# Vulnerabilities published in 2019


- [CVE-2019-5070](https://insights.sbomify.com/CVE-2019-5070/): SQL injection in Epignosis (medium 6.5)
- [CVE-2019-5069](https://insights.sbomify.com/CVE-2019-5069/): Deserialization in Epignosis (high 8.8)
- [CVE-2019-5068](https://insights.sbomify.com/CVE-2019-5068/): Misconfiguration in Mesa 3D X11 Graphics library (medium 5.1)
- [CVE-2019-5067](https://insights.sbomify.com/CVE-2019-5067/): Memory corruption in Aspose (critical 9.8)
- [CVE-2019-5066](https://insights.sbomify.com/CVE-2019-5066/): Use after free in Aspose (critical 9.8)
- [CVE-2019-5065](https://insights.sbomify.com/CVE-2019-5065/): Information disclosure in Blynck Inc (medium 5.3)
- [CVE-2019-5064](https://insights.sbomify.com/CVE-2019-5064/): Out-of-bounds Write in OpenCV (high 8.8)
- [CVE-2019-5063](https://insights.sbomify.com/CVE-2019-5063/): Out-of-bounds Write in OpenCV (high 8.8)
- [CVE-2019-5062](https://insights.sbomify.com/CVE-2019-5062/): Denial of service in W1.f1 (high 7.4)
- [CVE-2019-5061](https://insights.sbomify.com/CVE-2019-5061/): Auth bypass in W1.f1 (high 7.4)
- [CVE-2019-5060](https://insights.sbomify.com/CVE-2019-5060/): Integer overflow in SDL (high 8.8)
- [CVE-2019-5059](https://insights.sbomify.com/CVE-2019-5059/): Integer overflow in SDL (high 8.8)
- [CVE-2019-5058](https://insights.sbomify.com/CVE-2019-5058/): Memory corruption in SDL (high 8.8)
- [CVE-2019-5057](https://insights.sbomify.com/CVE-2019-5057/): Memory corruption in SDL (high 8.8)
- [CVE-2019-5055](https://insights.sbomify.com/CVE-2019-5055/): Null dereference in N300 WNR2000v5 (high 7.5)
- [CVE-2019-5054](https://insights.sbomify.com/CVE-2019-5054/): Null dereference in N300 WNR2000v5 (high 7.5)
- [CVE-2019-5053](https://insights.sbomify.com/CVE-2019-5053/): Use after free in NitroPDF (high 7.5)
- [CVE-2019-5052](https://insights.sbomify.com/CVE-2019-5052/): Integer overflow in Simple DirectMedia (high 8.8)
- [CVE-2019-5051](https://insights.sbomify.com/CVE-2019-5051/): Memory corruption in Simple DirectMedia (high 8.8)
- [CVE-2019-5050](https://insights.sbomify.com/CVE-2019-5050/): Memory corruption in NitroPDF (high 8.8)
- [CVE-2019-5049](https://insights.sbomify.com/CVE-2019-5049/): Memory corruption in AMD ATI (critical 10.0)
- [CVE-2019-5048](https://insights.sbomify.com/CVE-2019-5048/): Memory corruption in NitroPDF (high 8.8)
- [CVE-2019-5047](https://insights.sbomify.com/CVE-2019-5047/): Use after free in NitroPDF (high 7.5)
- [CVE-2019-5046](https://insights.sbomify.com/CVE-2019-5046/): Memory corruption in NitroPDF (high 8.8)
- [CVE-2019-5045](https://insights.sbomify.com/CVE-2019-5045/): Memory corruption in NitroPDF (high 8.8)
- [CVE-2019-5043](https://insights.sbomify.com/CVE-2019-5043/): Denial of service in Nest Labs (medium 5.3)
- [CVE-2019-5042](https://insights.sbomify.com/CVE-2019-5042/): Use after free in Aspose.PDF for C++ (high 8.8)
- [CVE-2019-5041](https://insights.sbomify.com/CVE-2019-5041/): Memory corruption in Aspose (critical 9.8)
- [CVE-2019-5040](https://insights.sbomify.com/CVE-2019-5040/): Integer overflow in Nest Labs (high 8.2)
- [CVE-2019-5039](https://insights.sbomify.com/CVE-2019-5039/): Memory corruption in Nest Labs (high 7.5)
- [CVE-2019-5038](https://insights.sbomify.com/CVE-2019-5038/): Memory corruption in Nest Labs (high 7.5)
- [CVE-2019-5037](https://insights.sbomify.com/CVE-2019-5037/): Integer overflow in Nest Labs (high 7.5)
- [CVE-2019-5036](https://insights.sbomify.com/CVE-2019-5036/): Denial of service in Nest Labs (high 7.5)
- [CVE-2019-5035](https://insights.sbomify.com/CVE-2019-5035/): Weak cryptography in Nest Labs (critical 9.0)
- [CVE-2019-5034](https://insights.sbomify.com/CVE-2019-5034/): Memory corruption in Nest Labs (medium 5.3)
- [CVE-2019-5033](https://insights.sbomify.com/CVE-2019-5033/): Memory corruption in Aspose (critical 9.8)
