# Vulnerabilities published in 2019


- [CVE-2019-20460](https://insights.sbomify.com/CVE-2019-20460/): An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. (high 8.8)
- [CVE-2019-2046](https://insights.sbomify.com/CVE-2019-2046/): Integer overflow in Android (critical 9.8)
- [CVE-2019-20459](https://insights.sbomify.com/CVE-2019-20459/): An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. (high 8.4)
- [CVE-2019-20458](https://insights.sbomify.com/CVE-2019-20458/): An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. (high 8.8)
- [CVE-2019-20457](https://insights.sbomify.com/CVE-2019-20457/): An issue was discovered on Brother MFC-J491DW C1806180757 devices. (critical 9.1)
- [CVE-2019-20456](https://insights.sbomify.com/CVE-2019-20456/): Privilege escalation in goverlan:client agent (high 7.8)
- [CVE-2019-20455](https://insights.sbomify.com/CVE-2019-20455/): Improper Certificate Validation in Heartland & Global Payments PHP SDK (medium 5.9)
- [CVE-2019-20454](https://insights.sbomify.com/CVE-2019-20454/): Memory corruption in fedoraproject:fedora (medium 5.1)
- [CVE-2019-20453](https://insights.sbomify.com/CVE-2019-20453/): Deserialization in pydio:pydio (high 8.8)
- [CVE-2019-20452](https://insights.sbomify.com/CVE-2019-20452/): Deserialization in pydio:pydio (high 8.8)
- [CVE-2019-20451](https://insights.sbomify.com/CVE-2019-20451/): File upload in samsung:prismview player 11 (critical 9.8)
- [CVE-2019-2045](https://insights.sbomify.com/CVE-2019-2045/): Memory corruption in Android (critical 9.8)
- [CVE-2019-20447](https://insights.sbomify.com/CVE-2019-20447/): SQL injection in jobberbase:jobberbase (critical 9.8)
- [CVE-2019-20446](https://insights.sbomify.com/CVE-2019-20446/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2019-20445](https://insights.sbomify.com/CVE-2019-20445/): HTTP Request Smuggling in Netty (critical 9.1)
- [CVE-2019-20444](https://insights.sbomify.com/CVE-2019-20444/): HTTP Request Smuggling in Netty (critical 9.1)
- [CVE-2019-20443](https://insights.sbomify.com/CVE-2019-20443/): Cross-site scripting in wso2:api manager (low 3.5)
- [CVE-2019-20442](https://insights.sbomify.com/CVE-2019-20442/): Cross-site scripting in wso2:api manager (low 3.5)
- [CVE-2019-20441](https://insights.sbomify.com/CVE-2019-20441/): Cross-site scripting in wso2:api manager (medium 4.8)
- [CVE-2019-20440](https://insights.sbomify.com/CVE-2019-20440/): Cross-site scripting in wso2:api manager (low 3.5)
- [CVE-2019-2044](https://insights.sbomify.com/CVE-2019-2044/): Memory corruption in Android (high 8.8)
- [CVE-2019-20439](https://insights.sbomify.com/CVE-2019-20439/): Cross-site scripting in wso2:api manager (low 3.5)
- [CVE-2019-20438](https://insights.sbomify.com/CVE-2019-20438/): Cross-site scripting in wso2:api manager (medium 4.8)
- [CVE-2019-20437](https://insights.sbomify.com/CVE-2019-20437/): Cross-site scripting in wso2:api manager (medium 6.1)
- [CVE-2019-20436](https://insights.sbomify.com/CVE-2019-20436/): Cross-site scripting in wso2:api manager (medium 6.1)
- [CVE-2019-20435](https://insights.sbomify.com/CVE-2019-20435/): Cross-site scripting in wso2:api manager (low 3.5)
- [CVE-2019-20434](https://insights.sbomify.com/CVE-2019-20434/): Cross-site scripting in wso2:api manager (medium 4.8)
- [CVE-2019-20433](https://insights.sbomify.com/CVE-2019-20433/): Memory corruption in gnu:aspell (critical 9.1)
- [CVE-2019-20432](https://insights.sbomify.com/CVE-2019-20432/): Memory corruption in lustre:lustre (high 7.5)
- [CVE-2019-20431](https://insights.sbomify.com/CVE-2019-20431/): Memory corruption in lustre:lustre (high 7.5)
- [CVE-2019-20430](https://insights.sbomify.com/CVE-2019-20430/): Denial of service in lustre:lustre (high 7.5)
- [CVE-2019-2043](https://insights.sbomify.com/CVE-2019-2043/): Privilege escalation in Android (high 7.3)
- [CVE-2019-20429](https://insights.sbomify.com/CVE-2019-20429/): Memory corruption in lustre:lustre (high 7.5)
