# Vulnerabilities published in 2019


- [CVE-2019-12768](https://insights.sbomify.com/CVE-2019-12768/): Auth bypass in dlink:dap-1650 firmware (critical 9.8)
- [CVE-2019-12767](https://insights.sbomify.com/CVE-2019-12767/): Command injection in dlink:dap-1650 firmware (critical 9.8)
- [CVE-2019-12766](https://insights.sbomify.com/CVE-2019-12766/): Cross-site scripting in joomla:joomla\! (medium 6.1)
- [CVE-2019-12765](https://insights.sbomify.com/CVE-2019-12765/): Code injection in joomla:joomla\! (critical 9.8)
- [CVE-2019-12764](https://insights.sbomify.com/CVE-2019-12764/): Missing authorization in joomla:joomla\! (medium 6.5)
- [CVE-2019-12763](https://insights.sbomify.com/CVE-2019-12763/): Information disclosure in securitycamera:security camera cz (high 7.5)
- [CVE-2019-12762](https://insights.sbomify.com/CVE-2019-12762/): Other in fujitsu:arrows nx f05-f firmware (medium 4.2)
- [CVE-2019-12761](https://insights.sbomify.com/CVE-2019-12761/): Code Injection in PyXDG (high 7.5)
- [CVE-2019-12760](https://insights.sbomify.com/CVE-2019-12760/): Deserialization vulnerability exists in parso (low 3.3)
- [CVE-2019-12759](https://insights.sbomify.com/CVE-2019-12759/): Privilege escalation in Symantec Endpoint Protection Manager (SEPM), Symantec Mail Security for MS Exchange (SMSMSE) (high 7.8)
- [CVE-2019-12758](https://insights.sbomify.com/CVE-2019-12758/): Security feature bypass in Symantec Endpoint Protection (medium 6.7)
- [CVE-2019-12757](https://insights.sbomify.com/CVE-2019-12757/): Privilege escalation in Symantec Endpoint Protection (SEP), Symantec Endpoint Protection Small Business Edition (SEP SBE) (high 7.8)
- [CVE-2019-12756](https://insights.sbomify.com/CVE-2019-12756/): Security feature bypass in Symantec Endpoint Protection (SEP) (low 2.3)
- [CVE-2019-12755](https://insights.sbomify.com/CVE-2019-12755/): Information disclosure in Norton Password Manager (medium 5.5)
- [CVE-2019-12754](https://insights.sbomify.com/CVE-2019-12754/): Cross-site scripting in My VIP Portal (medium 4.8)
- [CVE-2019-12753](https://insights.sbomify.com/CVE-2019-12753/): Information disclosure in Symantec Reporter (medium 4.9)
- [CVE-2019-12752](https://insights.sbomify.com/CVE-2019-12752/): Security feature bypass in SONAR Component (medium 6.1)
- [CVE-2019-12751](https://insights.sbomify.com/CVE-2019-12751/): Privilege escalation in Symantec Messaging Gateway (critical 9.8)
- [CVE-2019-12750](https://insights.sbomify.com/CVE-2019-12750/): Privilege escalation in Symantec Endpoint Protection, Symantec Endpoint Protection Small Business Edition (high 7.8)
- [CVE-2019-12749](https://insights.sbomify.com/CVE-2019-12749/): Auth bypass in canonical:ubuntu linux (high 7.1)
- [CVE-2019-12748](https://insights.sbomify.com/CVE-2019-12748/): Typo3 Cross-Site Scripting in Link Handling (medium 6.1)
- [CVE-2019-12747](https://insights.sbomify.com/CVE-2019-12747/): TYPO3 Vulnerable to Insecure Deserialization (high 8.8)
- [CVE-2019-12746](https://insights.sbomify.com/CVE-2019-12746/): Information disclosure in debian:debian linux (medium 6.5)
- [CVE-2019-12745](https://insights.sbomify.com/CVE-2019-12745/): Cross-site scripting in seeddms:seeddms (medium 5.4)
- [CVE-2019-12744](https://insights.sbomify.com/CVE-2019-12744/): File upload in seeddms:seeddms (high 7.5)
- [CVE-2019-12743](https://insights.sbomify.com/CVE-2019-12743/): Information disclosure in humhub:social network kit (medium 5.3)
