
- [CVE-2019-7265](https://insights.sbomify.com/CVE-2019-7265/): Hardcoded credentials in n/a (critical 9.8)
- [CVE-2019-7264](https://insights.sbomify.com/CVE-2019-7264/): Memory corruption in n/a (critical 9.8)
- [CVE-2019-7263](https://insights.sbomify.com/CVE-2019-7263/): Other in n/a (critical 9.8)
- [CVE-2019-7262](https://insights.sbomify.com/CVE-2019-7262/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2019-7261](https://insights.sbomify.com/CVE-2019-7261/): Hardcoded credentials in n/a (critical 9.8)
- [CVE-2019-7260](https://insights.sbomify.com/CVE-2019-7260/): Hardcoded credentials in n/a (critical 9.8)
- [CVE-2019-7259](https://insights.sbomify.com/CVE-2019-7259/): Auth bypass in n/a (high 8.8)
- [CVE-2019-7258](https://insights.sbomify.com/CVE-2019-7258/): Privilege escalation in n/a (high 8.8)
- [CVE-2019-7257](https://insights.sbomify.com/CVE-2019-7257/): File upload in n/a (critical 10.0)
- [CVE-2019-7256](https://insights.sbomify.com/CVE-2019-7256/): Nice Linear eMerge E3-Series OS Command Injection (critical 9.8, exploited in the wild)
- [CVE-2019-7255](https://insights.sbomify.com/CVE-2019-7255/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7254](https://insights.sbomify.com/CVE-2019-7254/): Path traversal in n/a (high 7.5)
- [CVE-2019-7253](https://insights.sbomify.com/CVE-2019-7253/): Path traversal in n/a (critical 9.8)
- [CVE-2019-7252](https://insights.sbomify.com/CVE-2019-7252/): Hardcoded credentials in n/a (critical 9.8)
- [CVE-2019-7251](https://insights.sbomify.com/CVE-2019-7251/): Integer overflow in n/a (medium 6.5)
- [CVE-2019-7250](https://insights.sbomify.com/CVE-2019-7250/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7249](https://insights.sbomify.com/CVE-2019-7249/): Race condition in n/a (critical 9.8)
- [CVE-2019-7247](https://insights.sbomify.com/CVE-2019-7247/): Privilege escalation in n/a (critical 9.8)
- [CVE-2019-7246](https://insights.sbomify.com/CVE-2019-7246/): Privilege escalation in n/a (medium 6.7)
- [CVE-2019-7245](https://insights.sbomify.com/CVE-2019-7245/): Privilege escalation in n/a (high 7.2)
- [CVE-2019-7244](https://insights.sbomify.com/CVE-2019-7244/): Privilege escalation in n/a (high 7.2)
- [CVE-2019-7240](https://insights.sbomify.com/CVE-2019-7240/): Privilege escalation in n/a (high 7.2)
- [CVE-2019-7238](https://insights.sbomify.com/CVE-2019-7238/): Sonatype Nexus Repository Manager Incorrect Access Control (critical 9.8, exploited in the wild)
- [CVE-2019-7237](https://insights.sbomify.com/CVE-2019-7237/): Path traversal in n/a (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/24/