- [CVE-2019-20428](https://insights.sbomify.com/CVE-2019-20428/): Memory corruption in lustre:lustre (high 7.5)
- [CVE-2019-20427](https://insights.sbomify.com/CVE-2019-20427/): Memory corruption in lustre:lustre (critical 9.8)
- [CVE-2019-20426](https://insights.sbomify.com/CVE-2019-20426/): Memory corruption in lustre:lustre (high 7.5)
- [CVE-2019-20425](https://insights.sbomify.com/CVE-2019-20425/): Memory corruption in lustre:lustre (high 7.5)
- [CVE-2019-20424](https://insights.sbomify.com/CVE-2019-20424/): Null dereference in lustre:lustre (high 7.5)
- [CVE-2019-20423](https://insights.sbomify.com/CVE-2019-20423/): Integer overflow in lustre:lustre (high 7.5)
- [CVE-2019-20422](https://insights.sbomify.com/CVE-2019-20422/): Denial of service in linux:linux kernel (medium 5.5)
- [CVE-2019-20421](https://insights.sbomify.com/CVE-2019-20421/): Denial of service in canonical:ubuntu linux (high 7.5)
- [CVE-2019-20419](https://insights.sbomify.com/CVE-2019-20419/): Code injection in Jira Server (high 7.8)
- [CVE-2019-20418](https://insights.sbomify.com/CVE-2019-20418/): Denial of service in Jira Server (medium 6.5)
- [CVE-2019-20416](https://insights.sbomify.com/CVE-2019-20416/): Cross-site scripting in Jira Server (medium 4.8)
- [CVE-2019-20415](https://insights.sbomify.com/CVE-2019-20415/): Cross-site request forgery in Jira Server (medium 4.3)
- [CVE-2019-20414](https://insights.sbomify.com/CVE-2019-20414/): Cross-site scripting in Jira Server (medium 5.4)
- [CVE-2019-20413](https://insights.sbomify.com/CVE-2019-20413/): Denial of service in Jira Server (high 7.5)
- [CVE-2019-20412](https://insights.sbomify.com/CVE-2019-20412/): Auth bypass in Jira Server (medium 5.3)
- [CVE-2019-20411](https://insights.sbomify.com/CVE-2019-20411/): Cross-site request forgery in Jira Server (medium 4.3)
- [CVE-2019-20410](https://insights.sbomify.com/CVE-2019-20410/): Information disclosure in Jira Server (medium 6.5)
- [CVE-2019-2041](https://insights.sbomify.com/CVE-2019-2041/): Misconfiguration in Android (high 7.3)
- [CVE-2019-20409](https://insights.sbomify.com/CVE-2019-20409/): Code injection in Jira Server (critical 9.8)
- [CVE-2019-20408](https://insights.sbomify.com/CVE-2019-20408/): Server-side request forgery in Jira Server (medium 5.3)
- [CVE-2019-20407](https://insights.sbomify.com/CVE-2019-20407/): Missing authorization in Jira Software (medium 4.3)
- [CVE-2019-20406](https://insights.sbomify.com/CVE-2019-20406/): Privilege escalation in Confluence Data Center (high 7.8)
- [CVE-2019-20405](https://insights.sbomify.com/CVE-2019-20405/): Cross-site request forgery in Jira Server (medium 4.3)
- [CVE-2019-20404](https://insights.sbomify.com/CVE-2019-20404/): Missing authorization in Jira Server (medium 4.3)
- [CVE-2019-20403](https://insights.sbomify.com/CVE-2019-20403/): Information disclosure in Jira Server (medium 5.3)
- [CVE-2019-20402](https://insights.sbomify.com/CVE-2019-20402/): Missing authorization in Jira Server (medium 4.9)
- [CVE-2019-20401](https://insights.sbomify.com/CVE-2019-20401/): Cross-site request forgery in Jira Server (medium 6.5)
- [CVE-2019-20400](https://insights.sbomify.com/CVE-2019-20400/): Code injection in Jira Server (high 7.8)
- [CVE-2019-2040](https://insights.sbomify.com/CVE-2019-2040/): Memory corruption in Android (medium 5.0)
- [CVE-2019-20399](https://insights.sbomify.com/CVE-2019-20399/): Observable Discrepancy in libsecp256k1-rs (medium 5.9)
- [CVE-2019-20398](https://insights.sbomify.com/CVE-2019-20398/): Null dereference in cesnet:libyang (medium 6.5)
- [CVE-2019-20397](https://insights.sbomify.com/CVE-2019-20397/): Memory corruption in cesnet:libyang (high 8.8)
- [CVE-2019-20396](https://insights.sbomify.com/CVE-2019-20396/): Memory corruption in cesnet:libyang (medium 6.5)
- [CVE-2019-20395](https://insights.sbomify.com/CVE-2019-20395/): Denial of service in cesnet:libyang (medium 6.5)
