# Vulnerabilities published in 2019


- [CVE-2019-20006](https://insights.sbomify.com/CVE-2019-20006/): Use after free in ezxml project:ezxml (high 7.5)
- [CVE-2019-20005](https://insights.sbomify.com/CVE-2019-20005/): Memory corruption in ezxml project:ezxml (medium 6.5)
- [CVE-2019-20004](https://insights.sbomify.com/CVE-2019-20004/): Auth bypass in intelbras:iwr 3000n firmware (high 8.8)
- [CVE-2019-20003](https://insights.sbomify.com/CVE-2019-20003/): Cross-site scripting in dicube:easescreen crystal (medium 6.1)
- [CVE-2019-20002](https://insights.sbomify.com/CVE-2019-20002/): Code injection in solarwinds:webhelpdesk (high 7.8)
- [CVE-2019-20001](https://insights.sbomify.com/CVE-2019-20001/): Privilege escalation in ricoh:streamline nx client tool (high 7.8)
- [CVE-2019-20000](https://insights.sbomify.com/CVE-2019-20000/): Race condition in bullguard:premium protection (medium 5.9)
- [CVE-2019-2000](https://insights.sbomify.com/CVE-2019-2000/): Use after free in Android (high 7.8)
- [CVE-2019-19999](https://insights.sbomify.com/CVE-2019-19999/): Code injection in halo:halo (high 7.2)
- [CVE-2019-19998](https://insights.sbomify.com/CVE-2019-19998/): XML external entity in xiuno:xiunobbs (high 7.5)
- [CVE-2019-19996](https://insights.sbomify.com/CVE-2019-19996/): Denial of service in intelbras:iwr 3000n firmware (high 7.5)
- [CVE-2019-19995](https://insights.sbomify.com/CVE-2019-19995/): Cross-site request forgery in intelbras:iwr 3000n firmware (high 8.8)
- [CVE-2019-19994](https://insights.sbomify.com/CVE-2019-19994/): Command injection in seling:visual access manager (critical 9.8)
- [CVE-2019-19993](https://insights.sbomify.com/CVE-2019-19993/): Information disclosure in seling:visual access manager (medium 5.3)
- [CVE-2019-19992](https://insights.sbomify.com/CVE-2019-19992/): Path traversal in seling:visual access manager (medium 6.5)
- [CVE-2019-19991](https://insights.sbomify.com/CVE-2019-19991/): Cross-site scripting in seling:visual access manager (medium 5.4)
- [CVE-2019-19990](https://insights.sbomify.com/CVE-2019-19990/): Cross-site scripting in seling:visual access manager (medium 5.4)
- [CVE-2019-1999](https://insights.sbomify.com/CVE-2019-1999/): Memory corruption in Android (high 7.8)
- [CVE-2019-19989](https://insights.sbomify.com/CVE-2019-19989/): Missing authorization in seling:visual access manager (high 7.5)
- [CVE-2019-19988](https://insights.sbomify.com/CVE-2019-19988/): File upload in seling:visual access manager (high 8.8)
- [CVE-2019-19987](https://insights.sbomify.com/CVE-2019-19987/): Cross-site request forgery in seling:visual access manager (medium 6.5)
- [CVE-2019-19986](https://insights.sbomify.com/CVE-2019-19986/): SQL injection in seling:visual access manager (high 7.5)
- [CVE-2019-19985](https://insights.sbomify.com/CVE-2019-19985/): Missing authorization in icegram:email subscribers \& newsletters (medium 5.8)
- [CVE-2019-19984](https://insights.sbomify.com/CVE-2019-19984/): Missing authorization in icegram:email subscribers \& newsletters (medium 6.3)
- [CVE-2019-19983](https://insights.sbomify.com/CVE-2019-19983/): Information disclosure in fastvelocity:minify (medium 4.3)
- [CVE-2019-19982](https://insights.sbomify.com/CVE-2019-19982/): Auth bypass in icegram:email subscribers \& newsletters (medium 6.5)
- [CVE-2019-19981](https://insights.sbomify.com/CVE-2019-19981/): Cross-site request forgery in icegram:email subscribers \& newsletters (medium 5.4)
- [CVE-2019-19980](https://insights.sbomify.com/CVE-2019-19980/): Privilege escalation in icegram:email subscribers \& newsletters (medium 4.3)
- [CVE-2019-1998](https://insights.sbomify.com/CVE-2019-1998/): Denial of service in Android (medium 5.5)
- [CVE-2019-19979](https://insights.sbomify.com/CVE-2019-19979/): Cross-site request forgery in wp maintenance project:wp maintenance (high 8.8)
- [CVE-2019-19977](https://insights.sbomify.com/CVE-2019-19977/): Memory corruption in libesmtp project:libesmtp (critical 9.8)
- [CVE-2019-1997](https://insights.sbomify.com/CVE-2019-1997/): Weak cryptography in Android (high 7.5)
