# Vulnerabilities published in 2019


- [CVE-2019-16123](https://insights.sbomify.com/CVE-2019-16123/): Path traversal in kartatopia:piluscart (high 7.5)
- [CVE-2019-16120](https://insights.sbomify.com/CVE-2019-16120/): Code injection in liquidweb:event tickets (high 8.8)
- [CVE-2019-1612](https://insights.sbomify.com/CVE-2019-1612/): Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1612) (medium 4.2)
- [CVE-2019-16119](https://insights.sbomify.com/CVE-2019-16119/): SQL injection in 10web:photo gallery (critical 9.8)
- [CVE-2019-16118](https://insights.sbomify.com/CVE-2019-16118/): Cross-site scripting in 10web:photo gallery (medium 6.1)
- [CVE-2019-16117](https://insights.sbomify.com/CVE-2019-16117/): Cross-site scripting in 10web:photo gallery (medium 6.1)
- [CVE-2019-16116](https://insights.sbomify.com/CVE-2019-16116/): Information disclosure in enterprisedt:completeftp server (medium 4.3)
- [CVE-2019-16115](https://insights.sbomify.com/CVE-2019-16115/): Memory corruption in glyphandcog:xpdfreader (high 7.8)
- [CVE-2019-16114](https://insights.sbomify.com/CVE-2019-16114/): Missing authorization in atutor:atutor (critical 9.8)
- [CVE-2019-16113](https://insights.sbomify.com/CVE-2019-16113/): Path traversal in bludit:bludit (high 8.8)
- [CVE-2019-16112](https://insights.sbomify.com/CVE-2019-16112/): Deserialization in tylertech:eagle (high 8.8)
- [CVE-2019-16110](https://insights.sbomify.com/CVE-2019-16110/): Other in blade-group:shadow (high 8.1)
- [CVE-2019-1611](https://insights.sbomify.com/CVE-2019-1611/): Cisco FXOS and NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1611) (medium 4.2)
- [CVE-2019-16109](https://insights.sbomify.com/CVE-2019-16109/): Authentication Bypass in Devise (medium 5.3)
- [CVE-2019-16108](https://insights.sbomify.com/CVE-2019-16108/): phpBB arbitrary CSS injection (high 7.5)
- [CVE-2019-16107](https://insights.sbomify.com/CVE-2019-16107/): phpBB Cross-Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2019-16106](https://insights.sbomify.com/CVE-2019-16106/): Missing authorization in humanica:humatrix (high 7.5)
- [CVE-2019-16105](https://insights.sbomify.com/CVE-2019-16105/): Path traversal in silver-peak:unity edgeconnect sd-wan firmware (medium 4.9)
- [CVE-2019-16104](https://insights.sbomify.com/CVE-2019-16104/): Cross-site scripting in silver-peak:unity edgeconnect sd-wan firmware (medium 6.1)
- [CVE-2019-16103](https://insights.sbomify.com/CVE-2019-16103/): Privilege escalation in silver-peak:unity edgeconnect sd-wan firmware (high 7.2)
- [CVE-2019-16102](https://insights.sbomify.com/CVE-2019-16102/): Misconfiguration in silver-peak:unity edgeconnect sd-wan firmware (critical 9.8)
- [CVE-2019-16101](https://insights.sbomify.com/CVE-2019-16101/): Information disclosure in silver-peak:unity edgeconnect sd-wan firmware (medium 5.3)
- [CVE-2019-16100](https://insights.sbomify.com/CVE-2019-16100/): Denial of service in silver-peak:unity edgeconnect sd-wan firmware (high 7.5)
- [CVE-2019-1610](https://insights.sbomify.com/CVE-2019-1610/): Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1610) (medium 4.2)
- [CVE-2019-16099](https://insights.sbomify.com/CVE-2019-16099/): Cross-site request forgery in silver-peak:unity edgeconnect sd-wan firmware (high 8.8)
- [CVE-2019-16098](https://insights.sbomify.com/CVE-2019-16098/): Memory corruption in msi:afterburner (high 7.8)
- [CVE-2019-16097](https://insights.sbomify.com/CVE-2019-16097/): Missing Authorization in Harbor (medium 6.5)