- [CVE-2019-5032](https://insights.sbomify.com/CVE-2019-5032/): Memory corruption in Aspose (critical 9.8)
- [CVE-2019-5031](https://insights.sbomify.com/CVE-2019-5031/): Memory corruption in Foxit (high 8.8)
- [CVE-2019-5030](https://insights.sbomify.com/CVE-2019-5030/): Memory corruption in Antenna House (high 8.8)
- [CVE-2019-5029](https://insights.sbomify.com/CVE-2019-5029/): Command injection in Exhibitor (critical 9.8)
- [CVE-2019-5024](https://insights.sbomify.com/CVE-2019-5024/): Security feature bypass in Capsule Technologies SmartLinx Neuron 2 (high 7.6)
- [CVE-2019-5023](https://insights.sbomify.com/CVE-2019-5023/): Denial of service in PaX (medium 5.9)
- [CVE-2019-5021](https://insights.sbomify.com/CVE-2019-5021/): Hardcoded credentials in Alpine Linux (critical 9.8)
- [CVE-2019-5020](https://insights.sbomify.com/CVE-2019-5020/): Denial of service in Yara Object (medium 6.5)
- [CVE-2019-5019](https://insights.sbomify.com/CVE-2019-5019/): Memory corruption in Antenna House (high 8.8)
- [CVE-2019-5018](https://insights.sbomify.com/CVE-2019-5018/): Use after free in Sqlite3 (high 8.1)
- [CVE-2019-5017](https://insights.sbomify.com/CVE-2019-5017/): Information disclosure in KCodes (medium 5.8)
- [CVE-2019-5016](https://insights.sbomify.com/CVE-2019-5016/): Memory corruption in KCodes (critical 10.0)
- [CVE-2019-5015](https://insights.sbomify.com/CVE-2019-5015/): Privilege escalation in Pixar Renderman (critical 9.0)
- [CVE-2019-5014](https://insights.sbomify.com/CVE-2019-5014/): Missing authorization in Winco Firefly (medium 6.5)
- [CVE-2019-5013](https://insights.sbomify.com/CVE-2019-5013/): Command injection in Wacom (high 7.1)
- [CVE-2019-5012](https://insights.sbomify.com/CVE-2019-5012/): Command injection in Wacom (high 7.8)
- [CVE-2019-5011](https://insights.sbomify.com/CVE-2019-5011/): Privilege escalation in CleanMyMac X (high 7.1)
- [CVE-2019-5010](https://insights.sbomify.com/CVE-2019-5010/): Null dereference in Python (medium 5.9)
- [CVE-2019-5009](https://insights.sbomify.com/CVE-2019-5009/): File upload in vtiger:vtiger crm (high 7.2)
- [CVE-2019-5008](https://insights.sbomify.com/CVE-2019-5008/): Null dereference in qemu:qemu (high 7.5)
- [CVE-2019-5007](https://insights.sbomify.com/CVE-2019-5007/): Null dereference in foxitsoftware:foxit reader (high 7.1)
- [CVE-2019-5006](https://insights.sbomify.com/CVE-2019-5006/): Null dereference in foxitsoftware:foxit reader (medium 5.5)
- [CVE-2019-5005](https://insights.sbomify.com/CVE-2019-5005/): Memory corruption in foxitsoftware:foxit reader (medium 5.5)
- [CVE-2019-4762](https://insights.sbomify.com/CVE-2019-4762/): Denial of service in MQ (medium 5.9)
- [CVE-2019-4752](https://insights.sbomify.com/CVE-2019-4752/): SQL injection in Emptoris Spend Analysis (high 7.6)
- [CVE-2019-4751](https://insights.sbomify.com/CVE-2019-4751/): Information disclosure in Cloud App Management (medium 5.3)
- [CVE-2019-4750](https://insights.sbomify.com/CVE-2019-4750/): Cross-site request forgery in Cloud App Management (medium 4.3)
- [CVE-2019-4749](https://insights.sbomify.com/CVE-2019-4749/): Cross-site scripting in Maximo Asset Management (medium 5.4)
- [CVE-2019-4748](https://insights.sbomify.com/CVE-2019-4748/): Cross-site scripting in Engineering Workflow Management (medium 5.4)
- [CVE-2019-4747](https://insights.sbomify.com/CVE-2019-4747/): Cross-site scripting in Rational Team Concert (medium 5.4)
- [CVE-2019-4746](https://insights.sbomify.com/CVE-2019-4746/): Cross-site scripting in Rational DOORS Next Generation (medium 5.4)
- [CVE-2019-4745](https://insights.sbomify.com/CVE-2019-4745/): Information disclosure in Maximo Asset Management (medium 4.3)
- [CVE-2019-4744](https://insights.sbomify.com/CVE-2019-4744/): Cross-site scripting in Financial Transaction Manager (medium 6.1)
- [CVE-2019-4743](https://insights.sbomify.com/CVE-2019-4743/): Information disclosure in Financial Transaction Manager (medium 4.3)