- [CVE-2019-20394](https://insights.sbomify.com/CVE-2019-20394/): Memory corruption in cesnet:libyang (high 8.8)
- [CVE-2019-20393](https://insights.sbomify.com/CVE-2019-20393/): Memory corruption in cesnet:libyang (high 8.8)
- [CVE-2019-20392](https://insights.sbomify.com/CVE-2019-20392/): Memory corruption in cesnet:libyang (medium 6.5)
- [CVE-2019-20391](https://insights.sbomify.com/CVE-2019-20391/): Memory corruption in cesnet:libyang (medium 6.5)
- [CVE-2019-20390](https://insights.sbomify.com/CVE-2019-20390/): Subrion CMS Cross-Site Request Forgery (CSRF) vulnerability (high 8.1)
- [CVE-2019-2039](https://insights.sbomify.com/CVE-2019-2039/): Memory corruption in Android (medium 5.0)
- [CVE-2019-20389](https://insights.sbomify.com/CVE-2019-20389/): Subrion CMS XSS (medium 6.1)
- [CVE-2019-20388](https://insights.sbomify.com/CVE-2019-20388/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2019-20387](https://insights.sbomify.com/CVE-2019-20387/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2019-20386](https://insights.sbomify.com/CVE-2019-20386/): Denial of service in canonical:ubuntu linux (medium 5.1)
- [CVE-2019-20385](https://insights.sbomify.com/CVE-2019-20385/): File upload in logaritmo:aware callmanager (high 8.8)
- [CVE-2019-20384](https://insights.sbomify.com/CVE-2019-20384/): Race condition in gentoo:portage (medium 5.5)
- [CVE-2019-20383](https://insights.sbomify.com/CVE-2019-20383/): Privilege escalation in abbyy:finereader (high 7.8)
- [CVE-2019-20382](https://insights.sbomify.com/CVE-2019-20382/): Denial of service in canonical:ubuntu linux (low 3.5)
- [CVE-2019-20381](https://insights.sbomify.com/CVE-2019-20381/): Cross-site scripting in testlink:testlink (medium 6.1)
- [CVE-2019-2038](https://insights.sbomify.com/CVE-2019-2038/): Memory corruption in Android (medium 5.5)
- [CVE-2019-20379](https://insights.sbomify.com/CVE-2019-20379/): Cross-site scripting in ganglia:ganglia-web (medium 6.1)
- [CVE-2019-20378](https://insights.sbomify.com/CVE-2019-20378/): Cross-site scripting in ganglia:ganglia-web (medium 6.1)
- [CVE-2019-20377](https://insights.sbomify.com/CVE-2019-20377/): Cross-site scripting in tophub:toplist (medium 6.1)
- [CVE-2019-20376](https://insights.sbomify.com/CVE-2019-20376/): Cross-site scripting in psi:electronic logbook (medium 6.1)
- [CVE-2019-20375](https://insights.sbomify.com/CVE-2019-20375/): Cross-site scripting in psi:electronic logbook (medium 6.1)
- [CVE-2019-20374](https://insights.sbomify.com/CVE-2019-20374/): Cross-site scripting in typora:typora (high 8.3)
- [CVE-2019-20373](https://insights.sbomify.com/CVE-2019-20373/): Auth bypass in debian:debian linux (high 7.8)
- [CVE-2019-20372](https://insights.sbomify.com/CVE-2019-20372/): Other in apple:xcode (medium 5.3)
- [CVE-2019-2037](https://insights.sbomify.com/CVE-2019-2037/): Memory corruption in Android (high 7.5)
- [CVE-2019-20367](https://insights.sbomify.com/CVE-2019-20367/): Memory corruption in canonical:ubuntu linux (critical 9.1)
- [CVE-2019-20366](https://insights.sbomify.com/CVE-2019-20366/): XSS in Ignite Realtime Openfire via isTrustStore (medium 6.1)
- [CVE-2019-20365](https://insights.sbomify.com/CVE-2019-20365/): XSS in Ignite Realtime Openfire via Users/Group search page (medium 6.1)
- [CVE-2019-20364](https://insights.sbomify.com/CVE-2019-20364/): XSS in Ignite Realtime Openfire via cacheName (medium 6.1)
- [CVE-2019-20363](https://insights.sbomify.com/CVE-2019-20363/): XSS in Ignite Realtime Openfire via alias to Manage Store Contents (medium 6.1)
- [CVE-2019-20362](https://insights.sbomify.com/CVE-2019-20362/): Privilege escalation in teradici:pcoip client (high 7.8)
- [CVE-2019-20361](https://insights.sbomify.com/CVE-2019-20361/): SQL injection in icegram:email subscribers \& newsletters (high 8.3)
- [CVE-2019-20360](https://insights.sbomify.com/CVE-2019-20360/): Auth bypass in givewp:givewp (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/71/