# Vulnerabilities published in 2019


- [CVE-2019-12669](https://insights.sbomify.com/CVE-2019-12669/): Cisco IOS and IOS XE Software Change of Authorization Denial of Service Vulnerability (medium 6.8)
- [CVE-2019-12668](https://insights.sbomify.com/CVE-2019-12668/): Cisco IOS and IOS XE Software Stored Banner Cross-Site Scripting Vulnerability (medium 4.8)
- [CVE-2019-12667](https://insights.sbomify.com/CVE-2019-12667/): Cisco IOS XE Software Stored Cross-Site Scripting Vulnerability (medium 5.5)
- [CVE-2019-12666](https://insights.sbomify.com/CVE-2019-12666/): Cisco IOS XE Software Path Traversal Vulnerability (medium 6.7)
- [CVE-2019-12665](https://insights.sbomify.com/CVE-2019-12665/): Cisco IOS and IOS XE Software HTTP Client Information Disclosure Vulnerability (medium 4.8)
- [CVE-2019-12664](https://insights.sbomify.com/CVE-2019-12664/): Cisco IOS XE Software ISDN Data Leak Vulnerability (medium 4.7)
- [CVE-2019-12663](https://insights.sbomify.com/CVE-2019-12663/): Cisco IOS XE Software TrustSec Protected Access Credential Provisioning Denial of Service Vulnerability (medium 6.8)
- [CVE-2019-12662](https://insights.sbomify.com/CVE-2019-12662/): Cisco NX-OS and IOS XE Software Virtual Service Image Signature Bypass Vulnerability (medium 6.7)
- [CVE-2019-12661](https://insights.sbomify.com/CVE-2019-12661/): Cisco IOS XE Software Virtualization Manager CLI Command Injection Vulnerability (medium 6.7)
- [CVE-2019-12660](https://insights.sbomify.com/CVE-2019-12660/): Cisco IOS XE Software ASIC Register Write Vulnerability (medium 5.5)
- [CVE-2019-1266](https://insights.sbomify.com/CVE-2019-1266/): Cross-site scripting in Microsoft Exchange Server 2016 (medium 6.1)
- [CVE-2019-12659](https://insights.sbomify.com/CVE-2019-12659/): Cisco IOS XE Software HTTP Server Denial of Service Vulnerability (medium 5.3)
- [CVE-2019-12658](https://insights.sbomify.com/CVE-2019-12658/): Cisco IOS XE Software Filesystem Exhaustion Denial of Service Vulnerability (high 8.6)
- [CVE-2019-12657](https://insights.sbomify.com/CVE-2019-12657/): Cisco IOS XE Software Unified Threat Defense Denial of Service Vulnerability (high 8.6)
- [CVE-2019-12656](https://insights.sbomify.com/CVE-2019-12656/): Cisco IOx Application Environment Denial of Service Vulnerability (high 7.5)
- [CVE-2019-12655](https://insights.sbomify.com/CVE-2019-12655/): Cisco IOS XE Software FTP Application Layer Gateway for NAT, NAT64, and ZBFW Denial of Service Vulnerability (high 8.6)
- [CVE-2019-12654](https://insights.sbomify.com/CVE-2019-12654/): Cisco IOS and IOS XE Software Session Initiation Protocol Denial of Service Vulnerability (high 8.6)
- [CVE-2019-12653](https://insights.sbomify.com/CVE-2019-12653/): Cisco IOS XE Software Raw Socket Transport Denial of Service Vulnerability (high 8.6)
- [CVE-2019-12652](https://insights.sbomify.com/CVE-2019-12652/): Cisco Catalyst 4000 Series Switches TCP Denial of Service Vulnerability (high 8.6)
- [CVE-2019-12651](https://insights.sbomify.com/CVE-2019-12651/): Cisco IOS XE Software Web UI Command Injection Vulnerabilities (high 7.6)
- [CVE-2019-12650](https://insights.sbomify.com/CVE-2019-12650/): Cisco IOS XE Software Web UI Command Injection Vulnerabilities (high 7.6)
- [CVE-2019-1265](https://insights.sbomify.com/CVE-2019-1265/): Security feature bypass in Yammer for Android (high 7.5)
- [CVE-2019-12649](https://insights.sbomify.com/CVE-2019-12649/): Cisco IOS XE Software Digital Signature Verification Bypass Vulnerability (medium 6.7)
