# Vulnerabilities published in 2019


- [CVE-2019-15253](https://insights.sbomify.com/CVE-2019-15253/): Cisco Digital Network Architecture Center Stored Cross-Site Scripting Vulnerability (medium 5.4)
- [CVE-2019-15252](https://insights.sbomify.com/CVE-2019-15252/): Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities (high 8.0)
- [CVE-2019-15251](https://insights.sbomify.com/CVE-2019-15251/): Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities (high 8.0)
- [CVE-2019-15250](https://insights.sbomify.com/CVE-2019-15250/): Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities (high 8.0)
- [CVE-2019-15249](https://insights.sbomify.com/CVE-2019-15249/): Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities (high 8.0)
- [CVE-2019-15248](https://insights.sbomify.com/CVE-2019-15248/): Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities (high 8.0)
- [CVE-2019-15247](https://insights.sbomify.com/CVE-2019-15247/): Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities (high 8.0)
- [CVE-2019-15246](https://insights.sbomify.com/CVE-2019-15246/): Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities (high 8.0)
- [CVE-2019-15245](https://insights.sbomify.com/CVE-2019-15245/): Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities (high 8.0)
- [CVE-2019-15244](https://insights.sbomify.com/CVE-2019-15244/): Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities (high 8.0)
- [CVE-2019-15243](https://insights.sbomify.com/CVE-2019-15243/): Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities (high 8.0)
- [CVE-2019-15242](https://insights.sbomify.com/CVE-2019-15242/): Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities (high 8.0)
- [CVE-2019-15241](https://insights.sbomify.com/CVE-2019-15241/): Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities (high 8.0)
- [CVE-2019-15240](https://insights.sbomify.com/CVE-2019-15240/): Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities (high 8.0)
- [CVE-2019-15239](https://insights.sbomify.com/CVE-2019-15239/): Use after free in debian:debian linux (high 7.8)
- [CVE-2019-15238](https://insights.sbomify.com/CVE-2019-15238/): Cross-site request forgery in cformsii project:cformsii (high 8.8)
- [CVE-2019-15237](https://insights.sbomify.com/CVE-2019-15237/): Security feature bypass in fedoraproject:fedora (high 7.4)
- [CVE-2019-15235](https://insights.sbomify.com/CVE-2019-15235/): Information disclosure in control-webpanel:webpanel (medium 6.5)
- [CVE-2019-15234](https://insights.sbomify.com/CVE-2019-15234/): Denial of service in ushareit:shareit (high 7.5)
- [CVE-2019-15233](https://insights.sbomify.com/CVE-2019-15233/): Cross-site scripting in oldstreetsolutions:live input macros (medium 6.1)
- [CVE-2019-15232](https://insights.sbomify.com/CVE-2019-15232/): Use after free in live555:streaming media (critical 9.8)
- [CVE-2019-15230](https://insights.sbomify.com/CVE-2019-15230/): Cross-site scripting in librenms:librenms (medium 5.4)
- [CVE-2019-15229](https://insights.sbomify.com/CVE-2019-15229/): Cross-site request forgery in thedaylightstudio:fuel cms (high 8.8)
- [CVE-2019-15228](https://insights.sbomify.com/CVE-2019-15228/): Cross-site scripting in thedaylightstudio:fuel cms (medium 5.4)
- [CVE-2019-15227](https://insights.sbomify.com/CVE-2019-15227/): Cross-site scripting in getflightpath:flightpath (medium 6.1)
- [CVE-2019-15226](https://insights.sbomify.com/CVE-2019-15226/): Denial of service in envoyproxy:envoy (high 7.5)
- [CVE-2019-15225](https://insights.sbomify.com/CVE-2019-15225/): Denial of service in envoyproxy:envoy (high 7.5)
- [CVE-2019-15224](https://insights.sbomify.com/CVE-2019-15224/): rest-client Gem Contains Malicious Code (critical 9.8)
- [CVE-2019-15223](https://insights.sbomify.com/CVE-2019-15223/): Null dereference in canonical:ubuntu linux (medium 4.6)
- [CVE-2019-15222](https://insights.sbomify.com/CVE-2019-15222/): Null dereference in linux:linux kernel (medium 4.6)
- [CVE-2019-15221](https://insights.sbomify.com/CVE-2019-15221/): Null dereference in canonical:ubuntu linux (medium 4.6)
- [CVE-2019-15220](https://insights.sbomify.com/CVE-2019-15220/): Use after free in canonical:ubuntu linux (medium 4.6)
