# Vulnerabilities published in 2019


- [CVE-2019-16221](https://insights.sbomify.com/CVE-2019-16221/): Cross-site scripting in debian:debian linux (medium 6.1)
- [CVE-2019-16220](https://insights.sbomify.com/CVE-2019-16220/): Open redirect in debian:debian linux (medium 6.1)
- [CVE-2019-1622](https://insights.sbomify.com/CVE-2019-1622/): Cisco Data Center Network Manager Information Disclosure Vulnerability (medium 5.3)
- [CVE-2019-16219](https://insights.sbomify.com/CVE-2019-16219/): Cross-site scripting in debian:debian linux (medium 6.1)
- [CVE-2019-16218](https://insights.sbomify.com/CVE-2019-16218/): Cross-site scripting in debian:debian linux (medium 6.1)
- [CVE-2019-16217](https://insights.sbomify.com/CVE-2019-16217/): Cross-site scripting in debian:debian linux (medium 6.1)
- [CVE-2019-16216](https://insights.sbomify.com/CVE-2019-16216/): Cross-site scripting in zulip:zulip server (medium 5.4)
- [CVE-2019-16215](https://insights.sbomify.com/CVE-2019-16215/): Denial of service in zulip:zulip server (medium 6.5)
- [CVE-2019-16214](https://insights.sbomify.com/CVE-2019-16214/): Security feature bypass in libra:libra core (medium 5.7)
- [CVE-2019-16213](https://insights.sbomify.com/CVE-2019-16213/): Command injection in tendacn:pa6 firmware (high 8.8)
- [CVE-2019-16212](https://insights.sbomify.com/CVE-2019-16212/): Auth bypass in Brocade SANnav (high 8.8)
- [CVE-2019-16211](https://insights.sbomify.com/CVE-2019-16211/): Information disclosure in Brocade SANnav (critical 9.8)
- [CVE-2019-16210](https://insights.sbomify.com/CVE-2019-16210/): Information disclosure in Brocade SANnav (medium 5.5)
- [CVE-2019-1621](https://insights.sbomify.com/CVE-2019-1621/): Cisco Data Center Network Manager Arbitrary File Download Vulnerability (high 7.5)
- [CVE-2019-16209](https://insights.sbomify.com/CVE-2019-16209/): Weak cryptography in Brocade SANnav (high 7.4)
- [CVE-2019-16208](https://insights.sbomify.com/CVE-2019-16208/): Weak cryptography in Brocade SANnav (high 7.5)
- [CVE-2019-16207](https://insights.sbomify.com/CVE-2019-16207/): Hardcoded credentials in Brocade SANnav (high 7.8)
- [CVE-2019-16206](https://insights.sbomify.com/CVE-2019-16206/): Information disclosure in Brocade SANnav (medium 5.5)
- [CVE-2019-16205](https://insights.sbomify.com/CVE-2019-16205/): Weak cryptography in Brocade SANnav (high 8.8)
- [CVE-2019-16204](https://insights.sbomify.com/CVE-2019-16204/): Information disclosure in Brocade Fabric OS (high 7.5)
- [CVE-2019-16203](https://insights.sbomify.com/CVE-2019-16203/): Information disclosure in Brocade Fabric OS (high 7.5)
- [CVE-2019-16202](https://insights.sbomify.com/CVE-2019-16202/): Privilege escalation in misp-project:misp (medium 6.5)
- [CVE-2019-16201](https://insights.sbomify.com/CVE-2019-16201/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2019-16200](https://insights.sbomify.com/CVE-2019-16200/): Integer overflow in gnu:serveez (high 7.5)
- [CVE-2019-1620](https://insights.sbomify.com/CVE-2019-1620/): Cisco Data Center Network Manager Arbitrary File Upload and Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2019-16199](https://insights.sbomify.com/CVE-2019-16199/): Missing authorization in eq-3:homematic ccu2 firmware (critical 9.8)
- [CVE-2019-16198](https://insights.sbomify.com/CVE-2019-16198/): Path traversal in kslabs:ksweb (medium 6.5)
- [CVE-2019-16197](https://insights.sbomify.com/CVE-2019-16197/): Cross-site scripting in Dolibarr (medium 6.1)
- [CVE-2019-16195](https://insights.sbomify.com/CVE-2019-16195/): Cross-site scripting in centreon:centreon (medium 6.1)
- [CVE-2019-16194](https://insights.sbomify.com/CVE-2019-16194/): SQL injection in Centreon (critical 9.8)
- [CVE-2019-16193](https://insights.sbomify.com/CVE-2019-16193/): Cross-site scripting in esri:arcgis enterprise (medium 5.4)
- [CVE-2019-16192](https://insights.sbomify.com/CVE-2019-16192/): File upload in doccms:doccms (critical 9.8)
- [CVE-2019-16190](https://insights.sbomify.com/CVE-2019-16190/): Auth bypass in dlink:dir-868l firmware (critical 9.8)
- [CVE-2019-1619](https://insights.sbomify.com/CVE-2019-1619/): Cisco Data Center Network Manager Authentication Bypass Vulnerability (critical 9.8)