- [CVE-2019-12648](https://insights.sbomify.com/CVE-2019-12648/): Cisco IOx for IOS Software Guest Operating System Unauthorized Access Vulnerability (critical 9.9)
- [CVE-2019-12647](https://insights.sbomify.com/CVE-2019-12647/): Cisco IOS and IOS XE Software IP Ident Denial of Service Vulnerability (high 8.6)
- [CVE-2019-12646](https://insights.sbomify.com/CVE-2019-12646/): Cisco IOS XE Software NAT Session Initiation Protocol Application Layer Gateway Denial of Service Vulnerability (high 8.6)
- [CVE-2019-12645](https://insights.sbomify.com/CVE-2019-12645/): Cisco Jabber Client Framework for Mac Code Execution Vulnerability (medium 6.7)
- [CVE-2019-12644](https://insights.sbomify.com/CVE-2019-12644/): Cisco Identity Services Engine Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2019-12643](https://insights.sbomify.com/CVE-2019-12643/): Cisco REST API Container for IOS XE Software Authentication Bypass Vulnerability (critical 10.0)
- [CVE-2019-1264](https://insights.sbomify.com/CVE-2019-1264/): Security feature bypass in Microsoft Office (high 7.8)
- [CVE-2019-12638](https://insights.sbomify.com/CVE-2019-12638/): Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability (medium 5.4)
- [CVE-2019-12637](https://insights.sbomify.com/CVE-2019-12637/): Cisco Identity Services Engine Multiple Stored Cross-Site Scripting Vulnerabilities (medium 5.4)
- [CVE-2019-12636](https://insights.sbomify.com/CVE-2019-12636/): Cisco Small Business Smart and Managed Switches Cross-Site Request Forgery Vulnerability (high 8.1)
- [CVE-2019-12635](https://insights.sbomify.com/CVE-2019-12635/): Cisco Content Security Management Appliance Information Disclosure Vulnerability (medium 4.3)
- [CVE-2019-12634](https://insights.sbomify.com/CVE-2019-12634/): Missing authorization in Cisco Unified Computing System Director (high 8.6)
- [CVE-2019-12633](https://insights.sbomify.com/CVE-2019-12633/): Cisco Unified Contact Center Express Request Processing Server-Side Request Forgery Vulnerability (medium 5.3)
- [CVE-2019-12632](https://insights.sbomify.com/CVE-2019-12632/): Cisco Finesse Request Processing Server-Side Request Forgery Vulnerability (medium 5.3)
- [CVE-2019-12631](https://insights.sbomify.com/CVE-2019-12631/): Cisco Identity Services Engine Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2019-12630](https://insights.sbomify.com/CVE-2019-12630/): Cisco Security Manager Java Deserialization Vulnerability (medium 6.5)
- [CVE-2019-1263](https://insights.sbomify.com/CVE-2019-1263/): Information disclosure in Microsoft Excel (medium 5.5)
- [CVE-2019-12629](https://insights.sbomify.com/CVE-2019-12629/): Cisco SD-WAN vManage Command Injection Vulnerability (medium 4.7)
- [CVE-2019-12627](https://insights.sbomify.com/CVE-2019-12627/): Cisco Firepower Threat Defense Software Information Disclosure Vulnerability (medium 5.8)
- [CVE-2019-12626](https://insights.sbomify.com/CVE-2019-12626/): Cisco Unified Contact Center Express Stored Cross-Site Scripting Vulnerability (medium 4.8)
- [CVE-2019-12625](https://insights.sbomify.com/CVE-2019-12625/): ClamAV Zip Bomb Vulnerability (high 7.5)
- [CVE-2019-12624](https://insights.sbomify.com/CVE-2019-12624/): Cisco IOS XE NGWC Legacy Wireless Device Manager GUI Cross-Site Request Forgery Vulnerability (high 8.8)
- [CVE-2019-12623](https://insights.sbomify.com/CVE-2019-12623/): Cisco Enterprise Network Functions Virtualization Infrastructure Software File Enumeration Vulnerability (medium 4.3)
- [CVE-2019-12622](https://insights.sbomify.com/CVE-2019-12622/): Cisco RoomOS Software Privilege Escalation Vulnerability (medium 4.1)
