# Vulnerabilities published in 2019


- [CVE-2019-25587](https://insights.sbomify.com/CVE-2019-25587/): BulletProof FTP Server 2019.0.0.50 Storage-Path Denial of Service (medium 6.9)
- [CVE-2019-25586](https://insights.sbomify.com/CVE-2019-25586/): Deluge 1.3.15 Denial of Service via URL Field (medium 6.9)
- [CVE-2019-25585](https://insights.sbomify.com/CVE-2019-25585/): Deluge 1.3.15 Denial of Service via Webseeds Field (medium 6.9)
- [CVE-2019-25584](https://insights.sbomify.com/CVE-2019-25584/): RarmaRadio 2.72.3 Server Field Buffer Overflow Denial of Service (medium 6.9)
- [CVE-2019-25583](https://insights.sbomify.com/CVE-2019-25583/): RarmaRadio 2.72.3 Username Field Denial of Service (medium 6.9)
- [CVE-2019-25582](https://insights.sbomify.com/CVE-2019-25582/): i-doit CMDB 1.12 Arbitrary File Download via file_manager Parameter (high 7.1)
- [CVE-2019-25581](https://insights.sbomify.com/CVE-2019-25581/): i-doit CMDB 1.12 SQL Injection via objGroupID Parameter (high 8.8)
- [CVE-2019-25580](https://insights.sbomify.com/CVE-2019-25580/): ownDMS 4.7 SQL Injection via pdfstream.php imagestream.php (high 8.8)
- [CVE-2019-2558](https://insights.sbomify.com/CVE-2019-2558/): Other in Retail Point-of-Service (high 7.3)
- [CVE-2019-25579](https://insights.sbomify.com/CVE-2019-25579/): phpTransformer 2016.9 Directory Traversal via jQueryFileUpload (high 8.7)
- [CVE-2019-25578](https://insights.sbomify.com/CVE-2019-25578/): phpTransformer 2016.9 SQL Injection via GeneratePDF.php (high 8.8)
- [CVE-2019-25577](https://insights.sbomify.com/CVE-2019-25577/): SeoToaster Ecommerce 3.0.0 Local File Inclusion via backend_theme (medium 6.8)
- [CVE-2019-25576](https://insights.sbomify.com/CVE-2019-25576/): Kepler Wallpaper Script 1.1 SQL Injection via category (high 8.8)
- [CVE-2019-25575](https://insights.sbomify.com/CVE-2019-25575/): SimplePress CMS 1.0.7 SQL Injection via p and s Parameters (high 8.8)
- [CVE-2019-25574](https://insights.sbomify.com/CVE-2019-25574/): Green CMS 2.x Path Traversal Arbitrary File Download (high 7.1)
- [CVE-2019-25573](https://insights.sbomify.com/CVE-2019-25573/): Green CMS 2.x SQL Injection via cat Parameter (high 7.1)
- [CVE-2019-25572](https://insights.sbomify.com/CVE-2019-25572/): NordVPN 6.19.6 Denial of Service via Email Field Buffer Overflow (medium 6.9)
- [CVE-2019-25571](https://insights.sbomify.com/CVE-2019-25571/): MediaMonkey 4.1.23 Denial of Service via Malformed URL (medium 6.9)
- [CVE-2019-25570](https://insights.sbomify.com/CVE-2019-25570/): RealTerm Serial Terminal 2.0.0.70 Denial of Service via Port Field (medium 6.8)
- [CVE-2019-2557](https://insights.sbomify.com/CVE-2019-2557/): Other in Application Testing Suite (medium 6.3)
- [CVE-2019-25569](https://insights.sbomify.com/CVE-2019-25569/): RealTerm Serial Terminal 2.0.0.70 SEH Overflow Crash (medium 6.9)
- [CVE-2019-25568](https://insights.sbomify.com/CVE-2019-25568/): Memu Play 6.0.7 Privilege Escalation via Insecure File Permissions (critical 9.3)
- [CVE-2019-25567](https://insights.sbomify.com/CVE-2019-25567/): Valentina Studio 9.0.5 Linux Buffer Overflow via Host Field (medium 6.9)
- [CVE-2019-25566](https://insights.sbomify.com/CVE-2019-25566/): TransMac 12.3 Denial of Service via Volume Name Field (medium 6.9)
- [CVE-2019-25565](https://insights.sbomify.com/CVE-2019-25565/): Magic Iso Maker 5.5 Buffer Overflow Denial of Service (medium 6.9)