- [CVE-2019-16188](https://insights.sbomify.com/CVE-2019-16188/): XML external entity in hcltech:appscan source (high 7.1)
- [CVE-2019-16187](https://insights.sbomify.com/CVE-2019-16187/): Misconfiguration in limesurvey:limesurvey (high 7.5)
- [CVE-2019-16186](https://insights.sbomify.com/CVE-2019-16186/): Missing authorization in limesurvey:limesurvey (high 7.2)
- [CVE-2019-16185](https://insights.sbomify.com/CVE-2019-16185/): Missing authorization in limesurvey:limesurvey (high 7.2)
- [CVE-2019-16184](https://insights.sbomify.com/CVE-2019-16184/): Code injection in limesurvey:limesurvey (critical 9.8)
- [CVE-2019-16183](https://insights.sbomify.com/CVE-2019-16183/): Missing authorization in limesurvey:limesurvey (low 2.7)
- [CVE-2019-16182](https://insights.sbomify.com/CVE-2019-16182/): Cross-site scripting in limesurvey:limesurvey (medium 6.1)
- [CVE-2019-16181](https://insights.sbomify.com/CVE-2019-16181/): Missing authorization in limesurvey:limesurvey (low 2.7)
- [CVE-2019-16180](https://insights.sbomify.com/CVE-2019-16180/): Auth bypass in limesurvey:limesurvey (medium 5.3)
- [CVE-2019-1618](https://insights.sbomify.com/CVE-2019-1618/): Cisco Nexus 9000 Series Switches Standalone NX-OS Mode Tetration Analytics Agent Arbitrary Code Execution Vulnerability (high 7.8)
- [CVE-2019-16179](https://insights.sbomify.com/CVE-2019-16179/): Weak cryptography in limesurvey:limesurvey (medium 5.3)
- [CVE-2019-16178](https://insights.sbomify.com/CVE-2019-16178/): Cross-site scripting in limesurvey:limesurvey (medium 5.4)
- [CVE-2019-16177](https://insights.sbomify.com/CVE-2019-16177/): Information disclosure in limesurvey:limesurvey (high 7.5)
- [CVE-2019-16176](https://insights.sbomify.com/CVE-2019-16176/): Information disclosure in limesurvey:limesurvey (medium 5.3)
- [CVE-2019-16175](https://insights.sbomify.com/CVE-2019-16175/): Other in limesurvey:limesurvey (medium 4.3)
- [CVE-2019-16174](https://insights.sbomify.com/CVE-2019-16174/): XML external entity in limesurvey:limesurvey (high 8.8)
- [CVE-2019-16173](https://insights.sbomify.com/CVE-2019-16173/): Cross-site Scripting in LimeSurvey (medium 5.4)
- [CVE-2019-16172](https://insights.sbomify.com/CVE-2019-16172/): Cross-site Scripting in LimeSurvey (medium 5.4)
- [CVE-2019-16171](https://insights.sbomify.com/CVE-2019-16171/): Cross-site scripting in jetbrains:youtrack (medium 6.1)
- [CVE-2019-16170](https://insights.sbomify.com/CVE-2019-16170/): Missing authorization in gitlab:gitlab (high 7.1)
- [CVE-2019-1617](https://insights.sbomify.com/CVE-2019-1617/): Cisco Nexus 9000 Series Switches Standalone NX-OS Mode Fibre Channel over Ethernet NPV Denial of Service Vulnerability (high 7.4)
- [CVE-2019-16168](https://insights.sbomify.com/CVE-2019-16168/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2019-16167](https://insights.sbomify.com/CVE-2019-16167/): Integer overflow in canonical:ubuntu linux (medium 5.5)
- [CVE-2019-16166](https://insights.sbomify.com/CVE-2019-16166/): Memory corruption in gnu:cflow (medium 6.5)
- [CVE-2019-16165](https://insights.sbomify.com/CVE-2019-16165/): Use after free in gnu:cflow (medium 6.5)
- [CVE-2019-16164](https://insights.sbomify.com/CVE-2019-16164/): Null dereference in myhtml project:myhtml (medium 6.5)
- [CVE-2019-16163](https://insights.sbomify.com/CVE-2019-16163/): Denial of service in canonical:ubuntu linux (high 7.5)
- [CVE-2019-16162](https://insights.sbomify.com/CVE-2019-16162/): Memory corruption in k-takata:onigmo (high 7.5)
- [CVE-2019-16161](https://insights.sbomify.com/CVE-2019-16161/): Null dereference in k-takata:onigmo (high 7.5)
- [CVE-2019-16160](https://insights.sbomify.com/CVE-2019-16160/): Integer overflow in mikrotik:routeros (high 7.5)
- [CVE-2019-1616](https://insights.sbomify.com/CVE-2019-1616/): Cisco NX-OS Software Cisco Fabric Services Denial of Service Vulnerability (high 8.6)
- [CVE-2019-16159](https://insights.sbomify.com/CVE-2019-16159/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2019-16157](https://insights.sbomify.com/CVE-2019-16157/): Information disclosure in Fortinet FortiWeb (medium 6.5)