- [CVE-2019-12621](https://insights.sbomify.com/CVE-2019-12621/): Cisco HyperFlex Static SSL Key Vulnerability (medium 6.8)
- [CVE-2019-12620](https://insights.sbomify.com/CVE-2019-12620/): Cisco HyperFlex Software Counter Value Injection Vulnerability (medium 5.3)
- [CVE-2019-1262](https://insights.sbomify.com/CVE-2019-1262/): Cross-site scripting in Microsoft SharePoint Foundation (medium 5.4)
- [CVE-2019-12619](https://insights.sbomify.com/CVE-2019-12619/): Cisco SD-WAN Solution SQL Injection Vulnerability (medium 6.4)
- [CVE-2019-12618](https://insights.sbomify.com/CVE-2019-12618/): Hashicorp Nomad Access Control Issues (critical 9.8)
- [CVE-2019-12617](https://insights.sbomify.com/CVE-2019-12617/): SilverStripe Priviledge escalation through cache pollution (low 2.7)
- [CVE-2019-12616](https://insights.sbomify.com/CVE-2019-12616/): phpMyAdmin CSRF Vulnerability (medium 6.5)
- [CVE-2019-12615](https://insights.sbomify.com/CVE-2019-12615/): Null dereference in linux:linux kernel (high 7.5)
- [CVE-2019-12614](https://insights.sbomify.com/CVE-2019-12614/): Null dereference in canonical:ubuntu linux (medium 4.1)
- [CVE-2019-12612](https://insights.sbomify.com/CVE-2019-12612/): Code injection in bitdefender:box firmware (high 7.8)
- [CVE-2019-12611](https://insights.sbomify.com/CVE-2019-12611/): Denial of service in bitdefender:box firmware (medium 4.4)
- [CVE-2019-1261](https://insights.sbomify.com/CVE-2019-1261/): Cross-site request forgery in Microsoft SharePoint Enterprise Server (high 8.8)
- [CVE-2019-12601](https://insights.sbomify.com/CVE-2019-12601/): SQL injection in salesagility:suitecrm (critical 9.8)
- [CVE-2019-12600](https://insights.sbomify.com/CVE-2019-12600/): SQL injection in salesagility:suitecrm (critical 9.8)
- [CVE-2019-1260](https://insights.sbomify.com/CVE-2019-1260/): Privilege escalation in Microsoft SharePoint Enterprise Server (medium 6.5)
- [CVE-2019-12599](https://insights.sbomify.com/CVE-2019-12599/): SQL injection in salesagility:suitecrm (critical 9.8)
- [CVE-2019-12598](https://insights.sbomify.com/CVE-2019-12598/): SQL injection in salesagility:suitecrm (critical 9.8)
- [CVE-2019-12597](https://insights.sbomify.com/CVE-2019-12597/): Cross-site scripting in zohocorp:manageengine assetexplorer (medium 6.1)
- [CVE-2019-12596](https://insights.sbomify.com/CVE-2019-12596/): Cross-site scripting in zohocorp:manageengine assetexplorer (medium 6.1)
- [CVE-2019-12595](https://insights.sbomify.com/CVE-2019-12595/): Cross-site scripting in zohocorp:manageengine assetexplorer (medium 6.1)
- [CVE-2019-12594](https://insights.sbomify.com/CVE-2019-12594/): Missing authorization in debian:debian linux (critical 9.8)
- [CVE-2019-12593](https://insights.sbomify.com/CVE-2019-12593/): Path traversal in icewarp:mail server (high 7.5)
- [CVE-2019-12592](https://insights.sbomify.com/CVE-2019-12592/): Cross-site scripting in evernote:web clipper (medium 6.1)
- [CVE-2019-12591](https://insights.sbomify.com/CVE-2019-12591/): Command injection in netgear:insight (medium 6.8)
- [CVE-2019-1259](https://insights.sbomify.com/CVE-2019-1259/): Cross-site request forgery in Microsoft SharePoint Foundation (high 8.8)
- [CVE-2019-12589](https://insights.sbomify.com/CVE-2019-12589/): Security feature bypass in firejail project:firejail (high 8.8)
- [CVE-2019-12588](https://insights.sbomify.com/CVE-2019-12588/): Denial of service in espressif:arduino esp8266 (medium 6.5)
