# Vulnerabilities published in 2019


- [CVE-2019-25681](https://insights.sbomify.com/CVE-2019-25681/): Xlight FTP Server 3.9.1 SEH Overwrite Buffer Overflow (high 8.6)
- [CVE-2019-25680](https://insights.sbomify.com/CVE-2019-25680/): Advance Gift Shop Pro Script 2.0.3 SQL Injection via search (high 8.8)
- [CVE-2019-2568](https://insights.sbomify.com/CVE-2019-2568/): Other in WebLogic Server (medium 5.0)
- [CVE-2019-25679](https://insights.sbomify.com/CVE-2019-25679/): RealTerm Serial Terminal 2.0.0.70 Buffer Overflow SEH (high 8.5)
- [CVE-2019-25678](https://insights.sbomify.com/CVE-2019-25678/): C4G BLIS 3.4 SQL Injection via users_select.php (high 8.8)
- [CVE-2019-25677](https://insights.sbomify.com/CVE-2019-25677/): WinRAR 5.61 Denial of Service via Malformed Language File (medium 6.9)
- [CVE-2019-25676](https://insights.sbomify.com/CVE-2019-25676/): Ask Expert Script 3.0.5 Cross Site Scripting SQL Injection (high 8.8)
- [CVE-2019-25675](https://insights.sbomify.com/CVE-2019-25675/): eDirectory All Versions SQL Injection Authentication Bypass (high 8.8)
- [CVE-2019-25674](https://insights.sbomify.com/CVE-2019-25674/): CMSsite 1.0 SQL Injection via post Parameter (high 8.8)
- [CVE-2019-25673](https://insights.sbomify.com/CVE-2019-25673/): UniSharp Laravel File Manager v2.0.0-alpha7 Arbitrary File Upload (high 8.7)
- [CVE-2019-25672](https://insights.sbomify.com/CVE-2019-25672/): PilusCart 1.4.1 SQL Injection via send Parameter (high 8.8)
- [CVE-2019-25671](https://insights.sbomify.com/CVE-2019-25671/): VA MAX 8.3.4 Remote Code Execution via changeip.php (high 8.7)
- [CVE-2019-25670](https://insights.sbomify.com/CVE-2019-25670/): River Past Video Cleaner 7.6.3 Buffer Overflow via SEH (high 8.6)
- [CVE-2019-2567](https://insights.sbomify.com/CVE-2019-2567/): Other in Configurator (high 7.5)
- [CVE-2019-25669](https://insights.sbomify.com/CVE-2019-25669/): qdPM 9.1 SQL Injection via search_by_extrafields Parameter (high 8.8)
- [CVE-2019-25668](https://insights.sbomify.com/CVE-2019-25668/): News Website Script 2.0.5 SQL Injection via index.php (high 8.8)
- [CVE-2019-25667](https://insights.sbomify.com/CVE-2019-25667/): TaskInfo 8.2.0.280 Denial of Service Buffer Overflow (medium 6.9)
- [CVE-2019-25666](https://insights.sbomify.com/CVE-2019-25666/): SpotAuditor 3.6.7 Denial of Service Buffer Overflow (medium 6.9)
- [CVE-2019-25665](https://insights.sbomify.com/CVE-2019-25665/): River Past Ringtone Converter 2.7.6.1601 Buffer Overflow DoS (medium 6.9)
- [CVE-2019-25664](https://insights.sbomify.com/CVE-2019-25664/): SuiteCRM 7.10.7 SQL Injection via record Parameter (high 7.1)
- [CVE-2019-25663](https://insights.sbomify.com/CVE-2019-25663/): SuiteCRM 7.10.7 SQL Injection via parentTab Parameter (high 7.1)
- [CVE-2019-25662](https://insights.sbomify.com/CVE-2019-25662/): ResourceSpace 8.6 SQL Injection via watched_searches.php (high 8.8)
- [CVE-2019-25661](https://insights.sbomify.com/CVE-2019-25661/): Remote Process Explorer 1.0.0.16 Local Buffer Overflow DoS (medium 6.9)
- [CVE-2019-25660](https://insights.sbomify.com/CVE-2019-25660/): LanHelper 1.74 Denial of Service via Buffer Overflow (medium 6.9)
- [CVE-2019-2566](https://insights.sbomify.com/CVE-2019-2566/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2019-25659](https://insights.sbomify.com/CVE-2019-25659/): ASPRunner Professional 6.0.766 Local Buffer Overflow DoS (medium 6.9)