- [CVE-2019-25564](https://insights.sbomify.com/CVE-2019-25564/): PCHelpWareV2 1.0.0.5 Denial of Service via Group Field (medium 6.8)
- [CVE-2019-25563](https://insights.sbomify.com/CVE-2019-25563/): PCHelpWareV2 1.0.0.5 Denial of Service via SC Creation (medium 6.9)
- [CVE-2019-25562](https://insights.sbomify.com/CVE-2019-25562/): jetAudio 8.1.7 Denial of Service via File Naming Buffer Overflow (medium 6.8)
- [CVE-2019-25561](https://insights.sbomify.com/CVE-2019-25561/): Lyric Maker 2.0.1.0 Denial of Service via Buffer Overflow (medium 6.9)
- [CVE-2019-25560](https://insights.sbomify.com/CVE-2019-25560/): Lyric Video Creator 2.1 Denial of Service via MP3 File (high 8.7)
- [CVE-2019-2556](https://insights.sbomify.com/CVE-2019-2556/): Information disclosure in VM VirtualBox (medium 6.5)
- [CVE-2019-25559](https://insights.sbomify.com/CVE-2019-25559/): SpotPaltalk 1.1.5 Name/Key Field Denial of Service (medium 6.8)
- [CVE-2019-25558](https://insights.sbomify.com/CVE-2019-25558/): Selfie Studio 2.17 Denial of Service via Resize Image (medium 6.9)
- [CVE-2019-25557](https://insights.sbomify.com/CVE-2019-25557/): TwistedBrush Pro Studio 24.06 Denial of Service via srp File (medium 6.9)
- [CVE-2019-25556](https://insights.sbomify.com/CVE-2019-25556/): TwistedBrush Pro Studio 24.06 Resize Image Denial of Service (medium 6.9)
- [CVE-2019-25555](https://insights.sbomify.com/CVE-2019-25555/): TwistedBrush Pro Studio 24.06 Script Recorder Denial of Service (medium 6.9)
- [CVE-2019-25554](https://insights.sbomify.com/CVE-2019-25554/): Tomabo MP4 Converter 3.25.22 Denial of Service via Name Field (medium 6.8)
- [CVE-2019-25553](https://insights.sbomify.com/CVE-2019-25553/): CEWE PHOTO IMPORTER 6.4.3 Denial of Service via Malformed Image (medium 6.9)
- [CVE-2019-25552](https://insights.sbomify.com/CVE-2019-25552/): CEWE PHOTO SHOW 6.4.3 Denial of Service via Password Field (high 8.7)
- [CVE-2019-25551](https://insights.sbomify.com/CVE-2019-25551/): Sandboxie 5.30 Denial of Service via Program Alerts Buffer Overflow (medium 6.9)
- [CVE-2019-25550](https://insights.sbomify.com/CVE-2019-25550/): Encrypt PDF 2.3 Denial of Service via Buffer Overflow (medium 6.9)
- [CVE-2019-2555](https://insights.sbomify.com/CVE-2019-2555/): Information disclosure in VM VirtualBox (medium 6.5)
- [CVE-2019-25549](https://insights.sbomify.com/CVE-2019-25549/): VeryPDF PCL Converter 2.7 Denial of Service via PDF Security (medium 6.9)
- [CVE-2019-25548](https://insights.sbomify.com/CVE-2019-25548/): BlueStacks 4.80.0.1060 Denial of Service via Search Field (medium 6.9)
- [CVE-2019-25547](https://insights.sbomify.com/CVE-2019-25547/): NetAware 1.20 Denial of Service via Add Block Buffer Overflow (medium 6.9)
- [CVE-2019-25546](https://insights.sbomify.com/CVE-2019-25546/): NetAware 1.20 Share Name Denial of Service (medium 6.9)
- [CVE-2019-25545](https://insights.sbomify.com/CVE-2019-25545/): Terminal Services Manager 3.2.1 Local Buffer Overflow Denial of Service (medium 6.9)
- [CVE-2019-25544](https://insights.sbomify.com/CVE-2019-25544/): Pidgin 2.13.0 Denial of Service via Malformed Username (medium 6.9)
- [CVE-2019-25543](https://insights.sbomify.com/CVE-2019-25543/): Netartmedia Real Estate Portal 5.0 SQL Injection via index.php (high 8.8)
- [CVE-2019-25542](https://insights.sbomify.com/CVE-2019-25542/): Netartmedia Real Estate Portal 5.0 SQL Injection via index.php (high 8.8)
