# Vulnerabilities published in 2019


- [CVE-2019-15987](https://insights.sbomify.com/CVE-2019-15987/): Cisco WebEx Centers Username Enumeration Information Disclosure Vulnerability (medium 5.3)
- [CVE-2019-15986](https://insights.sbomify.com/CVE-2019-15986/): Cisco Unity Express Command Injection Vulnerability (medium 6.7)
- [CVE-2019-15985](https://insights.sbomify.com/CVE-2019-15985/): Cisco Data Center Network Manager SQL Injection Vulnerabilities (high 7.2)
- [CVE-2019-15984](https://insights.sbomify.com/CVE-2019-15984/): Cisco Data Center Network Manager SQL Injection Vulnerabilities (high 7.2)
- [CVE-2019-15983](https://insights.sbomify.com/CVE-2019-15983/): Cisco Data Center Network Manager XML External Entity Read Access Vulnerability (medium 4.9)
- [CVE-2019-15982](https://insights.sbomify.com/CVE-2019-15982/): Cisco Data Center Network Manager Path Traversal Vulnerabilities (high 7.2)
- [CVE-2019-15981](https://insights.sbomify.com/CVE-2019-15981/): Cisco Data Center Network Manager Path Traversal Vulnerabilities (high 7.2)
- [CVE-2019-15980](https://insights.sbomify.com/CVE-2019-15980/): Cisco Data Center Network Manager Path Traversal Vulnerabilities (high 7.2)
- [CVE-2019-1598](https://insights.sbomify.com/CVE-2019-1598/): Cisco FXOS and NX-OS Lightweight Directory Access Protocol Denial of Service Vulnerabilities (high 8.6)
- [CVE-2019-15979](https://insights.sbomify.com/CVE-2019-15979/): Cisco Data Center Network Manager Command Injection Vulnerabilities (high 7.2)
- [CVE-2019-15978](https://insights.sbomify.com/CVE-2019-15978/): Cisco Data Center Network Manager Command Injection Vulnerabilities (high 7.2)
- [CVE-2019-15977](https://insights.sbomify.com/CVE-2019-15977/): Cisco Data Center Network Manager Authentication Bypass Vulnerabilities (critical 9.8)
- [CVE-2019-15976](https://insights.sbomify.com/CVE-2019-15976/): Cisco Data Center Network Manager Authentication Bypass Vulnerabilities (critical 9.8)
- [CVE-2019-15975](https://insights.sbomify.com/CVE-2019-15975/): Cisco Data Center Network Manager Authentication Bypass Vulnerabilities (critical 9.8)
- [CVE-2019-15974](https://insights.sbomify.com/CVE-2019-15974/): Cisco Managed Services Accelerator Open Redirect Vulnerability (medium 4.7)
- [CVE-2019-15973](https://insights.sbomify.com/CVE-2019-15973/): Cisco Industrial Network Director Reflected Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2019-15972](https://insights.sbomify.com/CVE-2019-15972/): Cisco Unified Communications Manager SQL Injection Vulnerability (medium 5.4)
- [CVE-2019-15971](https://insights.sbomify.com/CVE-2019-15971/): Cisco Email Security Appliance MP3 Content Filter Bypass Vulnerability (medium 5.8)
- [CVE-2019-1597](https://insights.sbomify.com/CVE-2019-1597/): Cisco FXOS and NX-OS Lightweight Directory Access Protocol Denial of Service Vulnerabilities (high 8.6)
- [CVE-2019-15969](https://insights.sbomify.com/CVE-2019-15969/): Cisco Web Security Appliance Management Interface Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2019-15968](https://insights.sbomify.com/CVE-2019-15968/): Cisco Unified Communications Domain Manager Persistent Cross-Site Scripting Vulnerability (medium 5.4)
- [CVE-2019-15967](https://insights.sbomify.com/CVE-2019-15967/): Cisco TelePresence Collaboration Endpoint and RoomOS Audio Eavesdropping Vulnerability (medium 4.4)
