# Vulnerabilities published in 2019


- [CVE-2019-2036](https://insights.sbomify.com/CVE-2019-2036/): Privilege escalation in Android (critical 9.8)
- [CVE-2019-20358](https://insights.sbomify.com/CVE-2019-20358/): Other in Trend Micro Anti-Threat Toolkit (ATTK) (high 7.8)
- [CVE-2019-20357](https://insights.sbomify.com/CVE-2019-20357/): Privilege escalation in Trend Micro Security (Consumer) (high 7.8)
- [CVE-2019-20354](https://insights.sbomify.com/CVE-2019-20354/): Path traversal in pisignage:pisignage (medium 4.3)
- [CVE-2019-20352](https://insights.sbomify.com/CVE-2019-20352/): Memory corruption in nasm:netwide assembler (high 7.1)
- [CVE-2019-2035](https://insights.sbomify.com/CVE-2019-2035/): Memory corruption in Android (high 7.8)
- [CVE-2019-20348](https://insights.sbomify.com/CVE-2019-20348/): Auth bypass in okerthai:g232v1 firmware (medium 6.8)
- [CVE-2019-20343](https://insights.sbomify.com/CVE-2019-20343/): Code injection in mojohaus:exec maven (critical 9.8)
- [CVE-2019-2034](https://insights.sbomify.com/CVE-2019-2034/): Integer overflow in Android (high 7.8)
- [CVE-2019-20337](https://insights.sbomify.com/CVE-2019-20337/): SQL injection in advanced real estate script project:advanced real estate script (high 7.2)
- [CVE-2019-20336](https://insights.sbomify.com/CVE-2019-20336/): Cross-site scripting in advanced real estate script project:advanced real estate script (medium 6.1)
- [CVE-2019-20334](https://insights.sbomify.com/CVE-2019-20334/): Denial of service in nasm:netwide assembler (medium 5.5)
- [CVE-2019-20330](https://insights.sbomify.com/CVE-2019-20330/): Deserialization of Untrusted Data in jackson-databind (critical 9.8)
- [CVE-2019-2033](https://insights.sbomify.com/CVE-2019-2033/): Use after free in Android (high 7.8)
- [CVE-2019-20329](https://insights.sbomify.com/CVE-2019-20329/): Security feature bypass in openlambda project:openlambda (high 8.1)
- [CVE-2019-20327](https://insights.sbomify.com/CVE-2019-20327/): Privilege escalation in centreon:centreon (high 7.8)
- [CVE-2019-20326](https://insights.sbomify.com/CVE-2019-20326/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2019-2032](https://insights.sbomify.com/CVE-2019-2032/): Memory corruption in Android (high 7.8)
- [CVE-2019-2031](https://insights.sbomify.com/CVE-2019-2031/): Memory corruption in Android (high 7.8)
- [CVE-2019-2030](https://insights.sbomify.com/CVE-2019-2030/): Use after free in Android (critical 9.8)
- [CVE-2019-2029](https://insights.sbomify.com/CVE-2019-2029/): Use after free in Android (high 8.8)
- [CVE-2019-2028](https://insights.sbomify.com/CVE-2019-2028/): Memory corruption in Android (high 8.8)
- [CVE-2019-2027](https://insights.sbomify.com/CVE-2019-2027/): Memory corruption in Android (high 8.8)
- [CVE-2019-2026](https://insights.sbomify.com/CVE-2019-2026/): Missing authorization in Android (high 7.8)
- [CVE-2019-2025](https://insights.sbomify.com/CVE-2019-2025/): Use after free in Android (high 7.8)
- [CVE-2019-2024](https://insights.sbomify.com/CVE-2019-2024/): Use after free in Android (high 7.8)
- [CVE-2019-2023](https://insights.sbomify.com/CVE-2019-2023/): Privilege escalation in Android (high 7.8)
- [CVE-2019-20225](https://insights.sbomify.com/CVE-2019-20225/): Open redirect in mybb:mybb (medium 6.1)
- [CVE-2019-20224](https://insights.sbomify.com/CVE-2019-20224/): Command injection in artica:pandora fms (high 8.8)
- [CVE-2019-20223](https://insights.sbomify.com/CVE-2019-20223/): Cross-site scripting in sitracker:support incident tracker (medium 6.1)
- [CVE-2019-20222](https://insights.sbomify.com/CVE-2019-20222/): Cross-site scripting in sitracker:support incident tracker (medium 6.1)
- [CVE-2019-20221](https://insights.sbomify.com/CVE-2019-20221/): Cross-site scripting in sitracker:support incident tracker (medium 6.1)
- [CVE-2019-20220](https://insights.sbomify.com/CVE-2019-20220/): Cross-site scripting in sitracker:support incident tracker (medium 6.1)
