# Vulnerabilities published in 2019


- [CVE-2019-25050](https://insights.sbomify.com/CVE-2019-25050/): Memory corruption in osgeo:gdal (high 7.8)
- [CVE-2019-2505](https://insights.sbomify.com/CVE-2019-2505/): Information disclosure in VM VirtualBox (low 3.8)
- [CVE-2019-25049](https://insights.sbomify.com/CVE-2019-25049/): Memory corruption in openbsd:libressl (high 7.1)
- [CVE-2019-25048](https://insights.sbomify.com/CVE-2019-25048/): Memory corruption in openbsd:libressl (high 7.1)
- [CVE-2019-25047](https://insights.sbomify.com/CVE-2019-25047/): Cross-site scripting in greenbone:greenbone os (medium 6.1)
- [CVE-2019-25046](https://insights.sbomify.com/CVE-2019-25046/): Cross-site scripting in cerberusftp:ftp server (medium 6.1)
- [CVE-2019-25045](https://insights.sbomify.com/CVE-2019-25045/): Use after free in linux:linux kernel (high 7.8)
- [CVE-2019-25044](https://insights.sbomify.com/CVE-2019-25044/): Use after free in linux:linux kernel (high 7.8)
- [CVE-2019-25043](https://insights.sbomify.com/CVE-2019-25043/): Denial of service in owasp:modsecurity (medium 5.3)
- [CVE-2019-25042](https://insights.sbomify.com/CVE-2019-25042/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2019-25041](https://insights.sbomify.com/CVE-2019-25041/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2019-25040](https://insights.sbomify.com/CVE-2019-25040/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2019-2504](https://insights.sbomify.com/CVE-2019-2504/): Information disclosure in VM VirtualBox (low 3.8)
- [CVE-2019-25039](https://insights.sbomify.com/CVE-2019-25039/): Integer overflow in debian:debian linux (critical 9.8)
- [CVE-2019-25038](https://insights.sbomify.com/CVE-2019-25038/): Integer overflow in debian:debian linux (critical 9.8)
- [CVE-2019-25037](https://insights.sbomify.com/CVE-2019-25037/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2019-25036](https://insights.sbomify.com/CVE-2019-25036/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2019-25035](https://insights.sbomify.com/CVE-2019-25035/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2019-25034](https://insights.sbomify.com/CVE-2019-25034/): Integer overflow in debian:debian linux (critical 9.8)
- [CVE-2019-25033](https://insights.sbomify.com/CVE-2019-25033/): Integer overflow in debian:debian linux (critical 9.8)
- [CVE-2019-25032](https://insights.sbomify.com/CVE-2019-25032/): Integer overflow in debian:debian linux (critical 9.8)
- [CVE-2019-25031](https://insights.sbomify.com/CVE-2019-25031/): Code injection in debian:debian linux (medium 5.9)
- [CVE-2019-25030](https://insights.sbomify.com/CVE-2019-25030/): Weak cryptography in Versa Director, Versa Analytics, Versa VOS (medium 5.5)
- [CVE-2019-2503](https://insights.sbomify.com/CVE-2019-2503/): Other in MySQL Server (medium 6.4)
- [CVE-2019-25029](https://insights.sbomify.com/CVE-2019-25029/): Command injection in Versa Director (critical 9.8)
- [CVE-2019-25028](https://insights.sbomify.com/CVE-2019-25028/): Stored cross-site scripting in Grid component in Vaadin 7 and 8 (medium 5.4)
- [CVE-2019-25027](https://insights.sbomify.com/CVE-2019-25027/): Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13 (medium 6.1)
- [CVE-2019-25026](https://insights.sbomify.com/CVE-2019-25026/): Cross-site scripting in debian:debian linux (medium 5.3)
- [CVE-2019-25025](https://insights.sbomify.com/CVE-2019-25025/): Activerecord-session_store Vulnerable to Timing Attack (medium 5.3)
- [CVE-2019-25024](https://insights.sbomify.com/CVE-2019-25024/): Command injection in alleghenycreative:openrepeater (critical 9.8)
- [CVE-2019-25023](https://insights.sbomify.com/CVE-2019-25023/): Other in scytl:secure vote (medium 6.5)
- [CVE-2019-25022](https://insights.sbomify.com/CVE-2019-25022/): Command injection in scytl:secure vote (critical 9.8)
- [CVE-2019-25021](https://insights.sbomify.com/CVE-2019-25021/): Hardcoded credentials in scytl:secure vote (high 7.5)