- [CVE-2019-15966](https://insights.sbomify.com/CVE-2019-15966/): Denial of service in Cisco TelePresence Advanced Media Gateway (high 7.7)
- [CVE-2019-15963](https://insights.sbomify.com/CVE-2019-15963/): Cisco Unified Communications Manager Information Disclosure Vulnerability (medium 4.3)
- [CVE-2019-15962](https://insights.sbomify.com/CVE-2019-15962/): Cisco TelePresence Collaboration Endpoint Software Arbitrary File Write Vulnerability (medium 4.4)
- [CVE-2019-15961](https://insights.sbomify.com/CVE-2019-15961/): Clam AntiVirus (ClamAV) Software Email Parsing Vulnerability (high 7.5)
- [CVE-2019-15960](https://insights.sbomify.com/CVE-2019-15960/): Cisco Webex Network Recording Admin Page Privilege Escalation Vulnerability (medium 5.4)
- [CVE-2019-1596](https://insights.sbomify.com/CVE-2019-1596/): Cisco NX-OS Software Bash Shell Privilege Escalation Vulnerability (high 7.8)
- [CVE-2019-15959](https://insights.sbomify.com/CVE-2019-15959/): Cisco Small Business SPA500 Series IP Phones Local Script Execution Vulnerability (medium 6.6)
- [CVE-2019-15958](https://insights.sbomify.com/CVE-2019-15958/): Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerability (high 8.1)
- [CVE-2019-15957](https://insights.sbomify.com/CVE-2019-15957/): Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Command Injection Vulnerability (high 7.2)
- [CVE-2019-15956](https://insights.sbomify.com/CVE-2019-15956/): Cisco Web Security Appliance Unauthorized Device Reset Vulnerability (high 8.8)
- [CVE-2019-15955](https://insights.sbomify.com/CVE-2019-15955/): Weak cryptography in totaljs:total.js cms (medium 6.5)
- [CVE-2019-15954](https://insights.sbomify.com/CVE-2019-15954/): Total.js CMS RCE Vulnerability (critical 9.9)
- [CVE-2019-15953](https://insights.sbomify.com/CVE-2019-15953/): Total.js CMS Unauthorized Access (high 8.8)
- [CVE-2019-15952](https://insights.sbomify.com/CVE-2019-15952/): Total.js CMS Path Traversal (high 8.8)
- [CVE-2019-15950](https://insights.sbomify.com/CVE-2019-15950/): Cross-site scripting in redmineup:crm (medium 6.1)
- [CVE-2019-1595](https://insights.sbomify.com/CVE-2019-1595/): Cisco Nexus 5600 and 6000 Series Switches Fibre Channel over Ethernet Denial of Service Vulnerability (high 7.4)
- [CVE-2019-15949](https://insights.sbomify.com/CVE-2019-15949/): Nagios XI Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2019-15948](https://insights.sbomify.com/CVE-2019-15948/): Memory corruption in ti:cc256xb-bt-sp firmware (high 8.8)
- [CVE-2019-15947](https://insights.sbomify.com/CVE-2019-15947/): Information disclosure in bitcoin:bitcoin core (high 7.5)
- [CVE-2019-15946](https://insights.sbomify.com/CVE-2019-15946/): Memory corruption in debian:debian linux (medium 6.4)
- [CVE-2019-15945](https://insights.sbomify.com/CVE-2019-15945/): Memory corruption in debian:debian linux (medium 6.4)
- [CVE-2019-15944](https://insights.sbomify.com/CVE-2019-15944/): Cross-site scripting in valvesoftware:counter-strike\ (medium 5.3)
- [CVE-2019-15943](https://insights.sbomify.com/CVE-2019-15943/): Memory corruption in valvesoftware:counter-strike\ (high 8.8)
- [CVE-2019-15942](https://insights.sbomify.com/CVE-2019-15942/): Memory corruption in ffmpeg:ffmpeg (high 8.8)
- [CVE-2019-15941](https://insights.sbomify.com/CVE-2019-15941/): Auth bypass in debian:debian linux (critical 9.8)