- [CVE-2019-19968](https://insights.sbomify.com/CVE-2019-19968/): Cross-site scripting in pandorafms:pandora fms (medium 5.4)
- [CVE-2019-19967](https://insights.sbomify.com/CVE-2019-19967/): Information disclosure in upc:connect box eurodocsis firmware (high 7.5)
- [CVE-2019-19966](https://insights.sbomify.com/CVE-2019-19966/): Use after free in debian:debian linux (medium 4.6)
- [CVE-2019-19965](https://insights.sbomify.com/CVE-2019-19965/): Null dereference in canonical:ubuntu linux (medium 4.7)
- [CVE-2019-19964](https://insights.sbomify.com/CVE-2019-19964/): Auth bypass in netgear:gs728tps firmware (low 2.7)
- [CVE-2019-19963](https://insights.sbomify.com/CVE-2019-19963/): Weak cryptography in wolfssl:wolfssl (medium 5.3)
- [CVE-2019-19962](https://insights.sbomify.com/CVE-2019-19962/): Weak cryptography in wolfssl:wolfssl (high 7.5)
- [CVE-2019-19960](https://insights.sbomify.com/CVE-2019-19960/): Weak cryptography in wolfssl:wolfssl (medium 5.3)
- [CVE-2019-1996](https://insights.sbomify.com/CVE-2019-1996/): Memory corruption in Android (medium 6.5)
- [CVE-2019-19959](https://insights.sbomify.com/CVE-2019-19959/): Memory corruption in canonical:ubuntu linux (high 7.5)
- [CVE-2019-19958](https://insights.sbomify.com/CVE-2019-19958/): Denial of service in mz-automation:libiec61850 (medium 6.5)
- [CVE-2019-19957](https://insights.sbomify.com/CVE-2019-19957/): Memory corruption in mz-automation:libiec61850 (medium 6.5)
- [CVE-2019-19956](https://insights.sbomify.com/CVE-2019-19956/): Denial of service in canonical:ubuntu linux (high 7.5)
- [CVE-2019-19954](https://insights.sbomify.com/CVE-2019-19954/): Privilege escalation in signal:signal-desktop (high 7.3)
- [CVE-2019-19953](https://insights.sbomify.com/CVE-2019-19953/): Memory corruption in debian:debian linux (critical 9.1)
- [CVE-2019-19952](https://insights.sbomify.com/CVE-2019-19952/): Use after free in imagemagick:imagemagick (critical 9.8)
- [CVE-2019-19951](https://insights.sbomify.com/CVE-2019-19951/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2019-19950](https://insights.sbomify.com/CVE-2019-19950/): Use after free in debian:debian linux (critical 9.8)
- [CVE-2019-1995](https://insights.sbomify.com/CVE-2019-1995/): Information disclosure in Android (medium 5.5)
- [CVE-2019-19949](https://insights.sbomify.com/CVE-2019-19949/): Memory corruption in canonical:ubuntu linux (critical 9.1)
- [CVE-2019-19948](https://insights.sbomify.com/CVE-2019-19948/): Memory corruption in canonical:ubuntu linux (critical 9.8)
- [CVE-2019-19947](https://insights.sbomify.com/CVE-2019-19947/): Information disclosure in canonical:ubuntu linux (medium 4.6)
- [CVE-2019-19946](https://insights.sbomify.com/CVE-2019-19946/): Missing authorization in dradisframework:dradis (medium 6.5)
- [CVE-2019-19945](https://insights.sbomify.com/CVE-2019-19945/): Integer overflow in openwrt:openwrt (high 7.5)
- [CVE-2019-19944](https://insights.sbomify.com/CVE-2019-19944/): Memory corruption in mz-automation:libiec61850 (medium 6.5)
- [CVE-2019-19943](https://insights.sbomify.com/CVE-2019-19943/): Memory corruption in pablosoftwaresolutions:quick \'n easy web server (high 7.5)
- [CVE-2019-19942](https://insights.sbomify.com/CVE-2019-19942/): Other in swisscom:centro business (high 7.5)
- [CVE-2019-19941](https://insights.sbomify.com/CVE-2019-19941/): Cross-site scripting in swisscom:centro grande firmware (medium 5.4)
- [CVE-2019-19940](https://insights.sbomify.com/CVE-2019-19940/): Command injection in swisscom:centro grande firmware (high 7.2)
- [CVE-2019-1994](https://insights.sbomify.com/CVE-2019-1994/): Misconfiguration in Android (high 8.8)
- [CVE-2019-19937](https://insights.sbomify.com/CVE-2019-19937/): Missing authorization in jfrog:artifactory (high 7.2)
- [CVE-2019-19935](https://insights.sbomify.com/CVE-2019-19935/): DOM-based cross-site scripting in Froala Editor (medium 6.1)
- [CVE-2019-19931](https://insights.sbomify.com/CVE-2019-19931/): Memory corruption in mz-automation:libiec61850 (high 8.8)
- [CVE-2019-19930](https://insights.sbomify.com/CVE-2019-19930/): Integer overflow in mz-automation:libiec61850 (medium 6.5)