- [CVE-2019-15219](https://insights.sbomify.com/CVE-2019-15219/): Null dereference in canonical:ubuntu linux (medium 4.6)
- [CVE-2019-15218](https://insights.sbomify.com/CVE-2019-15218/): Null dereference in canonical:ubuntu linux (medium 4.6)
- [CVE-2019-15217](https://insights.sbomify.com/CVE-2019-15217/): Null dereference in canonical:ubuntu linux (medium 4.6)
- [CVE-2019-15216](https://insights.sbomify.com/CVE-2019-15216/): Null dereference in canonical:ubuntu linux (medium 4.6)
- [CVE-2019-15215](https://insights.sbomify.com/CVE-2019-15215/): Use after free in canonical:ubuntu linux (medium 4.6)
- [CVE-2019-15214](https://insights.sbomify.com/CVE-2019-15214/): Use after free in canonical:ubuntu linux (medium 6.4)
- [CVE-2019-15213](https://insights.sbomify.com/CVE-2019-15213/): Use after free in linux:linux kernel (medium 4.6)
- [CVE-2019-15212](https://insights.sbomify.com/CVE-2019-15212/): Memory corruption in canonical:ubuntu linux (medium 4.6)
- [CVE-2019-15211](https://insights.sbomify.com/CVE-2019-15211/): Use after free in canonical:ubuntu linux (medium 4.6)
- [CVE-2019-15167](https://insights.sbomify.com/CVE-2019-15167/): Memory corruption in tcpdump:tcpdump (critical 9.1)
- [CVE-2019-15166](https://insights.sbomify.com/CVE-2019-15166/): lmp_print in tcpdump lacks certain boundary checks (low 1.6)
- [CVE-2019-15165](https://insights.sbomify.com/CVE-2019-15165/): Denial of service in apple:ipados (medium 5.3)
- [CVE-2019-15164](https://insights.sbomify.com/CVE-2019-15164/): Server-side request forgery in tcpdump:libpcap (medium 5.3)
- [CVE-2019-15163](https://insights.sbomify.com/CVE-2019-15163/): Null dereference in tcpdump:libpcap (high 7.5)
- [CVE-2019-15162](https://insights.sbomify.com/CVE-2019-15162/): Information disclosure in tcpdump:libpcap (medium 5.3)
- [CVE-2019-15161](https://insights.sbomify.com/CVE-2019-15161/): Memory corruption in tcpdump:libpcap (medium 5.3)
- [CVE-2019-15160](https://insights.sbomify.com/CVE-2019-15160/): Inline DTD allows XML bomb attack (high 7.5)
- [CVE-2019-15151](https://insights.sbomify.com/CVE-2019-15151/): Double Free in Adplug (critical 9.8)
- [CVE-2019-15150](https://insights.sbomify.com/CVE-2019-15150/): Cross-site request forgery in schine.games:mw-oauth2client (high 8.8)
- [CVE-2019-15149](https://insights.sbomify.com/CVE-2019-15149/): Undirectional routing wasn't respected in some cases in Mitogen (critical 9.8)
- [CVE-2019-15148](https://insights.sbomify.com/CVE-2019-15148/): Memory corruption in gopro:gpmf-parser (medium 6.5)
- [CVE-2019-15147](https://insights.sbomify.com/CVE-2019-15147/): Memory corruption in gopro:gpmf-parser (medium 6.5)
- [CVE-2019-15146](https://insights.sbomify.com/CVE-2019-15146/): Memory corruption in gopro:gpmf-parser (medium 6.5)
- [CVE-2019-15145](https://insights.sbomify.com/CVE-2019-15145/): Memory corruption in canonical:ubuntu linux (medium 5.5)
- [CVE-2019-15144](https://insights.sbomify.com/CVE-2019-15144/): Denial of service in canonical:ubuntu linux (medium 5.5)
- [CVE-2019-15143](https://insights.sbomify.com/CVE-2019-15143/): Denial of service in canonical:ubuntu linux (medium 5.5)
- [CVE-2019-15142](https://insights.sbomify.com/CVE-2019-15142/): Memory corruption in canonical:ubuntu linux (medium 5.5)
- [CVE-2019-15141](https://insights.sbomify.com/CVE-2019-15141/): Memory corruption in imagemagick:imagemagick (medium 6.5)
- [CVE-2019-15140](https://insights.sbomify.com/CVE-2019-15140/): Use after free in imagemagick:imagemagick (high 8.8)
- [CVE-2019-15139](https://insights.sbomify.com/CVE-2019-15139/): Memory corruption in imagemagick:imagemagick (medium 6.5)
- [CVE-2019-15138](https://insights.sbomify.com/CVE-2019-15138/): Arbitrary File Read in html-pdf (high 7.5)
- [CVE-2019-15137](https://insights.sbomify.com/CVE-2019-15137/): Security feature bypass in eprosima:fast-rtps (high 7.5)
- [CVE-2019-15136](https://insights.sbomify.com/CVE-2019-15136/): Missing authorization in eprosima:fast-rtps (high 7.5)
- [CVE-2019-15135](https://insights.sbomify.com/CVE-2019-15135/): Information disclosure in omg:dds security (high 7.5)
- [CVE-2019-15134](https://insights.sbomify.com/CVE-2019-15134/): Denial of service in riot-os:riot (high 7.5)