- [CVE-2019-16096](https://insights.sbomify.com/CVE-2019-16096/): Integer overflow in kilo project:kilo (high 7.5)
- [CVE-2019-16095](https://insights.sbomify.com/CVE-2019-16095/): Memory corruption in canonical:ubuntu linux (high 7.5)
- [CVE-2019-16094](https://insights.sbomify.com/CVE-2019-16094/): Memory corruption in canonical:ubuntu linux (high 7.5)
- [CVE-2019-16093](https://insights.sbomify.com/CVE-2019-16093/): Memory corruption in canonical:ubuntu linux (critical 9.8)
- [CVE-2019-16092](https://insights.sbomify.com/CVE-2019-16092/): Null dereference in canonical:ubuntu linux (critical 9.8)
- [CVE-2019-16091](https://insights.sbomify.com/CVE-2019-16091/): Memory corruption in canonical:ubuntu linux (high 7.5)
- [CVE-2019-1609](https://insights.sbomify.com/CVE-2019-1609/): Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1609) (medium 4.2)
- [CVE-2019-16089](https://insights.sbomify.com/CVE-2019-16089/): Null dereference in linux:linux kernel (medium 4.1)
- [CVE-2019-16088](https://insights.sbomify.com/CVE-2019-16088/): Denial of service in glyphandcog:xpdfreader (medium 5.5)
- [CVE-2019-1608](https://insights.sbomify.com/CVE-2019-1608/): Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1608) (medium 4.2)
- [CVE-2019-16072](https://insights.sbomify.com/CVE-2019-16072/): Command injection in netsas:enigma network management solution (critical 9.8)
- [CVE-2019-16071](https://insights.sbomify.com/CVE-2019-16071/): Privilege escalation in netsas:enigma nms (high 8.8)
- [CVE-2019-16070](https://insights.sbomify.com/CVE-2019-16070/): Cross-site scripting in netsas:enigma network management solution (medium 6.1)
- [CVE-2019-1607](https://insights.sbomify.com/CVE-2019-1607/): Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1607) (medium 4.2)
- [CVE-2019-16069](https://insights.sbomify.com/CVE-2019-16069/): Cross-site scripting in netsas:enigma network management solution (medium 6.1)
- [CVE-2019-16068](https://insights.sbomify.com/CVE-2019-16068/): Cross-site request forgery in netsas:enigma network management solution (high 8.8)
- [CVE-2019-16067](https://insights.sbomify.com/CVE-2019-16067/): Information disclosure in netsas:enigma network management solution (high 7.5)
- [CVE-2019-16066](https://insights.sbomify.com/CVE-2019-16066/): File upload in netsas:enigma network management solution (high 8.8)
- [CVE-2019-16065](https://insights.sbomify.com/CVE-2019-16065/): SQL injection in netsas:enigma network management solution (high 8.8)
- [CVE-2019-16064](https://insights.sbomify.com/CVE-2019-16064/): Path traversal in netsas:enigma network management solution (critical 9.6)
- [CVE-2019-16063](https://insights.sbomify.com/CVE-2019-16063/): Information disclosure in netsas:enigma network management solution (high 7.5)
- [CVE-2019-16062](https://insights.sbomify.com/CVE-2019-16062/): Information disclosure in netsas:enigma network management solution (medium 6.5)
- [CVE-2019-16061](https://insights.sbomify.com/CVE-2019-16061/): Misconfiguration in netsas:enigma network management solution (high 8.8)
- [CVE-2019-16060](https://insights.sbomify.com/CVE-2019-16060/): Airbrake keys not being filtered (critical 9.8)
- [CVE-2019-1606](https://insights.sbomify.com/CVE-2019-1606/): Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1606) (medium 5.3)
- [CVE-2019-16059](https://insights.sbomify.com/CVE-2019-16059/): Cross-site request forgery in sapplica:sentrifugo (high 8.8)