- [CVE-2019-25020](https://insights.sbomify.com/CVE-2019-25020/): Missing authorization in scytl:secure vote (high 7.5)
- [CVE-2019-2502](https://insights.sbomify.com/CVE-2019-2502/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2019-25019](https://insights.sbomify.com/CVE-2019-25019/): SQL injection in limesurvey:limesurvey (critical 9.8)
- [CVE-2019-25018](https://insights.sbomify.com/CVE-2019-25018/): Security feature bypass in mit:krb5-appl (high 7.5)
- [CVE-2019-25017](https://insights.sbomify.com/CVE-2019-25017/): Path traversal in mit:krb5-appl (medium 5.9)
- [CVE-2019-25016](https://insights.sbomify.com/CVE-2019-25016/): Privilege escalation in opendoas project:opendoas (high 8.8)
- [CVE-2019-25015](https://insights.sbomify.com/CVE-2019-25015/): Cross-site scripting in openwrt:openwrt (medium 5.4)
- [CVE-2019-25014](https://insights.sbomify.com/CVE-2019-25014/): Null dereference in istio:istio (medium 6.5)
- [CVE-2019-25013](https://insights.sbomify.com/CVE-2019-25013/): Memory corruption in broadcom:fabric operating system (medium 5.9)
- [CVE-2019-25012](https://insights.sbomify.com/CVE-2019-25012/): Missing authorization in webform report project:webform report (high 7.5)
- [CVE-2019-25011](https://insights.sbomify.com/CVE-2019-25011/): Cross-site scripting in netbox:netbox (medium 5.4)
- [CVE-2019-25010](https://insights.sbomify.com/CVE-2019-25010/): Memory corruption in failure project:failure (critical 9.8)
- [CVE-2019-2501](https://insights.sbomify.com/CVE-2019-2501/): Information disclosure in VM VirtualBox (low 3.8)
- [CVE-2019-25009](https://insights.sbomify.com/CVE-2019-25009/): Double free in http (critical 9.8)
- [CVE-2019-25007](https://insights.sbomify.com/CVE-2019-25007/): Incorrect implementation in streebog (high 7.5)
- [CVE-2019-25006](https://insights.sbomify.com/CVE-2019-25006/): Incorrect implementation of the Streebog hash functions in streebog (high 7.5)
- [CVE-2019-25005](https://insights.sbomify.com/CVE-2019-25005/): Counter overflow in chacha20 (high 7.5)
- [CVE-2019-25004](https://insights.sbomify.com/CVE-2019-25004/): Unsound casting in flatbuffers (critical 9.8)
- [CVE-2019-25003](https://insights.sbomify.com/CVE-2019-25003/): libsecp256k1 contains side-channel timing attack (high 7.5)
- [CVE-2019-25002](https://insights.sbomify.com/CVE-2019-25002/): Incorrect Comparison in sodiumoxide (critical 9.8)
- [CVE-2019-25001](https://insights.sbomify.com/CVE-2019-25001/): Out of bounds write in serde_cbor (high 7.5)
- [CVE-2019-2500](https://insights.sbomify.com/CVE-2019-2500/): Other in VM VirtualBox (high 8.8)
- [CVE-2019-2499](https://insights.sbomify.com/CVE-2019-2499/): Cross-site scripting in PeopleSoft Enterprise PT PeopleTools (medium 6.1)
- [CVE-2019-2498](https://insights.sbomify.com/CVE-2019-2498/): Other in Partner Management (high 8.2)
- [CVE-2019-2497](https://insights.sbomify.com/CVE-2019-2497/): Other in CRM Technical Foundation (high 8.2)
- [CVE-2019-2496](https://insights.sbomify.com/CVE-2019-2496/): Other in CRM Technical Foundation (medium 4.7)
- [CVE-2019-2495](https://insights.sbomify.com/CVE-2019-2495/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2019-2494](https://insights.sbomify.com/CVE-2019-2494/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2019-2493](https://insights.sbomify.com/CVE-2019-2493/): Other in PeopleSoft Enterprise CS Campus Community (low 3.1)
- [CVE-2019-2492](https://insights.sbomify.com/CVE-2019-2492/): Other in Email Center (medium 4.7)
- [CVE-2019-2491](https://insights.sbomify.com/CVE-2019-2491/): Other in Email Center (medium 4.7)
- [CVE-2019-2490](https://insights.sbomify.com/CVE-2019-2490/): Other in PeopleSoft Enterprise PT PeopleTools (medium 4.7)
- [CVE-2019-2489](https://insights.sbomify.com/CVE-2019-2489/): Other in One-to-One Fulfillment (critical 9.1)