- [CVE-2019-25658](https://insights.sbomify.com/CVE-2019-25658/): a-Mac Address Change 5.4 Local Buffer Overflow DoS (medium 6.8)
- [CVE-2019-25657](https://insights.sbomify.com/CVE-2019-25657/): AnyBurn 4.3 x86 Denial of Service via Image Conversion (medium 6.8)
- [CVE-2019-25656](https://insights.sbomify.com/CVE-2019-25656/): R i386 3.5.0 Local Buffer Overflow SEH (high 8.6)
- [CVE-2019-25655](https://insights.sbomify.com/CVE-2019-25655/): Device Monitoring Studio 8.10.00.8925 Denial of Service (medium 6.9)
- [CVE-2019-25654](https://insights.sbomify.com/CVE-2019-25654/): Core FTP/SFTP Server 1.2 Denial of Service via Buffer Overflow (high 8.7)
- [CVE-2019-25653](https://insights.sbomify.com/CVE-2019-25653/): Navicat for Oracle 12.1.15 Password Field Denial of Service (medium 6.9)
- [CVE-2019-25652](https://insights.sbomify.com/CVE-2019-25652/): UniFi Network Controller Improper Certificate Validation Leading to Credential Theft via MITM (high 7.7)
- [CVE-2019-25651](https://insights.sbomify.com/CVE-2019-25651/): Ubiquiti UniFi Devices Use of AES-CBC Allows Key Recovery and Unauthorized Device Control (critical 9.0)
- [CVE-2019-25650](https://insights.sbomify.com/CVE-2019-25650/): River Past CamDo 3.7.6 Structured Exception Handler Buffer Overflow (high 8.6)
- [CVE-2019-2565](https://insights.sbomify.com/CVE-2019-2565/): Information disclosure in JD Edwards World Technical Foundation (high 7.5)
- [CVE-2019-25649](https://insights.sbomify.com/CVE-2019-25649/): River Past Audio Converter 7.7.16 Local Buffer Overflow DoS (medium 6.8)
- [CVE-2019-25648](https://insights.sbomify.com/CVE-2019-25648/): MyVideoConverter Pro 3.14 Denial of Service Buffer Overflow (medium 6.9)
- [CVE-2019-25647](https://insights.sbomify.com/CVE-2019-25647/): PhreeBooks ERP 5.2.3 Remote Code Execution via Image Manager (high 8.7)
- [CVE-2019-25646](https://insights.sbomify.com/CVE-2019-25646/): Tabs Mail Carrier 2.5.1 Buffer Overflow via MAIL FROM (critical 9.3)
- [CVE-2019-25645](https://insights.sbomify.com/CVE-2019-25645/): WinAVI iPod 3GP MP4 PSP Converter 4.4.2 Denial of Service (medium 6.9)
- [CVE-2019-25644](https://insights.sbomify.com/CVE-2019-25644/): WinMPG Video Convert 9.3.5 Buffer Overflow Local Denial of Service (medium 6.9)
- [CVE-2019-25643](https://insights.sbomify.com/CVE-2019-25643/): eNdonesia Portal v8.7 SQL Injection via banners.php (high 8.8)
- [CVE-2019-25642](https://insights.sbomify.com/CVE-2019-25642/): Bootstrapy CMS Lastest Multiple SQL Injection via Forum and Contact Modules (high 8.8)
- [CVE-2019-25641](https://insights.sbomify.com/CVE-2019-25641/): Netartmedia Vlog System Lastest SQL Injection via email Parameter (high 8.8)
- [CVE-2019-25640](https://insights.sbomify.com/CVE-2019-25640/): Inout Article Base CMS Lastest SQL Injection via portalLogin.php (high 8.8)
- [CVE-2019-2564](https://insights.sbomify.com/CVE-2019-2564/): Information disclosure in JD Edwards EnterpriseOne Tools (medium 4.3)
- [CVE-2019-25639](https://insights.sbomify.com/CVE-2019-25639/): Matrimony Website Script M-Plus Multiple SQL Injection (high 8.8)
- [CVE-2019-25638](https://insights.sbomify.com/CVE-2019-25638/): Meeplace Business Review Script Lastest SQL Injection via addclick.php (high 7.1)
- [CVE-2019-25637](https://insights.sbomify.com/CVE-2019-25637/): X-NetStat Pro 5.63 Local Buffer Overflow via EggHunter (high 8.6)