- [CVE-2019-16156](https://insights.sbomify.com/CVE-2019-16156/): Cross-site scripting in Fortinet FortiWeb (medium 6.1)
- [CVE-2019-16155](https://insights.sbomify.com/CVE-2019-16155/): Privilege escalation in Fortinet FortiClientLinux (high 7.1)
- [CVE-2019-16154](https://insights.sbomify.com/CVE-2019-16154/): Cross-site scripting in FortiAuthenticator WEB UI (medium 6.1)
- [CVE-2019-16153](https://insights.sbomify.com/CVE-2019-16153/): Hardcoded credentials in Fortinet FortiSIEM (critical 9.8)
- [CVE-2019-16152](https://insights.sbomify.com/CVE-2019-16152/): Denial of service in Fortinet FortiClientLinux (medium 6.5)
- [CVE-2019-16151](https://insights.sbomify.com/CVE-2019-16151/): Cross-site scripting in FortiOS (medium 4.7)
- [CVE-2019-16150](https://insights.sbomify.com/CVE-2019-16150/): Hardcoded credentials in Fortinet FortiClient for Windows (medium 5.5)
- [CVE-2019-1615](https://insights.sbomify.com/CVE-2019-1615/): Cisco NX-OS Software Image Signature Verification Vulnerability (medium 6.7)
- [CVE-2019-16149](https://insights.sbomify.com/CVE-2019-16149/): Cross-site scripting in FortiClientEMS (medium 5.4)
- [CVE-2019-16148](https://insights.sbomify.com/CVE-2019-16148/): Cross-site scripting in Sakai (medium 6.1)
- [CVE-2019-16147](https://insights.sbomify.com/CVE-2019-16147/): Liferay Portal Vulnerable to Cross-Site Scripting (XSS) via a Journal Article Title (medium 6.1)
- [CVE-2019-16146](https://insights.sbomify.com/CVE-2019-16146/): Gophish XSS Vulnerability (medium 4.8)
- [CVE-2019-16145](https://insights.sbomify.com/CVE-2019-16145/): Cross-site scripting in padrino-contrib (medium 6.1)
- [CVE-2019-16144](https://insights.sbomify.com/CVE-2019-16144/): Uninitialized memory use in generator (high 7.5)
- [CVE-2019-16143](https://insights.sbomify.com/CVE-2019-16143/): Algorithms compute incorrect results in blake2 (critical 9.8)
- [CVE-2019-16142](https://insights.sbomify.com/CVE-2019-16142/): Improper Input Validation in renderdoc (critical 9.8)
- [CVE-2019-16141](https://insights.sbomify.com/CVE-2019-16141/): Improper Input Validation in once_cell (high 7.5)
- [CVE-2019-16140](https://insights.sbomify.com/CVE-2019-16140/): Use-after-free in chttp (critical 9.8)
- [CVE-2019-1614](https://insights.sbomify.com/CVE-2019-1614/): Cisco NX-OS Software NX-API Command Injection Vulnerability (high 8.8)
- [CVE-2019-16139](https://insights.sbomify.com/CVE-2019-16139/): Out of bounds access in compact_arena (critical 9.8)
- [CVE-2019-16138](https://insights.sbomify.com/CVE-2019-16138/): Use after free in image (critical 9.8)
- [CVE-2019-16137](https://insights.sbomify.com/CVE-2019-16137/): Wrong memory orderings violates mutual exclusion in spin (high 7.5)
- [CVE-2019-16133](https://insights.sbomify.com/CVE-2019-16133/): Information disclosure in weaver:eteams oa (medium 6.5)
- [CVE-2019-16132](https://insights.sbomify.com/CVE-2019-16132/): Path traversal in phpok:oklite (medium 6.5)
- [CVE-2019-16131](https://insights.sbomify.com/CVE-2019-16131/): File upload in phpok:oklite (high 8.8)
- [CVE-2019-16130](https://insights.sbomify.com/CVE-2019-16130/): Cross-site Scripting in YII2-CMS (medium 6.1)
- [CVE-2019-1613](https://insights.sbomify.com/CVE-2019-1613/): Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1613) (medium 4.2)
- [CVE-2019-16129](https://insights.sbomify.com/CVE-2019-16129/): Memory corruption in microchip:cryptoauthlib (medium 6.8)
- [CVE-2019-16128](https://insights.sbomify.com/CVE-2019-16128/): Memory corruption in microchip:cryptoauthlib (medium 6.8)
- [CVE-2019-16127](https://insights.sbomify.com/CVE-2019-16127/): Integer overflow in microchip:advanced software framework 4 (critical 9.1)
- [CVE-2019-16126](https://insights.sbomify.com/CVE-2019-16126/): Cross-site Scripting in Grav (medium 6.1)
- [CVE-2019-16125](https://insights.sbomify.com/CVE-2019-16125/): SQL injection in jobberbase:jobberbase (critical 9.8)
- [CVE-2019-16124](https://insights.sbomify.com/CVE-2019-16124/): Missing authorization in youphptube:youphptube (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/100/