- [CVE-2019-16058](https://insights.sbomify.com/CVE-2019-16058/): Memory corruption in opensc project:opensc (high 7.5)
- [CVE-2019-16057](https://insights.sbomify.com/CVE-2019-16057/): D-Link DNS-320 Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2019-16056](https://insights.sbomify.com/CVE-2019-16056/): Security feature bypass in canonical:ubuntu linux (medium 5.3)
- [CVE-2019-1605](https://insights.sbomify.com/CVE-2019-1605/): Cisco NX-OS Software NX-API Arbitrary Code Execution Vulnerability (high 7.8)
- [CVE-2019-1604](https://insights.sbomify.com/CVE-2019-1604/): Cisco NX-OS Software Privilege Escalation Vulnerability (high 7.3)
- [CVE-2019-1603](https://insights.sbomify.com/CVE-2019-1603/): Cisco NX-OS Software Privilege Escalation Vulnerability (high 7.8)
- [CVE-2019-16029](https://insights.sbomify.com/CVE-2019-16029/): Cisco Smart Software Manager On-Prem Web Interface Denial of Service Vulnerability (high 8.2)
- [CVE-2019-16028](https://insights.sbomify.com/CVE-2019-16028/): Cisco Firepower Management Center Lightweight Directory Access Protocol Authentication Bypass Vulnerability (critical 9.8)
- [CVE-2019-16027](https://insights.sbomify.com/CVE-2019-16027/): Cisco IOS XR Software Intermediate System–to–Intermediate System Denial of Service Vulnerability (high 7.7)
- [CVE-2019-16026](https://insights.sbomify.com/CVE-2019-16026/): Cisco Mobility Management Entity Denial of Service Vulnerability (medium 6.8)
- [CVE-2019-16025](https://insights.sbomify.com/CVE-2019-16025/): Cisco Emergency Responder Stored Cross-Site Scripting Vulnerability (medium 5.5)
- [CVE-2019-16024](https://insights.sbomify.com/CVE-2019-16024/): Cisco Crosswork Change Automation Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2019-16023](https://insights.sbomify.com/CVE-2019-16023/): Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities (high 8.6)
- [CVE-2019-16022](https://insights.sbomify.com/CVE-2019-16022/): Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities (high 8.6)
- [CVE-2019-16021](https://insights.sbomify.com/CVE-2019-16021/): Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities (high 8.6)
- [CVE-2019-16020](https://insights.sbomify.com/CVE-2019-16020/): Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities (high 8.6)
- [CVE-2019-1602](https://insights.sbomify.com/CVE-2019-1602/): Cisco NX-OS Software Privilege Escalation Vulnerability (high 7.8)
- [CVE-2019-16019](https://insights.sbomify.com/CVE-2019-16019/): Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities (high 8.6)
- [CVE-2019-16018](https://insights.sbomify.com/CVE-2019-16018/): Cisco IOS XR Software EVPN Operational Routes Denial of Service Vulnerability (high 7.4)
- [CVE-2019-16017](https://insights.sbomify.com/CVE-2019-16017/): Cisco Unified Customer Voice Portal Insecure Direct Object Reference Vulnerability (medium 6.8)
- [CVE-2019-16015](https://insights.sbomify.com/CVE-2019-16015/): Cisco Data Center Analytics Framework Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2019-16012](https://insights.sbomify.com/CVE-2019-16012/): Cisco SD-WAN Solution vManage SQL Injection Vulnerability (medium 5.4)
- [CVE-2019-16011](https://insights.sbomify.com/CVE-2019-16011/): Cisco IOS XE SD-WAN Software Command Injection Vulnerability (high 7.8)
- [CVE-2019-16010](https://insights.sbomify.com/CVE-2019-16010/): Cisco SD-WAN Solution vManage Stored Cross-Site Scripting Vulnerability (medium 5.5)