- [CVE-2019-4742](https://insights.sbomify.com/CVE-2019-4742/): Other in Financial Transaction Manager (medium 6.1)
- [CVE-2019-4741](https://insights.sbomify.com/CVE-2019-4741/): Server-side request forgery in Content Navigator (medium 5.3)
- [CVE-2019-4740](https://insights.sbomify.com/CVE-2019-4740/): Cross-site scripting in Rational DOORS Next Generation (medium 5.4)
- [CVE-2019-4738](https://insights.sbomify.com/CVE-2019-4738/): Information disclosure in Sterling B2B Integrator (medium 4.3)
- [CVE-2019-4737](https://insights.sbomify.com/CVE-2019-4737/): Cross-site scripting in Rational DOORS Next Generation (medium 5.4)
- [CVE-2019-4736](https://insights.sbomify.com/CVE-2019-4736/): Cross-site request forgery in Financial Transaction Manager (medium 4.3)
- [CVE-2019-4735](https://insights.sbomify.com/CVE-2019-4735/): Information disclosure in MaaS360 (low 2.4)
- [CVE-2019-4732](https://insights.sbomify.com/CVE-2019-4732/): Other in Java (high 7.2)
- [CVE-2019-4731](https://insights.sbomify.com/CVE-2019-4731/): Information disclosure in MQ Appliance (medium 5.1)
- [CVE-2019-4730](https://insights.sbomify.com/CVE-2019-4730/): XML external entity in Cognos Analytics (high 7.1)
- [CVE-2019-4729](https://insights.sbomify.com/CVE-2019-4729/): Information disclosure in Cognos Analytics (medium 4.3)
- [CVE-2019-4728](https://insights.sbomify.com/CVE-2019-4728/): Deserialization in Sterling B2B Integrator (high 8.8)
- [CVE-2019-4726](https://insights.sbomify.com/CVE-2019-4726/): Cross-site request forgery in Sterling B2B Integrator (medium 4.3)
- [CVE-2019-4725](https://insights.sbomify.com/CVE-2019-4725/): Cross-site scripting in Security Access Manager Appliance (medium 6.1)
- [CVE-2019-4724](https://insights.sbomify.com/CVE-2019-4724/): Information disclosure in Cognos Analytics (medium 4.6)
- [CVE-2019-4723](https://insights.sbomify.com/CVE-2019-4723/): Information disclosure in Cognos Analytics (medium 4.6)
- [CVE-2019-4722](https://insights.sbomify.com/CVE-2019-4722/): Information disclosure in Cognos Analytics (medium 4.3)
- [CVE-2019-4720](https://insights.sbomify.com/CVE-2019-4720/): Denial of service in WebSphere Application Server (high 7.5)
- [CVE-2019-4719](https://insights.sbomify.com/CVE-2019-4719/): Information disclosure in MQ (medium 5.1)
- [CVE-2019-4718](https://insights.sbomify.com/CVE-2019-4718/): Cross-site scripting in Jazz for Service Management (medium 5.4)
- [CVE-2019-4716](https://insights.sbomify.com/CVE-2019-4716/): IBM Planning Analytics Remote Code Execution (critical 10.0, exploited in the wild)
- [CVE-2019-4715](https://insights.sbomify.com/CVE-2019-4715/): Command injection in Spectrum Scale (high 8.8)
- [CVE-2019-4713](https://insights.sbomify.com/CVE-2019-4713/): Command injection in Security Guardium Data Encryption (high 8.8)
- [CVE-2019-4707](https://insights.sbomify.com/CVE-2019-4707/): XML external entity in Security Access Manager Appliance (high 7.1)
- [CVE-2019-4706](https://insights.sbomify.com/CVE-2019-4706/): Information disclosure in Security Identity Manager Virtual Appliance (low 2.7)
- [CVE-2019-4705](https://insights.sbomify.com/CVE-2019-4705/): Information disclosure in Security Identity Manager Virtual Appliance (low 2.7)
- [CVE-2019-4704](https://insights.sbomify.com/CVE-2019-4704/): Information disclosure in Security Identity Manager Virtual Appliance (low 3.7)
- [CVE-2019-4703](https://insights.sbomify.com/CVE-2019-4703/): Information disclosure in Spectrum Protect Plus (medium 5.3)
- [CVE-2019-4702](https://insights.sbomify.com/CVE-2019-4702/): Misconfiguration in Security Guardium Data Encryption (medium 4.2)
- [CVE-2019-4701](https://insights.sbomify.com/CVE-2019-4701/): Misconfiguration in Security Guardium Data Encryption (medium 5.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/41/