- [CVE-2019-12742](https://insights.sbomify.com/CVE-2019-12742/): Missing authorization in bludit:bludit (high 8.8)
- [CVE-2019-12741](https://insights.sbomify.com/CVE-2019-12741/): Cross-site Scripting in HAPI FHIR (medium 6.1)
- [CVE-2019-1274](https://insights.sbomify.com/CVE-2019-1274/): Information disclosure in Windows (medium 5.5)
- [CVE-2019-12739](https://insights.sbomify.com/CVE-2019-12739/): Command injection in nextcloud:extract (critical 9.0)
- [CVE-2019-12737](https://insights.sbomify.com/CVE-2019-12737/): Weak cryptography in jetbrains:ktor (medium 5.3)
- [CVE-2019-12736](https://insights.sbomify.com/CVE-2019-12736/): Command injection in jetbrains:ktor (critical 9.8)
- [CVE-2019-12735](https://insights.sbomify.com/CVE-2019-12735/): Command injection in neovim:neovim (high 8.6)
- [CVE-2019-12734](https://insights.sbomify.com/CVE-2019-12734/): Missing authorization in sitevision:sitevision (high 8.8)
- [CVE-2019-12733](https://insights.sbomify.com/CVE-2019-12733/): Other in sitevision:sitevision (high 8.8)
- [CVE-2019-12732](https://insights.sbomify.com/CVE-2019-12732/): Cross-site Scripting in Chartkick (medium 4.7)
- [CVE-2019-12731](https://insights.sbomify.com/CVE-2019-12731/): Privilege escalation in mikogo:mikogo (high 7.8)
- [CVE-2019-12730](https://insights.sbomify.com/CVE-2019-12730/): Memory corruption in ffmpeg:ffmpeg (critical 9.8)
- [CVE-2019-1273](https://insights.sbomify.com/CVE-2019-1273/): Cross-site scripting in Windows (medium 5.4)
- [CVE-2019-12728](https://insights.sbomify.com/CVE-2019-12728/): Incorrect Resource Transfer Between Spheres in Grails (high 8.1)
- [CVE-2019-12727](https://insights.sbomify.com/CVE-2019-12727/): Memory corruption in ui:aircam firmware (high 7.5)
- [CVE-2019-12725](https://insights.sbomify.com/CVE-2019-12725/): Command injection in zeroshell:zeroshell (critical 9.8)
- [CVE-2019-12724](https://insights.sbomify.com/CVE-2019-12724/): Cross-site scripting in teclib-edition:news (medium 6.1)
- [CVE-2019-12723](https://insights.sbomify.com/CVE-2019-12723/): SQL injection in teclib-edition:fields (critical 9.8)
- [CVE-2019-12720](https://insights.sbomify.com/CVE-2019-12720/): SQL injection in auo:sunveillance monitoring system \& data recorder (high 7.5)
- [CVE-2019-1272](https://insights.sbomify.com/CVE-2019-1272/): Privilege escalation in Windows (high 7.8)
- [CVE-2019-12719](https://insights.sbomify.com/CVE-2019-12719/): File upload in auo:sunveillance monitoring system \& data recorder (critical 9.8)
- [CVE-2019-12718](https://insights.sbomify.com/CVE-2019-12718/): Cisco Small Business Smart and Managed Switches Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2019-12717](https://insights.sbomify.com/CVE-2019-12717/): Cisco NX-OS Software Virtualization Manager Command Injection Vulnerability (medium 6.7)
- [CVE-2019-12716](https://insights.sbomify.com/CVE-2019-12716/): Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2019-12715](https://insights.sbomify.com/CVE-2019-12715/): Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2019-12714](https://insights.sbomify.com/CVE-2019-12714/): Cisco IC3000 Industrial Compute Gateway Denial of Service Vulnerability (medium 6.5)
- [CVE-2019-12713](https://insights.sbomify.com/CVE-2019-12713/): Cisco Prime Infrastructure Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2019-12712](https://insights.sbomify.com/CVE-2019-12712/): Cisco Prime Infrastructure Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2019-12711](https://insights.sbomify.com/CVE-2019-12711/): Cisco Unified Communications Manager XML External Expansion Vulnerability (medium 6.1)