- [CVE-2019-25636](https://insights.sbomify.com/CVE-2019-25636/): Zeeways Jobsite CMS Lastest SQL Injection via id Parameter (high 8.8)
- [CVE-2019-25635](https://insights.sbomify.com/CVE-2019-25635/): Zeeways Matrimony CMS Lastest SQL Injection via profile_list (high 8.8)
- [CVE-2019-25634](https://insights.sbomify.com/CVE-2019-25634/): Base64 Decoder 1.1.2 Local Buffer Overflow SEH Egghunter (high 8.6)
- [CVE-2019-25633](https://insights.sbomify.com/CVE-2019-25633/): AIDA64 Extreme 5.99.4900 SEH Buffer Overflow via EggHunter (high 8.6)
- [CVE-2019-25632](https://insights.sbomify.com/CVE-2019-25632/): phpFileManager 1.7.8 Local File Inclusion via index.php (medium 6.9)
- [CVE-2019-25631](https://insights.sbomify.com/CVE-2019-25631/): AIDA64 Business 5.99.4900 SEH Buffer Overflow via EggHunter (high 8.6)
- [CVE-2019-25630](https://insights.sbomify.com/CVE-2019-25630/): PhreeBooks ERP 5.2.3 Arbitrary File Upload via Image Manager (high 8.7)
- [CVE-2019-25629](https://insights.sbomify.com/CVE-2019-25629/): AIDA64 Extreme 5.99.4900 SEH Buffer Overflow via Logging (high 8.6)
- [CVE-2019-25628](https://insights.sbomify.com/CVE-2019-25628/): Download Accelerator Plus DAP 10.0.6.0 SEH Buffer Overflow (critical 9.3)
- [CVE-2019-25627](https://insights.sbomify.com/CVE-2019-25627/): FlexHEX 2.71 Local Buffer Overflow via SEH Unicode (high 8.6)
- [CVE-2019-25626](https://insights.sbomify.com/CVE-2019-25626/): River Past Cam Do 3.7.6 Local Buffer Overflow in Activation Code (high 8.6)
- [CVE-2019-25625](https://insights.sbomify.com/CVE-2019-25625/): Blob Studio 2.17 Denial of Service via Malformed Input (medium 6.9)
- [CVE-2019-25624](https://insights.sbomify.com/CVE-2019-25624/): Liquid Studio 2.17 Denial of Service via Malformed Input (medium 6.9)
- [CVE-2019-25623](https://insights.sbomify.com/CVE-2019-25623/): Luminance Studio 2.17 Denial of Service via Malformed Input (medium 6.9)
- [CVE-2019-25622](https://insights.sbomify.com/CVE-2019-25622/): Paint Studio 2.17 Denial of Service via Malformed Input (medium 6.9)
- [CVE-2019-25621](https://insights.sbomify.com/CVE-2019-25621/): Pixel Studio 2.17 Denial of Service via Malformed Input (medium 6.9)
- [CVE-2019-25620](https://insights.sbomify.com/CVE-2019-25620/): Tree Studio 2.17 Denial of Service via Malformed Input (medium 6.9)
- [CVE-2019-25619](https://insights.sbomify.com/CVE-2019-25619/): FTP Shell Server 6.83 Buffer Overflow via Account Name (high 8.6)
- [CVE-2019-25618](https://insights.sbomify.com/CVE-2019-25618/): AdminExpress 1.2.5 Denial of Service via System Compare (medium 6.9)
- [CVE-2019-25617](https://insights.sbomify.com/CVE-2019-25617/): Ease Audio Converter 5.30 Denial of Service via Audio Cutter (medium 6.9)
- [CVE-2019-25616](https://insights.sbomify.com/CVE-2019-25616/): AnMing MP3 CD Burner 2.0 Local Denial of Service (medium 6.9)
- [CVE-2019-25615](https://insights.sbomify.com/CVE-2019-25615/): Lavavo CD Ripper 4.20 Local SEH Buffer Overflow (high 8.6)
- [CVE-2019-25614](https://insights.sbomify.com/CVE-2019-25614/): Free Float FTP 1.0 STOR Command Remote Buffer Overflow (critical 9.3)
- [CVE-2019-25613](https://insights.sbomify.com/CVE-2019-25613/): Easy Chat Server 3.1 Denial of Service via message Parameter (high 8.7)
- [CVE-2019-25612](https://insights.sbomify.com/CVE-2019-25612/): Admin Express 1.2.5.485 Local SEH Buffer Overflow via Folder Path (high 8.5)