- [CVE-2019-2022](https://insights.sbomify.com/CVE-2019-2022/): Memory corruption in Android (medium 6.5)
- [CVE-2019-20219](https://insights.sbomify.com/CVE-2019-20219/): Memory corruption in miniupnp project:ngiflib (high 8.8)
- [CVE-2019-20218](https://insights.sbomify.com/CVE-2019-20218/): Memory corruption in canonical:ubuntu linux (high 7.5)
- [CVE-2019-20217](https://insights.sbomify.com/CVE-2019-20217/): Command injection in dlink:dir-859 firmware (critical 9.8)
- [CVE-2019-20216](https://insights.sbomify.com/CVE-2019-20216/): Command injection in dlink:dir-859 firmware (critical 9.8)
- [CVE-2019-20215](https://insights.sbomify.com/CVE-2019-20215/): Command injection in dlink:dir-859 firmware (critical 9.8)
- [CVE-2019-20213](https://insights.sbomify.com/CVE-2019-20213/): Information disclosure in dlink:dir-818lx firmware (high 7.5)
- [CVE-2019-20212](https://insights.sbomify.com/CVE-2019-20212/): Cross-site scripting in cththemes:citybook (medium 6.1)
- [CVE-2019-20211](https://insights.sbomify.com/CVE-2019-20211/): Cross-site scripting in cththemes:citybook (medium 6.1)
- [CVE-2019-20210](https://insights.sbomify.com/CVE-2019-20210/): Cross-site scripting in cththemes:citybook (medium 6.1)
- [CVE-2019-2021](https://insights.sbomify.com/CVE-2019-2021/): Memory corruption in Android (medium 6.5)
- [CVE-2019-20209](https://insights.sbomify.com/CVE-2019-20209/): Missing authorization in cththemes:citybook (high 7.5)
- [CVE-2019-20208](https://insights.sbomify.com/CVE-2019-20208/): Memory corruption in debian:debian linux (medium 5.5)
- [CVE-2019-20205](https://insights.sbomify.com/CVE-2019-20205/): Integer overflow in saitoha:libsixel (high 8.8)
- [CVE-2019-20204](https://insights.sbomify.com/CVE-2019-20204/): Cross-site scripting in postieplugin:postie (medium 5.4)
- [CVE-2019-20203](https://insights.sbomify.com/CVE-2019-20203/): Auth bypass in postieplugin:postie (medium 5.3)
- [CVE-2019-20202](https://insights.sbomify.com/CVE-2019-20202/): Memory corruption in ezxml project:ezxml (medium 6.5)
- [CVE-2019-20201](https://insights.sbomify.com/CVE-2019-20201/): Denial of service in ezxml project:ezxml (medium 6.5)
- [CVE-2019-20200](https://insights.sbomify.com/CVE-2019-20200/): Memory corruption in ezxml project:ezxml (medium 6.5)
- [CVE-2019-2020](https://insights.sbomify.com/CVE-2019-2020/): Memory corruption in Android (medium 6.5)
- [CVE-2019-20199](https://insights.sbomify.com/CVE-2019-20199/): Null dereference in ezxml project:ezxml (medium 6.5)
- [CVE-2019-20198](https://insights.sbomify.com/CVE-2019-20198/): Denial of service in ezxml project:ezxml (medium 6.5)
- [CVE-2019-20197](https://insights.sbomify.com/CVE-2019-20197/): Command injection in nagios:nagios xi (high 8.8)
- [CVE-2019-20191](https://insights.sbomify.com/CVE-2019-20191/): XML external entity in sync:oxygen xml author (high 7.5)
- [CVE-2019-2019](https://insights.sbomify.com/CVE-2019-2019/): Memory corruption in Android (medium 6.5)
- [CVE-2019-20184](https://insights.sbomify.com/CVE-2019-20184/): Code injection in keepass:keepass (high 7.8)
- [CVE-2019-20183](https://insights.sbomify.com/CVE-2019-20183/): File upload in employee records system project:employee records system (high 7.2)
- [CVE-2019-20182](https://insights.sbomify.com/CVE-2019-20182/): Cross-site scripting in fooplugins:foogallery (medium 4.8)
- [CVE-2019-20181](https://insights.sbomify.com/CVE-2019-20181/): Cross-site scripting in getawesomesupport:awesome support (medium 4.8)
- [CVE-2019-20180](https://insights.sbomify.com/CVE-2019-20180/): Code injection in tablepress:tablepress (medium 6.8)
- [CVE-2019-2018](https://insights.sbomify.com/CVE-2019-2018/): Auth bypass in Android (high 8.8)
- [CVE-2019-20179](https://insights.sbomify.com/CVE-2019-20179/): SQL injection in soplanning:soplanning (high 8.8)
- [CVE-2019-20178](https://insights.sbomify.com/CVE-2019-20178/): Cross-site request forgery in peel:peel shopping (medium 6.5)
- [CVE-2019-20176](https://insights.sbomify.com/CVE-2019-20176/): Denial of service in fedoraproject:fedora (high 7.5)
