# Vulnerabilities published in 2019


- [CVE-2019-20142](https://insights.sbomify.com/CVE-2019-20142/): Denial of service in gitlab:gitlab (medium 4.3)
- [CVE-2019-20141](https://insights.sbomify.com/CVE-2019-20141/): Cross-site scripting in laborator:neon (medium 6.1)
- [CVE-2019-20140](https://insights.sbomify.com/CVE-2019-20140/): Memory corruption in saitoha:libsixel (high 8.8)
- [CVE-2019-2014](https://insights.sbomify.com/CVE-2019-2014/): Memory corruption in Android (high 8.8)
- [CVE-2019-20139](https://insights.sbomify.com/CVE-2019-20139/): Cross-site scripting in nagios:nagios xi (medium 5.4)
- [CVE-2019-20138](https://insights.sbomify.com/CVE-2019-20138/): Weak cryptography in http authentication library project:http authentication library (high 7.5)
- [CVE-2019-2013](https://insights.sbomify.com/CVE-2019-2013/): Memory corruption in Android (high 8.8)
- [CVE-2019-2012](https://insights.sbomify.com/CVE-2019-2012/): Memory corruption in Android (high 8.8)
- [CVE-2019-2011](https://insights.sbomify.com/CVE-2019-2011/): Memory corruption in Android (high 7.8)
- [CVE-2019-20107](https://insights.sbomify.com/CVE-2019-20107/): SQL injection in testlink:testlink (high 8.8)
- [CVE-2019-20106](https://insights.sbomify.com/CVE-2019-20106/): Missing authorization in Jira Server and Data Center (medium 4.3)
- [CVE-2019-20105](https://insights.sbomify.com/CVE-2019-20105/): Missing authorization in Application Links (medium 4.9)
- [CVE-2019-20104](https://insights.sbomify.com/CVE-2019-20104/): XML external entity in Crowd (high 7.5)
- [CVE-2019-20102](https://insights.sbomify.com/CVE-2019-20102/): Cross-site scripting in Confluence Server (medium 6.1)
- [CVE-2019-20101](https://insights.sbomify.com/CVE-2019-20101/): Missing authorization in Jira Data Center (medium 5.3)
- [CVE-2019-20100](https://insights.sbomify.com/CVE-2019-20100/): Cross-site request forgery in Application Links (medium 4.7)
- [CVE-2019-2010](https://insights.sbomify.com/CVE-2019-2010/): Memory corruption in Android (high 7.8)
- [CVE-2019-20099](https://insights.sbomify.com/CVE-2019-20099/): Cross-site request forgery in Jira Server (medium 4.3)
- [CVE-2019-20098](https://insights.sbomify.com/CVE-2019-20098/): Cross-site request forgery in Jira Server (medium 4.3)
- [CVE-2019-20097](https://insights.sbomify.com/CVE-2019-20097/): Command injection in Bitbucket Data Center (high 8.8)
- [CVE-2019-20096](https://insights.sbomify.com/CVE-2019-20096/): Denial of service in canonical:ubuntu linux (medium 5.5)
- [CVE-2019-20095](https://insights.sbomify.com/CVE-2019-20095/): Denial of service in linux:linux kernel (medium 5.5)
- [CVE-2019-20094](https://insights.sbomify.com/CVE-2019-20094/): Memory corruption in saitoha:libsixel (high 8.8)
- [CVE-2019-20093](https://insights.sbomify.com/CVE-2019-20093/): Null dereference in fedoraproject:fedora (medium 5.5)
- [CVE-2019-20092](https://insights.sbomify.com/CVE-2019-20092/): Null dereference in axiosys:bento4 (medium 5.5)
- [CVE-2019-20091](https://insights.sbomify.com/CVE-2019-20091/): Null dereference in axiosys:bento4 (medium 5.5)
- [CVE-2019-20090](https://insights.sbomify.com/CVE-2019-20090/): Use after free in axiosys:bento4 (high 7.8)
- [CVE-2019-2009](https://insights.sbomify.com/CVE-2019-2009/): Memory corruption in Android (high 8.8)
- [CVE-2019-20089](https://insights.sbomify.com/CVE-2019-20089/): Memory corruption in gopro:gpmf-parser (high 7.8)
- [CVE-2019-20088](https://insights.sbomify.com/CVE-2019-20088/): Memory corruption in gopro:gpmf-parser (high 7.8)
- [CVE-2019-20087](https://insights.sbomify.com/CVE-2019-20087/): Memory corruption in gopro:gpmf-parser (high 8.8)
- [CVE-2019-20086](https://insights.sbomify.com/CVE-2019-20086/): Memory corruption in gopro:gpmf-parser (high 8.8)
- [CVE-2019-20085](https://insights.sbomify.com/CVE-2019-20085/): TVT NVMS-1000 Directory Traversal (high 7.5, exploited in the wild)
- [CVE-2019-20082](https://insights.sbomify.com/CVE-2019-20082/): Memory corruption in asus:rt-n53 firmware (critical 9.8)