- [CVE-2019-15940](https://insights.sbomify.com/CVE-2019-15940/): Auth bypass in govicture:pc530 firmware (critical 9.8)
- [CVE-2019-1594](https://insights.sbomify.com/CVE-2019-1594/): Cisco NX-OS Software 802.1X Extensible Authentication Protocol over LAN Denial of Service Vulnerability (high 7.4)
- [CVE-2019-15939](https://insights.sbomify.com/CVE-2019-15939/): Divide By Zero in OpenCV. (medium 5.9)
- [CVE-2019-15938](https://insights.sbomify.com/CVE-2019-15938/): Memory corruption in pengutronix:barebox (critical 9.8)
- [CVE-2019-15937](https://insights.sbomify.com/CVE-2019-15937/): Memory corruption in pengutronix:barebox (critical 9.8)
- [CVE-2019-15936](https://insights.sbomify.com/CVE-2019-15936/): File upload in intesync:solismed (critical 9.8)
- [CVE-2019-15935](https://insights.sbomify.com/CVE-2019-15935/): Intesync Solismed 3.3sp has XSS. (medium 6.1)
- [CVE-2019-15934](https://insights.sbomify.com/CVE-2019-15934/): Intesync Solismed 3.3sp has CSRF. (high 8.8)
- [CVE-2019-15933](https://insights.sbomify.com/CVE-2019-15933/): SQL injection in intesync:solismed (critical 9.8)
- [CVE-2019-15932](https://insights.sbomify.com/CVE-2019-15932/): Missing authorization in intesync:solismed (critical 9.8)
- [CVE-2019-15931](https://insights.sbomify.com/CVE-2019-15931/): Path traversal in intesync:solismed (critical 9.8)
- [CVE-2019-15930](https://insights.sbomify.com/CVE-2019-15930/): Other in intesync:solismed (medium 4.3)
- [CVE-2019-1593](https://insights.sbomify.com/CVE-2019-1593/): Cisco NX-OS Software Bash Shell Role-Based Access Control Bypass Privilege Escalation Vulnerability (high 7.8)
- [CVE-2019-15929](https://insights.sbomify.com/CVE-2019-15929/): Craft CMS possibility of brute force attempts (critical 9.8)
- [CVE-2019-15927](https://insights.sbomify.com/CVE-2019-15927/): Memory corruption in linux:linux kernel (high 7.8)
- [CVE-2019-15926](https://insights.sbomify.com/CVE-2019-15926/): Memory corruption in canonical:ubuntu linux (critical 9.1)
- [CVE-2019-15925](https://insights.sbomify.com/CVE-2019-15925/): Memory corruption in canonical:ubuntu linux (high 7.8)
- [CVE-2019-15924](https://insights.sbomify.com/CVE-2019-15924/): Null dereference in linux:linux kernel (medium 5.5)
- [CVE-2019-15923](https://insights.sbomify.com/CVE-2019-15923/): Null dereference in linux:linux kernel (medium 5.5)
- [CVE-2019-15922](https://insights.sbomify.com/CVE-2019-15922/): Null dereference in linux:linux kernel (medium 5.5)
- [CVE-2019-15921](https://insights.sbomify.com/CVE-2019-15921/): Denial of service in linux:linux kernel (medium 4.7)
- [CVE-2019-15920](https://insights.sbomify.com/CVE-2019-15920/): Use after free in linux:linux kernel (medium 4.3)
- [CVE-2019-1592](https://insights.sbomify.com/CVE-2019-1592/): Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Privilege Escalation Vulnerability (high 7.8)
- [CVE-2019-15919](https://insights.sbomify.com/CVE-2019-15919/): Use after free in linux:linux kernel (low 3.3)
- [CVE-2019-15918](https://insights.sbomify.com/CVE-2019-15918/): Memory corruption in canonical:ubuntu linux (high 7.8)
- [CVE-2019-15917](https://insights.sbomify.com/CVE-2019-15917/): Use after free in debian:debian linux (high 7.0)
- [CVE-2019-15916](https://insights.sbomify.com/CVE-2019-15916/): Denial of service in linux:linux kernel (high 7.5)