- [CVE-2019-25541](https://insights.sbomify.com/CVE-2019-25541/): Netartmedia PHP Mall 4.1 Multiple SQL Injection (high 8.8)
- [CVE-2019-25540](https://insights.sbomify.com/CVE-2019-25540/): Netartmedia PHP Mall 4.1 Multiple SQL Injection (high 8.8)
- [CVE-2019-2554](https://insights.sbomify.com/CVE-2019-2554/): Information disclosure in VM VirtualBox (medium 6.5)
- [CVE-2019-25539](https://insights.sbomify.com/CVE-2019-25539/): 202CMS v10 beta SQL Injection via register.php (high 8.8)
- [CVE-2019-25538](https://insights.sbomify.com/CVE-2019-25538/): 202CMS v10 beta SQL Injection via log_user Parameter (high 8.8)
- [CVE-2019-25537](https://insights.sbomify.com/CVE-2019-25537/): Netartmedia Event Portal 2.0 SQL Injection via loginaction.php (high 8.8)
- [CVE-2019-25536](https://insights.sbomify.com/CVE-2019-25536/): Netartmedia PHP Real Estate Agency 4.0 SQL Injection via features parameter (high 8.8)
- [CVE-2019-25535](https://insights.sbomify.com/CVE-2019-25535/): Netartmedia PHP Dating Site SQL Injection via loginaction.php (high 8.8)
- [CVE-2019-25534](https://insights.sbomify.com/CVE-2019-25534/): Netartmedia PHP Car Dealer SQL Injection via features parameter (high 8.8)
- [CVE-2019-25533](https://insights.sbomify.com/CVE-2019-25533/): Netartmedia PHP Business Directory 4.2 SQL Injection via loginaction.php (high 8.8)
- [CVE-2019-25532](https://insights.sbomify.com/CVE-2019-25532/): Netartmedia Jobs Portal 6.1 SQL Injection via loginaction.php (high 8.8)
- [CVE-2019-25531](https://insights.sbomify.com/CVE-2019-25531/): Netartmedia Deals Portal Lastest SQL Injection via loginaction.php (high 8.8)
- [CVE-2019-25530](https://insights.sbomify.com/CVE-2019-25530/): uHotelBooking System Lastest SQL Injection via system_page Parameter (high 8.8)
- [CVE-2019-2553](https://insights.sbomify.com/CVE-2019-2553/): Information disclosure in VM VirtualBox (low 3.8)
- [CVE-2019-25529](https://insights.sbomify.com/CVE-2019-25529/): Placeto CMS Alpha rv.4 SQL Injection via page Parameter (high 7.1)
- [CVE-2019-25528](https://insights.sbomify.com/CVE-2019-25528/): Inout EasyRooms Ultimate Edition v1.0 SQL Injection via search (high 8.8)
- [CVE-2019-25527](https://insights.sbomify.com/CVE-2019-25527/): Inout EasyRooms Ultimate Edition v1.0 SQL Injection via searchdetailed (high 8.8)
- [CVE-2019-25526](https://insights.sbomify.com/CVE-2019-25526/): Inout EasyRooms Ultimate Edition v1.0 SQL Injection via search (high 8.8)
- [CVE-2019-25525](https://insights.sbomify.com/CVE-2019-25525/): Inout EasyRooms Ultimate Edition v1.0 SQL Injection via search (high 8.8)
- [CVE-2019-25524](https://insights.sbomify.com/CVE-2019-25524/): XooGallery Lastest Latest SQL Injection via results.php (high 8.8)
- [CVE-2019-25523](https://insights.sbomify.com/CVE-2019-25523/): XooGallery Lastest Latest SQL Injection via cat.php (high 8.8)
- [CVE-2019-25522](https://insights.sbomify.com/CVE-2019-25522/): XooGallery Lastest Latest Multiple SQL Injections via photo.php (high 8.8)
- [CVE-2019-25521](https://insights.sbomify.com/CVE-2019-25521/): XooGallery Lastest Latest SQL Injection via gal.php gal_id (high 8.8)
- [CVE-2019-25520](https://insights.sbomify.com/CVE-2019-25520/): Jettweb PHP Hazir Haber Sitesi Scripti V1 Authentication Bypass (high 8.8)
- [CVE-2019-2552](https://insights.sbomify.com/CVE-2019-2552/): Other in VM VirtualBox (high 8.8)