- [CVE-2019-2008](https://insights.sbomify.com/CVE-2019-2008/): Race condition in Android (high 7.5)
- [CVE-2019-20079](https://insights.sbomify.com/CVE-2019-20079/): Use after free in canonical:ubuntu linux (high 7.8)
- [CVE-2019-20077](https://insights.sbomify.com/CVE-2019-20077/): Cross-site request forgery in typesettercms:typesetter (medium 4.3)
- [CVE-2019-20076](https://insights.sbomify.com/CVE-2019-20076/): Cross-site scripting in netis-systems:dl4343 firmware (medium 6.1)
- [CVE-2019-20075](https://insights.sbomify.com/CVE-2019-20075/): Cross-site scripting in netis-systems:dl4343 firmware (medium 6.1)
- [CVE-2019-20074](https://insights.sbomify.com/CVE-2019-20074/): Information disclosure in netis-systems:dl4343 firmware (high 8.8)
- [CVE-2019-20073](https://insights.sbomify.com/CVE-2019-20073/): Cross-site scripting in netis-systems:dl4343 firmware (medium 6.1)
- [CVE-2019-20072](https://insights.sbomify.com/CVE-2019-20072/): Cross-site scripting in netis-systems:dl4343 firmware (medium 6.1)
- [CVE-2019-20071](https://insights.sbomify.com/CVE-2019-20071/): Cross-site request forgery in netis-systems:dl4343 firmware (medium 6.5)
- [CVE-2019-20070](https://insights.sbomify.com/CVE-2019-20070/): Cross-site scripting in netis-systems:dl4343 firmware (medium 6.1)
- [CVE-2019-2007](https://insights.sbomify.com/CVE-2019-2007/): Integer overflow in Android (critical 9.8)
- [CVE-2019-20063](https://insights.sbomify.com/CVE-2019-20063/): Memory corruption in symonics:libmysofa (high 8.8)
- [CVE-2019-20062](https://insights.sbomify.com/CVE-2019-20062/): Auth bypass in mfscripts:yetishare (critical 9.8)
- [CVE-2019-20061](https://insights.sbomify.com/CVE-2019-20061/): Information disclosure in mfscripts:yetishare (high 7.5)
- [CVE-2019-20060](https://insights.sbomify.com/CVE-2019-20060/): Information disclosure in mfscripts:yetishare (high 7.5)
- [CVE-2019-2006](https://insights.sbomify.com/CVE-2019-2006/): Use after free in Android (critical 9.8)
- [CVE-2019-20059](https://insights.sbomify.com/CVE-2019-20059/): SQL injection in mfscripts:yetishare (high 8.8)
- [CVE-2019-20058](https://insights.sbomify.com/CVE-2019-20058/): Cross-site scripting in boltcms:bolt (medium 6.1)
- [CVE-2019-20057](https://insights.sbomify.com/CVE-2019-20057/): Privilege escalation in proxyman:proxyman (low 3.7)
- [CVE-2019-20056](https://insights.sbomify.com/CVE-2019-20056/): Denial of service in nothings:stb image.h (medium 6.5)
- [CVE-2019-20055](https://insights.sbomify.com/CVE-2019-20055/): Server-side request forgery in liquidpixels:liquifire os (medium 6.5)
- [CVE-2019-20054](https://insights.sbomify.com/CVE-2019-20054/): Null dereference in linux:linux kernel (medium 5.5)
- [CVE-2019-20053](https://insights.sbomify.com/CVE-2019-20053/): Memory corruption in opensuse:backports (medium 5.5)
- [CVE-2019-20052](https://insights.sbomify.com/CVE-2019-20052/): Denial of service in matio project:matio (medium 6.5)
- [CVE-2019-20051](https://insights.sbomify.com/CVE-2019-20051/): Denial of service in fedoraproject:fedora (medium 5.5)
- [CVE-2019-20050](https://insights.sbomify.com/CVE-2019-20050/): Command injection in artica:pandora fms (medium 6.8)
- [CVE-2019-2005](https://insights.sbomify.com/CVE-2019-2005/): Missing authorization in Android (high 8.8)
- [CVE-2019-20049](https://insights.sbomify.com/CVE-2019-20049/): File upload in al-enterprise:omnivista 4760 (critical 9.8)
- [CVE-2019-20048](https://insights.sbomify.com/CVE-2019-20048/): File upload in al-enterprise:omnivista 8770 (high 7.2)
- [CVE-2019-20047](https://insights.sbomify.com/CVE-2019-20047/): Misconfiguration in al-enterprise:omnivista 4760 (high 7.5)
- [CVE-2019-20046](https://insights.sbomify.com/CVE-2019-20046/): Auth bypass in s3india:husky rtu 6049-e70 firmware (critical 9.8)
- [CVE-2019-20045](https://insights.sbomify.com/CVE-2019-20045/): Denial of service in s3india:husky rtu 6049-e70 firmware (high 7.5)