- [CVE-2019-15133](https://insights.sbomify.com/CVE-2019-15133/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2019-15132](https://insights.sbomify.com/CVE-2019-15132/): Information disclosure in debian:debian linux (medium 5.3)
- [CVE-2019-15131](https://insights.sbomify.com/CVE-2019-15131/): File upload in code42:code42 (critical 9.8)
- [CVE-2019-15130](https://insights.sbomify.com/CVE-2019-15130/): File upload in humanica:humatrix 7 (critical 9.8)
- [CVE-2019-15129](https://insights.sbomify.com/CVE-2019-15129/): Missing authorization in humanica:humatrix 7 (medium 5.3)
- [CVE-2019-15128](https://insights.sbomify.com/CVE-2019-15128/): Cross-site request forgery in if.svnadmin project:if.svnadmin (medium 6.5)
- [CVE-2019-15127](https://insights.sbomify.com/CVE-2019-15127/): Cross-site scripting in vanderbilt:redcap (medium 5.4)
- [CVE-2019-15126](https://insights.sbomify.com/CVE-2019-15126/): Weak cryptography in apple:ipados (low 3.1)
- [CVE-2019-15124](https://insights.sbomify.com/CVE-2019-15124/): Cross-site scripting in mediawiki:mobilefrontend (medium 6.1)
- [CVE-2019-15123](https://insights.sbomify.com/CVE-2019-15123/): File upload in vikisolutions:vera (high 7.2)
- [CVE-2019-15120](https://insights.sbomify.com/CVE-2019-15120/): Cross-site scripting in kunena:kunena (medium 5.4)
- [CVE-2019-15119](https://insights.sbomify.com/CVE-2019-15119/): cnlh nps vulnerable to file overwrite by local user (medium 5.5)
- [CVE-2019-15118](https://insights.sbomify.com/CVE-2019-15118/): Denial of service in canonical:ubuntu linux (medium 5.5)
- [CVE-2019-15117](https://insights.sbomify.com/CVE-2019-15117/): Memory corruption in linux:linux kernel (high 7.8)
- [CVE-2019-15116](https://insights.sbomify.com/CVE-2019-15116/): Cross-site scripting in awesomemotive:easy digital downloads (medium 6.1)
- [CVE-2019-15115](https://insights.sbomify.com/CVE-2019-15115/): Cross-site request forgery in profilepress:loginwp (high 8.8)
- [CVE-2019-15114](https://insights.sbomify.com/CVE-2019-15114/): Cross-site request forgery in ncrafts:formcraft (high 8.8)
- [CVE-2019-15113](https://insights.sbomify.com/CVE-2019-15113/): Cross-site request forgery in codeermeneer:companion sitemap generator (high 8.8)
- [CVE-2019-15112](https://insights.sbomify.com/CVE-2019-15112/): Cross-site scripting in wp-slimstat:slimstat analytics (medium 6.1)
- [CVE-2019-15111](https://insights.sbomify.com/CVE-2019-15111/): Privilege escalation in wp front end profile project:wp front end profile (critical 9.8)
- [CVE-2019-15110](https://insights.sbomify.com/CVE-2019-15110/): Cross-site scripting in wp front end profile project:wp front end profile (medium 6.1)
- [CVE-2019-15109](https://insights.sbomify.com/CVE-2019-15109/): Cross-site scripting in stellarwp:the events calendar (medium 6.1)
- [CVE-2019-15108](https://insights.sbomify.com/CVE-2019-15108/): Cross-site scripting in wso2:api manager (low 3.5)
- [CVE-2019-15107](https://insights.sbomify.com/CVE-2019-15107/): Webmin Command Injection (critical 9.8, exploited in the wild)
- [CVE-2019-15106](https://insights.sbomify.com/CVE-2019-15106/): Auth bypass in zohocorp:manageengine opmanager (critical 9.8)
- [CVE-2019-15105](https://insights.sbomify.com/CVE-2019-15105/): SQL injection in zohocorp:manageengine applications manager (high 8.8)
- [CVE-2019-15104](https://insights.sbomify.com/CVE-2019-15104/): SQL injection in zohocorp:manageengine applications manager (high 8.8)
- [CVE-2019-15102](https://insights.sbomify.com/CVE-2019-15102/): Missing authorization in sahipro:sahi pro (critical 9.8)
- [CVE-2019-15099](https://insights.sbomify.com/CVE-2019-15099/): Null dereference in canonical:ubuntu linux (high 7.5)
- [CVE-2019-15098](https://insights.sbomify.com/CVE-2019-15098/): Null dereference in canonical:ubuntu linux (medium 4.6)
- [CVE-2019-15095](https://insights.sbomify.com/CVE-2019-15095/): Cross-site scripting in diaowen:dwsurvey (medium 6.1)
- [CVE-2019-15092](https://insights.sbomify.com/CVE-2019-15092/): Code injection in webtoffee:import export wordpress users (high 7.3)
- [CVE-2019-15091](https://insights.sbomify.com/CVE-2019-15091/): File upload in artica:integria ims (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/109/