- [CVE-2019-20175](https://insights.sbomify.com/CVE-2019-20175/): Denial of service in qemu:qemu (high 7.5)
- [CVE-2019-20174](https://insights.sbomify.com/CVE-2019-20174/): auth0-lock vulnerable to XSS via unsanitized placeholder property (medium 6.1)
- [CVE-2019-20173](https://insights.sbomify.com/CVE-2019-20173/): Cross-site scripting in auth0:login by auth0 (medium 6.1)
- [CVE-2019-20172](https://insights.sbomify.com/CVE-2019-20172/): Privilege escalation in serenityos:serenityos (high 7.8)
- [CVE-2019-20171](https://insights.sbomify.com/CVE-2019-20171/): Denial of service in debian:debian linux (medium 5.5)
- [CVE-2019-20170](https://insights.sbomify.com/CVE-2019-20170/): Memory corruption in debian:debian linux (medium 5.5)
- [CVE-2019-2017](https://insights.sbomify.com/CVE-2019-2017/): Memory corruption in Android (high 7.8)
- [CVE-2019-20169](https://insights.sbomify.com/CVE-2019-20169/): Use after free in gpac:gpac (medium 5.5)
- [CVE-2019-20168](https://insights.sbomify.com/CVE-2019-20168/): Use after free in gpac:gpac (medium 5.5)
- [CVE-2019-20167](https://insights.sbomify.com/CVE-2019-20167/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2019-20166](https://insights.sbomify.com/CVE-2019-20166/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2019-20165](https://insights.sbomify.com/CVE-2019-20165/): Null dereference in debian:debian linux (medium 5.5)
- [CVE-2019-20164](https://insights.sbomify.com/CVE-2019-20164/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2019-20163](https://insights.sbomify.com/CVE-2019-20163/): Null dereference in debian:debian linux (medium 5.5)
- [CVE-2019-20162](https://insights.sbomify.com/CVE-2019-20162/): Memory corruption in debian:debian linux (medium 5.5)
- [CVE-2019-20161](https://insights.sbomify.com/CVE-2019-20161/): Memory corruption in debian:debian linux (medium 5.5)
- [CVE-2019-20160](https://insights.sbomify.com/CVE-2019-20160/): Memory corruption in gpac:gpac (medium 5.5)
- [CVE-2019-2016](https://insights.sbomify.com/CVE-2019-2016/): Memory corruption in Android (high 8.8)
- [CVE-2019-20159](https://insights.sbomify.com/CVE-2019-20159/): Denial of service in gpac:gpac (medium 5.5)
- [CVE-2019-20155](https://insights.sbomify.com/CVE-2019-20155/): Code injection in determine:contract lifecycle management (high 8.8)
- [CVE-2019-20154](https://insights.sbomify.com/CVE-2019-20154/): Cross-site scripting in determine:contract lifecycle management (medium 6.1)
- [CVE-2019-20153](https://insights.sbomify.com/CVE-2019-20153/): XML external entity in determine:contract lifecycle management (medium 4.9)
- [CVE-2019-20152](https://insights.sbomify.com/CVE-2019-20152/): Cross-site scripting in treasuryxpress:treasuryxpress (medium 6.1)
- [CVE-2019-20151](https://insights.sbomify.com/CVE-2019-20151/): Cross-site scripting in treasuryxpress:treasuryxpress (medium 6.1)
- [CVE-2019-20150](https://insights.sbomify.com/CVE-2019-20150/): Information disclosure in treasuryxpress:treasuryxpress (medium 6.5)
- [CVE-2019-2015](https://insights.sbomify.com/CVE-2019-2015/): Memory corruption in Android (high 8.8)
- [CVE-2019-20149](https://insights.sbomify.com/CVE-2019-20149/): Validation Bypass in kind-of (high 7.5)
- [CVE-2019-20148](https://insights.sbomify.com/CVE-2019-20148/): Missing authorization in gitlab:gitlab (medium 5.3)
- [CVE-2019-20147](https://insights.sbomify.com/CVE-2019-20147/): Missing authorization in gitlab:gitlab (medium 5.3)
- [CVE-2019-20146](https://insights.sbomify.com/CVE-2019-20146/): Denial of service in gitlab:gitlab (medium 5.3)
- [CVE-2019-20145](https://insights.sbomify.com/CVE-2019-20145/): Missing authorization in gitlab:gitlab (medium 4.3)
- [CVE-2019-20144](https://insights.sbomify.com/CVE-2019-20144/): Missing authorization in gitlab:gitlab (medium 4.3)
- [CVE-2019-20143](https://insights.sbomify.com/CVE-2019-20143/): Missing authorization in gitlab:gitlab (medium 5.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/72/