- [CVE-2019-20044](https://insights.sbomify.com/CVE-2019-20044/): Privilege escalation in apple:ipados (high 7.8)
- [CVE-2019-20043](https://insights.sbomify.com/CVE-2019-20043/): Missing authorization in debian:debian linux (medium 4.3)
- [CVE-2019-20042](https://insights.sbomify.com/CVE-2019-20042/): Cross-site scripting in debian:debian linux (medium 6.1)
- [CVE-2019-20041](https://insights.sbomify.com/CVE-2019-20041/): Cross-site scripting in debian:debian linux (critical 9.8)
- [CVE-2019-2004](https://insights.sbomify.com/CVE-2019-2004/): Information disclosure in Android (medium 5.5)
- [CVE-2019-20033](https://insights.sbomify.com/CVE-2019-20033/): Hardcoded credentials in nec:sv8100 firmware (critical 9.8)
- [CVE-2019-20032](https://insights.sbomify.com/CVE-2019-20032/): Auth bypass in nec:sl1100 firmware (medium 6.5)
- [CVE-2019-20031](https://insights.sbomify.com/CVE-2019-20031/): Auth bypass in nec:um4730 firmware (critical 9.1)
- [CVE-2019-20030](https://insights.sbomify.com/CVE-2019-20030/): Auth bypass in nec:um8000 firmware (high 7.8)
- [CVE-2019-2003](https://insights.sbomify.com/CVE-2019-2003/): Other in Android (high 8.8)
- [CVE-2019-20029](https://insights.sbomify.com/CVE-2019-20029/): Privilege escalation in nec:sl1100 firmware (high 8.8)
- [CVE-2019-20028](https://insights.sbomify.com/CVE-2019-20028/): Missing authorization in nec:sl1100 firmware (high 7.5)
- [CVE-2019-20027](https://insights.sbomify.com/CVE-2019-20027/): Auth bypass in nec:sl1100 firmware (critical 9.8)
- [CVE-2019-20026](https://insights.sbomify.com/CVE-2019-20026/): Auth bypass in nec:sv9100 firmware (high 7.5)
- [CVE-2019-20025](https://insights.sbomify.com/CVE-2019-20025/): Hardcoded credentials in nec:sv9100 firmware (critical 9.8)
- [CVE-2019-20024](https://insights.sbomify.com/CVE-2019-20024/): Memory corruption in saitoha:libsixel (medium 6.5)
- [CVE-2019-20023](https://insights.sbomify.com/CVE-2019-20023/): Denial of service in saitoha:libsixel (medium 6.5)
- [CVE-2019-20022](https://insights.sbomify.com/CVE-2019-20022/): Memory corruption in saitoha:libsixel (medium 6.5)
- [CVE-2019-20021](https://insights.sbomify.com/CVE-2019-20021/): Memory corruption in fedoraproject:fedora (medium 5.5)
- [CVE-2019-20020](https://insights.sbomify.com/CVE-2019-20020/): Memory corruption in matio project:matio (medium 6.5)
- [CVE-2019-20019](https://insights.sbomify.com/CVE-2019-20019/): Denial of service in matio project:matio (medium 6.5)
- [CVE-2019-20018](https://insights.sbomify.com/CVE-2019-20018/): Memory corruption in matio project:matio (medium 6.5)
- [CVE-2019-20017](https://insights.sbomify.com/CVE-2019-20017/): Memory corruption in matio project:matio (medium 6.5)
- [CVE-2019-20016](https://insights.sbomify.com/CVE-2019-20016/): Denial of service in symonics:libmysofa (medium 6.5)
- [CVE-2019-20015](https://insights.sbomify.com/CVE-2019-20015/): Denial of service in gnu:libredwg (medium 6.5)
- [CVE-2019-20014](https://insights.sbomify.com/CVE-2019-20014/): Memory corruption in gnu:libredwg (high 8.8)
- [CVE-2019-20013](https://insights.sbomify.com/CVE-2019-20013/): Denial of service in gnu:libredwg (medium 6.5)
- [CVE-2019-20012](https://insights.sbomify.com/CVE-2019-20012/): Denial of service in gnu:libredwg (medium 6.5)
- [CVE-2019-20011](https://insights.sbomify.com/CVE-2019-20011/): Memory corruption in gnu:libredwg (high 8.8)
- [CVE-2019-20010](https://insights.sbomify.com/CVE-2019-20010/): Use after free in gnu:libredwg (high 8.8)
- [CVE-2019-2001](https://insights.sbomify.com/CVE-2019-2001/): Information disclosure in Android (medium 5.5)
- [CVE-2019-20009](https://insights.sbomify.com/CVE-2019-20009/): Denial of service in gnu:libredwg (medium 6.5)
- [CVE-2019-20008](https://insights.sbomify.com/CVE-2019-20008/): Cross-site scripting in archerysec:archery (medium 5.4)
- [CVE-2019-20007](https://insights.sbomify.com/CVE-2019-20007/): Null dereference in ezxml project:ezxml (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/73/