- [CVE-2019-25519](https://insights.sbomify.com/CVE-2019-25519/): Jettweb PHP Hazir Haber Sitesi Scripti V1 SQL Injection (high 8.8)
- [CVE-2019-25518](https://insights.sbomify.com/CVE-2019-25518/): Jettweb PHP Hazir Haber Sitesi Scripti V1 SQL Injection via arama.php (high 8.8)
- [CVE-2019-25517](https://insights.sbomify.com/CVE-2019-25517/): Jettweb PHP Hazir Haber Sitesi Scripti V1 SQL Injection via haberarsiv.php (high 8.8)
- [CVE-2019-25516](https://insights.sbomify.com/CVE-2019-25516/): Jettweb PHP Hazir Haber Sitesi Scripti V1 SQL Injection via gallery.php (high 8.8)
- [CVE-2019-25515](https://insights.sbomify.com/CVE-2019-25515/): Jettweb PHP Hazir Haber Sitesi Scripti V3 Authentication Bypass (high 8.7)
- [CVE-2019-25514](https://insights.sbomify.com/CVE-2019-25514/): Jettweb PHP Hazir Haber Sitesi Scripti V3 SQL Injection (high 8.8)
- [CVE-2019-25513](https://insights.sbomify.com/CVE-2019-25513/): Jettweb PHP Hazir Haber Sitesi Scripti V3 SQL Injection via datagetir.php (high 8.8)
- [CVE-2019-25512](https://insights.sbomify.com/CVE-2019-25512/): Jettweb PHP Hazir Haber Sitesi Scripti V3 SQL Injection (high 8.8)
- [CVE-2019-25511](https://insights.sbomify.com/CVE-2019-25511/): Jettweb PHP Hazir Haber Sitesi Scripti V3 SQL Injection (high 8.8)
- [CVE-2019-25510](https://insights.sbomify.com/CVE-2019-25510/): Jettweb PHP Hazir Haber Sitesi Scripti V2 Authentication Bypass (high 8.8)
- [CVE-2019-2551](https://insights.sbomify.com/CVE-2019-2551/): Other in One-to-One Fulfillment (high 8.2)
- [CVE-2019-25509](https://insights.sbomify.com/CVE-2019-25509/): XooDigital Lastest Latest SQL Injection via results.php (high 8.8)
- [CVE-2019-25508](https://insights.sbomify.com/CVE-2019-25508/): Jettweb Php Hazir Ilan Sitesi Scripti V2 SQL Injection via katgetir.php (high 8.8)
- [CVE-2019-25507](https://insights.sbomify.com/CVE-2019-25507/): Ashop Shopping Cart Software Lastest SQL Injection via index.php (high 8.8)
- [CVE-2019-25506](https://insights.sbomify.com/CVE-2019-25506/): FreeSMS 2.1.2 Authentication Bypass via SQL Injection (high 8.8)
- [CVE-2019-25505](https://insights.sbomify.com/CVE-2019-25505/): Tradebox 5.4 SQL Injection via symbol Parameter (high 7.1)
- [CVE-2019-25504](https://insights.sbomify.com/CVE-2019-25504/): NCrypted Jobgator Lastest SQL Injection via agents Find-Jobs (high 8.8)
- [CVE-2019-25503](https://insights.sbomify.com/CVE-2019-25503/): PHPads 2.0 SQL Injection via click.php3 bannerID (high 7.1)
- [CVE-2019-25502](https://insights.sbomify.com/CVE-2019-25502/): Simple Job Script Cross-Site Scripting via job_type_value Parameter (medium 5.1)
- [CVE-2019-25501](https://insights.sbomify.com/CVE-2019-25501/): Simple Job Script SQL Injection via delete_application_ajax.php (high 8.8)
- [CVE-2019-25500](https://insights.sbomify.com/CVE-2019-25500/): Simple Job Script SQL Injection via register-recruiters endpoint (high 8.8)
- [CVE-2019-2550](https://insights.sbomify.com/CVE-2019-2550/): Other in FLEXCUBE Direct Banking (medium 4.3)
- [CVE-2019-25499](https://insights.sbomify.com/CVE-2019-25499/): Simple Job Script SQL Injection via get_job_applications_ajax.php (high 8.8)
- [CVE-2019-25498](https://insights.sbomify.com/CVE-2019-25498/): Simple Job Script SQL Injection via searched Endpoint (high 8.8)
- [CVE-2019-25497](https://insights.sbomify.com/CVE-2019-25497/): osCommerce 2.3.4.1 SQL Injection via currency Parameter (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/57/