- [CVE-2019-12710](https://insights.sbomify.com/CVE-2019-12710/): Cisco Unified Communications Manager SQL Injection Vulnerability (medium 4.9)
- [CVE-2019-1271](https://insights.sbomify.com/CVE-2019-1271/): Memory corruption in Windows (high 7.8)
- [CVE-2019-12709](https://insights.sbomify.com/CVE-2019-12709/): Cisco IOS XR Software for Cisco ASR 9000 VMAN CLI Privilege Escalation Vulnerability (medium 6.7)
- [CVE-2019-12708](https://insights.sbomify.com/CVE-2019-12708/): Cisco SPA100 Series Analog Telephone Adapters Administrative Credentials Information Disclosure Vulnerability (medium 6.5)
- [CVE-2019-12707](https://insights.sbomify.com/CVE-2019-12707/): Multiple Cisco Unified Communications Products Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2019-12706](https://insights.sbomify.com/CVE-2019-12706/): Cisco Email Security Appliance Filter Bypass Vulnerability (medium 6.5)
- [CVE-2019-12705](https://insights.sbomify.com/CVE-2019-12705/): Cisco Expressway Series and TelePresence Video Communication Server Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2019-12704](https://insights.sbomify.com/CVE-2019-12704/): Cisco SPA100 Series Analog Telephone Adapters Web-Based Management Interface File Disclosure Vulnerability (medium 6.5)
- [CVE-2019-12703](https://insights.sbomify.com/CVE-2019-12703/): Cisco SPA122 ATA with Router Devices DHCP Services Cross-Site Scripting Vulnerability (medium 5.2)
- [CVE-2019-12702](https://insights.sbomify.com/CVE-2019-12702/): Cisco SPA100 Series Analog Telephone Adapters Reflected Cross-Site Scripting Vulnerability (medium 5.4)
- [CVE-2019-12701](https://insights.sbomify.com/CVE-2019-12701/): Cisco Firepower Management Center Software File and Malware Policy Bypass Vulnerability (medium 5.8)
- [CVE-2019-12700](https://insights.sbomify.com/CVE-2019-12700/): Cisco FTD, FMC, and FXOS Software Pluggable Authentication Module Denial of Service Vulnerability (high 7.7)
- [CVE-2019-1270](https://insights.sbomify.com/CVE-2019-1270/): Privilege escalation in Windows (medium 5.5)
- [CVE-2019-12699](https://insights.sbomify.com/CVE-2019-12699/): Cisco FXOS Software and Firepower Threat Defense Software Command Injection Vulnerabilities (high 8.8)
- [CVE-2019-12698](https://insights.sbomify.com/CVE-2019-12698/): Denial of service in Cisco Adaptive Security Appliance (ASA) Software (medium 5.3)
- [CVE-2019-12697](https://insights.sbomify.com/CVE-2019-12697/): Cisco Firepower System Software Detection Engine RTF and RAR Malware and File Policy Bypass Vulnerabilities (medium 5.8)
- [CVE-2019-12696](https://insights.sbomify.com/CVE-2019-12696/): Cisco Firepower System Software Detection Engine RTF and RAR Malware and File Policy Bypass Vulnerabilities (medium 5.8)
- [CVE-2019-12695](https://insights.sbomify.com/CVE-2019-12695/): Cisco Adaptive Security Appliance and Firepower Threat Defense Software WebVPN Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2019-12694](https://insights.sbomify.com/CVE-2019-12694/): Cisco Firepower Threat Defense Software Command Injection Vulnerability (medium 6.7)
- [CVE-2019-12693](https://insights.sbomify.com/CVE-2019-12693/): Cisco Adaptive Security Appliance Software Secure Copy Denial of Service Vulnerability (medium 6.8)
- [CVE-2019-12691](https://insights.sbomify.com/CVE-2019-12691/): Cisco Firepower Management Center Directory Traversal Vulnerability (medium 4.1)