- [CVE-2019-12587](https://insights.sbomify.com/CVE-2019-12587/): Weak cryptography in espressif:esp-idf (high 8.1)
- [CVE-2019-12586](https://insights.sbomify.com/CVE-2019-12586/): Denial of service in espressif:arduino-esp32 (medium 6.5)
- [CVE-2019-12585](https://insights.sbomify.com/CVE-2019-12585/): Command injection in apcupsd:apcupsd (critical 9.8)
- [CVE-2019-12584](https://insights.sbomify.com/CVE-2019-12584/): Cross-site scripting in apcupsd:apcupsd (medium 6.1)
- [CVE-2019-12583](https://insights.sbomify.com/CVE-2019-12583/): Missing authorization in zyxel:uag2100 firmware (critical 9.1)
- [CVE-2019-12581](https://insights.sbomify.com/CVE-2019-12581/): Cross-site scripting in zyxel:uag2100 firmware (medium 6.1)
- [CVE-2019-1258](https://insights.sbomify.com/CVE-2019-1258/): Azure Active Directory Authentication Library Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2019-12579](https://insights.sbomify.com/CVE-2019-12579/): Command injection in londontrustmedia:private internet access vpn client (high 7.8)
- [CVE-2019-12578](https://insights.sbomify.com/CVE-2019-12578/): Command injection in londontrustmedia:private internet access vpn client (high 7.8)
- [CVE-2019-12577](https://insights.sbomify.com/CVE-2019-12577/): Privilege escalation in londontrustmedia:private internet access vpn client (high 7.8)
- [CVE-2019-12576](https://insights.sbomify.com/CVE-2019-12576/): Privilege escalation in londontrustmedia:private internet access vpn client (high 7.8)
- [CVE-2019-12575](https://insights.sbomify.com/CVE-2019-12575/): Privilege escalation in londontrustmedia:private internet access vpn client (high 7.8)
- [CVE-2019-12574](https://insights.sbomify.com/CVE-2019-12574/): Privilege escalation in londontrustmedia:private internet access vpn client (high 7.8)
- [CVE-2019-12573](https://insights.sbomify.com/CVE-2019-12573/): Path traversal in londontrustmedia:private internet access vpn client (high 7.1)
- [CVE-2019-12572](https://insights.sbomify.com/CVE-2019-12572/): Privilege escalation in londontrustmedia:private internet access (high 7.8)
- [CVE-2019-12571](https://insights.sbomify.com/CVE-2019-12571/): Other in londontrustmedia:private internet access vpn client (high 7.1)
- [CVE-2019-12570](https://insights.sbomify.com/CVE-2019-12570/): SQL injection in xpertsol:server status by hostname\/ip (high 8.8)
- [CVE-2019-1257](https://insights.sbomify.com/CVE-2019-1257/): Code injection in Microsoft SharePoint Enterprise Server (high 8.8)
- [CVE-2019-12569](https://insights.sbomify.com/CVE-2019-12569/): Code injection in rakuten:viber (high 7.8)
- [CVE-2019-12568](https://insights.sbomify.com/CVE-2019-12568/): Memory corruption in open tftp server project:open tftp server (critical 9.8)
- [CVE-2019-12567](https://insights.sbomify.com/CVE-2019-12567/): Memory corruption in open tftp server project:open tftp server (critical 9.8)
- [CVE-2019-12566](https://insights.sbomify.com/CVE-2019-12566/): Cross-site scripting in veronalabs:wp statistics (medium 5.4)
- [CVE-2019-12564](https://insights.sbomify.com/CVE-2019-12564/): Information disclosure in douco:douphp (critical 9.8)
- [CVE-2019-12562](https://insights.sbomify.com/CVE-2019-12562/): Stored Cross-Site Scripting vulnerability in admin component of DotNetNuke (medium 6.1)
- [CVE-2019-1256](https://insights.sbomify.com/CVE-2019-1256/): Privilege escalation in Windows (high 7.8)
- [CVE-2019-12555](https://insights.sbomify.com/CVE-2019-12555/): Memory corruption in sweetscape:010 editor (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/130/