- [CVE-2019-1601](https://insights.sbomify.com/CVE-2019-1601/): Cisco NX-OS Software Unauthorized Filesystem Access Vulnerability (high 7.8)
- [CVE-2019-16009](https://insights.sbomify.com/CVE-2019-16009/): Cisco IOS and Cisco IOS XE Software Web UI Cross-Site Request Forgery Vulnerability (high 8.8)
- [CVE-2019-16008](https://insights.sbomify.com/CVE-2019-16008/): Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Cross-Site Scripting Vulnerability (medium 5.4)
- [CVE-2019-16007](https://insights.sbomify.com/CVE-2019-16007/): Cisco AnyConnect Secure Mobility Client for Android Service Hijack Vulnerability (medium 5.9)
- [CVE-2019-16005](https://insights.sbomify.com/CVE-2019-16005/): Cisco Webex Video Mesh Node Command Injection Vulnerability (high 7.2)
- [CVE-2019-16004](https://insights.sbomify.com/CVE-2019-16004/): Cisco Vision Dynamic Signage Director Authentication Bypass Vulnerability (medium 6.5)
- [CVE-2019-16003](https://insights.sbomify.com/CVE-2019-16003/): Cisco UCS Director Information Disclosure Vulnerability (medium 4.3)
- [CVE-2019-16002](https://insights.sbomify.com/CVE-2019-16002/): Cisco SD-WAN Solution vManage Cross-Site Request Forgery Vulnerability (medium 6.5)
- [CVE-2019-16001](https://insights.sbomify.com/CVE-2019-16001/): Cisco Webex Teams for Windows DLL Hijacking Vulnerability (medium 5.3)
- [CVE-2019-16000](https://insights.sbomify.com/CVE-2019-16000/): Cisco Umbrella Roaming Client for Windows Install Vulnerability (medium 4.4)
- [CVE-2019-1600](https://insights.sbomify.com/CVE-2019-1600/): Cisco FXOS and NX-OS Software Unauthorized Directory Access Vulnerability (medium 6.7)
- [CVE-2019-15999](https://insights.sbomify.com/CVE-2019-15999/): Cisco Data Center Network Manager JBoss EAP Unauthorized Access Vulnerability (medium 5.4)
- [CVE-2019-15998](https://insights.sbomify.com/CVE-2019-15998/): Cisco IOS XR Software NETCONF Over Secure Shell ACL Bypass Vulnerability (medium 5.3)
- [CVE-2019-15997](https://insights.sbomify.com/CVE-2019-15997/): Cisco DNA Spaces: Connector Command Injection Vulnerability (medium 6.7)
- [CVE-2019-15996](https://insights.sbomify.com/CVE-2019-15996/): Cisco DNA Spaces: Connector Privilege Escalation Vulnerability (medium 6.7)
- [CVE-2019-15995](https://insights.sbomify.com/CVE-2019-15995/): Cisco DNA Spaces: Connector SQL Injection Vulnerability (medium 6.5)
- [CVE-2019-15994](https://insights.sbomify.com/CVE-2019-15994/): Cisco Stealthwatch Enterprise Cross-Site Scripting Vulnerability (medium 5.4)
- [CVE-2019-15993](https://insights.sbomify.com/CVE-2019-15993/): Cisco Small Business Switches Information Disclosure Vulnerability (high 7.5)
- [CVE-2019-15992](https://insights.sbomify.com/CVE-2019-15992/): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Remote Code Execution Vulnerability (high 7.2)
- [CVE-2019-15990](https://insights.sbomify.com/CVE-2019-15990/): Cisco Small Business Routers RV016, RV042, RV042G, and RV082 Information Disclosure Vulnerability (medium 5.3)
- [CVE-2019-1599](https://insights.sbomify.com/CVE-2019-1599/): Cisco NX-OS Software Netstack Denial of Service Vulnerability (high 8.6)
- [CVE-2019-15989](https://insights.sbomify.com/CVE-2019-15989/): Cisco IOS XR Software Border Gateway Protocol Attribute Denial of Service Vulnerability (high 8.6)
- [CVE-2019-15988](https://insights.sbomify.com/CVE-2019-15988/): Cisco Email Security Appliance URL Filtering Bypass Vulnerability (medium 5.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/101/