- [CVE-2019-12690](https://insights.sbomify.com/CVE-2019-12690/): Cisco Firepower Management Center Command Injection Vulnerability (high 7.2)
- [CVE-2019-1269](https://insights.sbomify.com/CVE-2019-1269/): Privilege escalation in Windows (high 7.8)
- [CVE-2019-12689](https://insights.sbomify.com/CVE-2019-12689/): Cisco Firepower Management Center Remote Code Execution Vulnerability (high 7.5)
- [CVE-2019-12688](https://insights.sbomify.com/CVE-2019-12688/): Cisco Firepower Management Center Remote Code Execution Vulnerability (high 8.8)
- [CVE-2019-12687](https://insights.sbomify.com/CVE-2019-12687/): Cisco Firepower Management Center Remote Code Execution Vulnerability (high 8.8)
- [CVE-2019-12686](https://insights.sbomify.com/CVE-2019-12686/): Cisco Firepower Management Center SQL Injection Vulnerabilities (high 8.8)
- [CVE-2019-12685](https://insights.sbomify.com/CVE-2019-12685/): Cisco Firepower Management Center SQL Injection Vulnerabilities (high 8.8)
- [CVE-2019-12684](https://insights.sbomify.com/CVE-2019-12684/): Cisco Firepower Management Center SQL Injection Vulnerabilities (high 8.8)
- [CVE-2019-12683](https://insights.sbomify.com/CVE-2019-12683/): Cisco Firepower Management Center SQL Injection Vulnerabilities (high 8.8)
- [CVE-2019-12682](https://insights.sbomify.com/CVE-2019-12682/): Cisco Firepower Management Center SQL Injection Vulnerabilities (high 8.8)
- [CVE-2019-12681](https://insights.sbomify.com/CVE-2019-12681/): Cisco Firepower Management Center SQL Injection Vulnerabilities (high 8.8)
- [CVE-2019-12680](https://insights.sbomify.com/CVE-2019-12680/): Cisco Firepower Management Center SQL Injection Vulnerabilities (high 8.8)
- [CVE-2019-1268](https://insights.sbomify.com/CVE-2019-1268/): Privilege escalation in Windows (high 7.8)
- [CVE-2019-12679](https://insights.sbomify.com/CVE-2019-12679/): Cisco Firepower Management Center SQL Injection Vulnerabilities (high 8.8)
- [CVE-2019-12678](https://insights.sbomify.com/CVE-2019-12678/): Integer overflow in Cisco Adaptive Security Appliance (ASA) Software (high 8.6)
- [CVE-2019-12677](https://insights.sbomify.com/CVE-2019-12677/): Cisco Adaptive Security Appliance Software SSL VPN Denial of Service Vulnerability (high 7.7)
- [CVE-2019-12676](https://insights.sbomify.com/CVE-2019-12676/): Denial of service in Cisco Adaptive Security Appliance (ASA) Software (high 7.4)
- [CVE-2019-12675](https://insights.sbomify.com/CVE-2019-12675/): Cisco Firepower Threat Defense Software Multi-instance Container Escape Vulnerabilities (high 8.2)
- [CVE-2019-12674](https://insights.sbomify.com/CVE-2019-12674/): Cisco Firepower Threat Defense Software Multi-instance Container Escape Vulnerabilities (high 8.2)
- [CVE-2019-12673](https://insights.sbomify.com/CVE-2019-12673/): Denial of service in Cisco Adaptive Security Appliance (ASA) Software (high 8.6)
- [CVE-2019-12672](https://insights.sbomify.com/CVE-2019-12672/): Cisco IOS XE Software Arbitrary Code Execution Vulnerability (medium 6.2)
- [CVE-2019-12671](https://insights.sbomify.com/CVE-2019-12671/): Cisco IOS XE Software Consent Token Bypass Vulnerability (medium 6.7)
- [CVE-2019-12670](https://insights.sbomify.com/CVE-2019-12670/): Cisco IOS XE Software IOx Guest Shell Namespace Protection Vulnerability (medium 6.7)
- [CVE-2019-1267](https://insights.sbomify.com/CVE-2019-1267/): Privilege escalation in Windows (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/129/