- [CVE-2019-25611](https://insights.sbomify.com/CVE-2019-25611/): MiniFtp parseconf_load_setting Buffer Overflow via Configuration (high 8.6)
- [CVE-2019-25610](https://insights.sbomify.com/CVE-2019-25610/): NetNumber Titan Master 7.9.1 Path Traversal via drp (high 7.1)
- [CVE-2019-2561](https://insights.sbomify.com/CVE-2019-2561/): Other in Retail Xstore Office (high 8.2)
- [CVE-2019-25609](https://insights.sbomify.com/CVE-2019-25609/): JetAudio jetCast Server 2.0 Local SEH Buffer Overflow (high 8.6)
- [CVE-2019-25608](https://insights.sbomify.com/CVE-2019-25608/): Iperius Backup 6.1.0 Privilege Escalation via Backup Job (high 8.6)
- [CVE-2019-25607](https://insights.sbomify.com/CVE-2019-25607/): Axessh 4.2 Local Stack-based Buffer Overflow via Log File Name (high 8.6)
- [CVE-2019-25606](https://insights.sbomify.com/CVE-2019-25606/): Fast AVI MPEG Joiner 1.2.0812 Buffer Overflow Denial of Service (medium 6.8)
- [CVE-2019-25605](https://insights.sbomify.com/CVE-2019-25605/): EquityPandit 1.0 Insecure Logging Information Disclosure (high 8.7)
- [CVE-2019-25604](https://insights.sbomify.com/CVE-2019-25604/): DVDXPlayer Pro 5.5 Local Buffer Overflow with SEH (high 8.6)
- [CVE-2019-25603](https://insights.sbomify.com/CVE-2019-25603/): TuneClone 2.20 Structured Exception Handler Buffer Overflow (high 8.6)
- [CVE-2019-25602](https://insights.sbomify.com/CVE-2019-25602/): GSearch 1.0.1.0 Denial of Service via Search Input (medium 6.8)
- [CVE-2019-25601](https://insights.sbomify.com/CVE-2019-25601/): UltraVNC Launcher 1.2.2.4 Denial of Service Buffer Overflow (medium 6.9)
- [CVE-2019-25600](https://insights.sbomify.com/CVE-2019-25600/): UltraVNC Viewer 1.2.2.4 Denial of Service via Buffer Overflow (high 7.1)
- [CVE-2019-25599](https://insights.sbomify.com/CVE-2019-25599/): Backup Key Recovery 2.2.4 Denial of Service via Name Field (medium 6.9)
- [CVE-2019-25598](https://insights.sbomify.com/CVE-2019-25598/): HeidiSQL Portable 10.1.0.5464 Denial of Service via Buffer Overflow (medium 6.9)
- [CVE-2019-25597](https://insights.sbomify.com/CVE-2019-25597/): NSauditor 3.1.2.0 Denial of Service via Community Field (medium 6.9)
- [CVE-2019-25596](https://insights.sbomify.com/CVE-2019-25596/): SpotAuditor 5.2.6 Name Field Denial of Service (medium 6.9)
- [CVE-2019-25595](https://insights.sbomify.com/CVE-2019-25595/): jetAudio 8.1.7.20702 Basic Denial of Service via URL Handler (medium 6.9)
- [CVE-2019-25594](https://insights.sbomify.com/CVE-2019-25594/): ASPRunner.NET 10.1 Denial of Service via Table Name Field (medium 6.9)
- [CVE-2019-25593](https://insights.sbomify.com/CVE-2019-25593/): jetCast Server 2.0 Denial of Service via Log Directory (medium 6.8)
- [CVE-2019-25592](https://insights.sbomify.com/CVE-2019-25592/): PHPRunner 10.1 Denial of Service via Dashboard Name Field (medium 6.9)
- [CVE-2019-25591](https://insights.sbomify.com/CVE-2019-25591/): DNSS Domain Name Search Software 2.1.8 Denial of Service (medium 6.9)
- [CVE-2019-25590](https://insights.sbomify.com/CVE-2019-25590/): Axessh 4.2 Denial of Service via Log File Name (medium 6.9)
- [CVE-2019-25589](https://insights.sbomify.com/CVE-2019-25589/): ZOC Terminal 7.23.4 Buffer Overflow Denial of Service (medium 6.9)
- [CVE-2019-25588](https://insights.sbomify.com/CVE-2019-25588/): BulletProof FTP Server 2019.0.0.50 Denial of Service via DNS Address (medium 6.9)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/56/