- [CVE-2019-1993](https://insights.sbomify.com/CVE-2019-1993/): Integer overflow in Android (high 7.8)
- [CVE-2019-19929](https://insights.sbomify.com/CVE-2019-19929/): Other in malwarebytes:adwcleaner (high 7.8)
- [CVE-2019-19927](https://insights.sbomify.com/CVE-2019-19927/): Memory corruption in linux:linux kernel (medium 6.0)
- [CVE-2019-19926](https://insights.sbomify.com/CVE-2019-19926/): Null dereference in debian:debian linux (high 7.5)
- [CVE-2019-19925](https://insights.sbomify.com/CVE-2019-19925/): Null dereference in debian:debian linux (high 7.5)
- [CVE-2019-19924](https://insights.sbomify.com/CVE-2019-19924/): Other in apache:bookkeeper (medium 5.3)
- [CVE-2019-19923](https://insights.sbomify.com/CVE-2019-19923/): Null dereference in debian:debian linux (high 7.5)
- [CVE-2019-19922](https://insights.sbomify.com/CVE-2019-19922/): Denial of service in canonical:ubuntu linux (medium 5.5)
- [CVE-2019-19921](https://insights.sbomify.com/CVE-2019-19921/): opencontainers runc contains procfs race condition with a shared volume mount (high 7.0)
- [CVE-2019-19920](https://insights.sbomify.com/CVE-2019-19920/): Code injection in canonical:ubuntu linux (high 8.8)
- [CVE-2019-1992](https://insights.sbomify.com/CVE-2019-1992/): Use after free in Android (high 7.5)
- [CVE-2019-19919](https://insights.sbomify.com/CVE-2019-19919/): Prototype Pollution in handlebars (critical 9.8)
- [CVE-2019-19918](https://insights.sbomify.com/CVE-2019-19918/): Memory corruption in fedoraproject:fedora (high 7.8)
- [CVE-2019-19917](https://insights.sbomify.com/CVE-2019-19917/): Memory corruption in fedoraproject:fedora (high 7.8)
- [CVE-2019-19916](https://insights.sbomify.com/CVE-2019-19916/): Cross-site scripting in midori-browser:midori (medium 6.1)
- [CVE-2019-19915](https://insights.sbomify.com/CVE-2019-19915/): Missing authorization in webfactoryltd:301 redirects (critical 9.0)
- [CVE-2019-19913](https://insights.sbomify.com/CVE-2019-19913/): Cross-site scripting in intland:codebeamer (medium 4.8)
- [CVE-2019-19912](https://insights.sbomify.com/CVE-2019-19912/): Cross-site scripting in intland:codebeamer (medium 4.8)
- [CVE-2019-19911](https://insights.sbomify.com/CVE-2019-19911/): Uncontrolled Resource Consumption in Pillow (high 7.5)
- [CVE-2019-19910](https://insights.sbomify.com/CVE-2019-19910/): Cross-site scripting in mediawiki:mediawiki (medium 6.1)
- [CVE-2019-1991](https://insights.sbomify.com/CVE-2019-1991/): Memory corruption in Android (high 8.8)
- [CVE-2019-19909](https://insights.sbomify.com/CVE-2019-19909/): Deserialization in sfu:open journal system (high 8.8)
- [CVE-2019-19908](https://insights.sbomify.com/CVE-2019-19908/): Cross-site scripting in ciprianmp:phpmychat-plus (medium 6.1)
- [CVE-2019-19907](https://insights.sbomify.com/CVE-2019-19907/): Memory corruption in kopano:groupware core (critical 9.8)
- [CVE-2019-19906](https://insights.sbomify.com/CVE-2019-19906/): Memory corruption in apache:bookkeeper (high 7.5)
- [CVE-2019-19905](https://insights.sbomify.com/CVE-2019-19905/): Memory corruption in nethack:nethack (critical 9.8)
- [CVE-2019-19903](https://insights.sbomify.com/CVE-2019-19903/): Cross-site scripting in backdropcms:backdrop cms (medium 4.8)
- [CVE-2019-19902](https://insights.sbomify.com/CVE-2019-19902/): File upload in backdropcms:backdrop cms (high 7.2)
- [CVE-2019-19901](https://insights.sbomify.com/CVE-2019-19901/): Cross-site scripting in backdropcms:backdrop cms (medium 4.8)
- [CVE-2019-19900](https://insights.sbomify.com/CVE-2019-19900/): Cross-site scripting in backdropcms:backdrop cms (medium 4.8)
- [CVE-2019-1990](https://insights.sbomify.com/CVE-2019-1990/): Memory corruption in Android (high 8.8)
- [CVE-2019-19899](https://insights.sbomify.com/CVE-2019-19899/): Pebble Templates Improper Input Validation vulnerability (critical 9.8)
- [CVE-2019-19898](https://insights.sbomify.com/CVE-2019-19898/): Information disclosure in ixpdata:easyinstall (high 7.5)
- [CVE-2019-19897](https://insights.sbomify.com/CVE-2019-19897/): Command injection in ixpdata:easyinstall (critical 10.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/74/