- [CVE-2019-2488](https://insights.sbomify.com/CVE-2019-2488/): Information disclosure in CRM Technical Foundation (medium 5.3)
- [CVE-2019-2487](https://insights.sbomify.com/CVE-2019-2487/): Other in Transportation Management (medium 6.5)
- [CVE-2019-2486](https://insights.sbomify.com/CVE-2019-2486/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2019-2485](https://insights.sbomify.com/CVE-2019-2485/): Other in Mobile Field Service (medium 4.7)
- [CVE-2019-2484](https://insights.sbomify.com/CVE-2019-2484/): Other in Application Express (medium 5.4)
- [CVE-2019-2483](https://insights.sbomify.com/CVE-2019-2483/): Other in Oracle iStore (high 8.2)
- [CVE-2019-2482](https://insights.sbomify.com/CVE-2019-2482/): Denial of service in MySQL Server (medium 6.5)
- [CVE-2019-2481](https://insights.sbomify.com/CVE-2019-2481/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2019-2480](https://insights.sbomify.com/CVE-2019-2480/): Denial of service in Outside In Technology (medium 5.3)
- [CVE-2019-2479](https://insights.sbomify.com/CVE-2019-2479/): Denial of service in Outside In Technology (high 7.5)
- [CVE-2019-2478](https://insights.sbomify.com/CVE-2019-2478/): Denial of service in Outside In Technology (medium 5.3)
- [CVE-2019-2477](https://insights.sbomify.com/CVE-2019-2477/): Denial of service in Outside In Technology (high 7.5)
- [CVE-2019-2476](https://insights.sbomify.com/CVE-2019-2476/): Denial of service in Outside In Technology (high 7.5)
- [CVE-2019-2475](https://insights.sbomify.com/CVE-2019-2475/): Denial of service in Outside In Technology (high 7.5)
- [CVE-2019-2474](https://insights.sbomify.com/CVE-2019-2474/): Denial of service in Outside In Technology (high 7.5)
- [CVE-2019-2473](https://insights.sbomify.com/CVE-2019-2473/): Denial of service in Outside In Technology (high 7.5)
- [CVE-2019-2472](https://insights.sbomify.com/CVE-2019-2472/): Denial of service in Outside In Technology (medium 5.3)
- [CVE-2019-2471](https://insights.sbomify.com/CVE-2019-2471/): Cross-site scripting in PeopleSoft Enterprise PT PeopleTools (medium 6.1)
- [CVE-2019-2470](https://insights.sbomify.com/CVE-2019-2470/): Other in Partner Management (high 8.2)
- [CVE-2019-2469](https://insights.sbomify.com/CVE-2019-2469/): Other in Outside In Technology (medium 6.5)
- [CVE-2019-2468](https://insights.sbomify.com/CVE-2019-2468/): Denial of service in Outside In Technology (high 7.5)
- [CVE-2019-2467](https://insights.sbomify.com/CVE-2019-2467/): Denial of service in Outside In Technology (high 7.5)
- [CVE-2019-2466](https://insights.sbomify.com/CVE-2019-2466/): Information disclosure in Outside In Technology (medium 5.3)
- [CVE-2019-2465](https://insights.sbomify.com/CVE-2019-2465/): Information disclosure in Outside In Technology (medium 5.3)
- [CVE-2019-2464](https://insights.sbomify.com/CVE-2019-2464/): Information disclosure in Outside In Technology (medium 5.3)
- [CVE-2019-2463](https://insights.sbomify.com/CVE-2019-2463/): Other in Outside In Technology (medium 6.5)
- [CVE-2019-2462](https://insights.sbomify.com/CVE-2019-2462/): Other in Outside In Technology (high 7.2)
- [CVE-2019-2461](https://insights.sbomify.com/CVE-2019-2461/): Denial of service in Outside In Technology (medium 5.3)
- [CVE-2019-2460](https://insights.sbomify.com/CVE-2019-2460/): Denial of service in Outside In Technology (medium 5.3)
- [CVE-2019-2459](https://insights.sbomify.com/CVE-2019-2459/): Denial of service in Outside In Technology (medium 5.3)
- [CVE-2019-2458](https://insights.sbomify.com/CVE-2019-2458/): Denial of service in Outside In Technology (medium 5.3)
- [CVE-2019-2457](https://insights.sbomify.com/CVE-2019-2457/): Denial of service in Outside In Technology (medium 5.3)
- [CVE-2019-2456](https://insights.sbomify.com/CVE-2019-2456/): Other in Outside In Technology (medium 6.5)
- [CVE-2019-2455](https://insights.sbomify.com/CVE-2019-2455/): Denial of service in MySQL Server (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/62/