- [CVE-2019-15915](https://insights.sbomify.com/CVE-2019-15915/): Denial of service in mi:dgnwg03lm firmware (high 7.5)
- [CVE-2019-15914](https://insights.sbomify.com/CVE-2019-15914/): Denial of service in mi:dgnwg03lm firmware (high 7.5)
- [CVE-2019-15913](https://insights.sbomify.com/CVE-2019-15913/): Weak cryptography in mi:dgnwg03lm firmware (critical 9.8)
- [CVE-2019-15912](https://insights.sbomify.com/CVE-2019-15912/): Denial of service in asus:as-101 firmware (high 7.5)
- [CVE-2019-15911](https://insights.sbomify.com/CVE-2019-15911/): Weak cryptography in asus:as-101 firmware (critical 9.8)
- [CVE-2019-15910](https://insights.sbomify.com/CVE-2019-15910/): Denial of service in asus:as-101 firmware (high 7.5)
- [CVE-2019-1591](https://insights.sbomify.com/CVE-2019-1591/): Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Shell Escape Vulnerability (high 7.8)
- [CVE-2019-15903](https://insights.sbomify.com/CVE-2019-15903/): Memory corruption in libexpat project:libexpat (medium 6.5)
- [CVE-2019-15902](https://insights.sbomify.com/CVE-2019-15902/): Information disclosure in debian:debian linux (medium 5.6)
- [CVE-2019-15901](https://insights.sbomify.com/CVE-2019-15901/): Privilege escalation in doas project:doas (high 8.8)
- [CVE-2019-15900](https://insights.sbomify.com/CVE-2019-15900/): Command injection in doas project:doas (critical 9.8)
- [CVE-2019-1590](https://insights.sbomify.com/CVE-2019-1590/): Security feature bypass in Cisco NX-OS Software for Nexus 9000 Series Fabric Switches ACI Mode (high 8.1)
- [CVE-2019-15898](https://insights.sbomify.com/CVE-2019-15898/): Cross-site scripting in nagios:log server (medium 6.1)
- [CVE-2019-15897](https://insights.sbomify.com/CVE-2019-15897/): Auth bypass in thinkparq:beegfs (critical 9.6)
- [CVE-2019-15896](https://insights.sbomify.com/CVE-2019-15896/): Missing authorization in lifterlms:lifterlms (critical 9.8)
- [CVE-2019-15895](https://insights.sbomify.com/CVE-2019-15895/): Missing authorization in search exclude project:search exclude (high 7.5)
- [CVE-2019-15894](https://insights.sbomify.com/CVE-2019-15894/): Security feature bypass in espressif:esp-idf (medium 6.8)
- [CVE-2019-15893](https://insights.sbomify.com/CVE-2019-15893/): Other in sonatype:nexus repository manager (high 7.2)
- [CVE-2019-15892](https://insights.sbomify.com/CVE-2019-15892/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2019-15891](https://insights.sbomify.com/CVE-2019-15891/): Security feature bypass in cksource:ckfinder (medium 5.3)
- [CVE-2019-15890](https://insights.sbomify.com/CVE-2019-15890/): Use after free in libslirp project:libslirp (high 7.5)
- [CVE-2019-1589](https://insights.sbomify.com/CVE-2019-1589/): Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Unmeasured Boot Vulnerability (medium 4.2)
- [CVE-2019-15889](https://insights.sbomify.com/CVE-2019-15889/): Cross-site scripting in w3eden:download manager (medium 6.1)
- [CVE-2019-15880](https://insights.sbomify.com/CVE-2019-15880/): Memory corruption in FreeBSD (critical 9.8)
- [CVE-2019-1588](https://insights.sbomify.com/CVE-2019-1588/): Cisco Nexus 9000 Series Fabric Switches Application-Centric Infrastructure Mode Arbitrary File Read Vulnerability (medium 4.4)
- [CVE-2019-15879](https://insights.sbomify.com/CVE-2019-15879/): Use after free in FreeBSD (high 7.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/102/