# Vulnerabilities published in 2019


- [CVE-2019-0104](https://insights.sbomify.com/CVE-2019-0104/): Information disclosure in intel:data center manager (medium 5.5)
- [CVE-2019-0103](https://insights.sbomify.com/CVE-2019-0103/): Information disclosure in intel:data center manager (medium 5.5)
- [CVE-2019-0102](https://insights.sbomify.com/CVE-2019-0102/): Auth bypass in intel:data center manager (high 8.8)
- [CVE-2019-0101](https://insights.sbomify.com/CVE-2019-0101/): Auth bypass in intel:unite (critical 9.8)
- [CVE-2019-0099](https://insights.sbomify.com/CVE-2019-0099/): Missing authorization in Intel(R) Server Platform Services (SPS), Intel (R) Trusted Execution Engine Interface (TXE) (medium 6.8)
- [CVE-2019-0098](https://insights.sbomify.com/CVE-2019-0098/): Privilege escalation in Intel(R) Converged Security & Management Engine (CSME), Intel (R) Trusted Execution Engine Interface (TXE) (medium 6.8)
- [CVE-2019-0097](https://insights.sbomify.com/CVE-2019-0097/): Denial of service in Intel(R) Active Management Technology (AMT) (medium 4.9)
- [CVE-2019-0096](https://insights.sbomify.com/CVE-2019-0096/): Memory corruption in Intel(R) Active Management Technology (AMT) (high 8.0)
- [CVE-2019-0094](https://insights.sbomify.com/CVE-2019-0094/): Denial of service in Intel(R) Active Management Technology (AMT) (medium 4.3)
- [CVE-2019-0093](https://insights.sbomify.com/CVE-2019-0093/): Information disclosure in Intel(R) Converged Security & Management Engine (CSME), Intel(R) Server Platform Services (SPS) (medium 4.4)
- [CVE-2019-0092](https://insights.sbomify.com/CVE-2019-0092/): Privilege escalation in Intel(R) Active Management Technology (AMT) (medium 6.8)
- [CVE-2019-0091](https://insights.sbomify.com/CVE-2019-0091/): Code injection in Intel(R) Converged Security & Management Engine (CSME), Intel (R) Trusted Execution Engine Interface (TXE) (high 7.8)
- [CVE-2019-0090](https://insights.sbomify.com/CVE-2019-0090/): Missing authorization in Intel(R) Converged Security & Management Engine (CSME), Intel(R) Server Platform Services (SPS) (high 7.1)
- [CVE-2019-0089](https://insights.sbomify.com/CVE-2019-0089/): Privilege escalation in Intel(R) Server Platform Services (SPS) (medium 6.7)
- [CVE-2019-0088](https://insights.sbomify.com/CVE-2019-0088/): Privilege escalation in Intel(R) System Support Utility for Windows (high 7.8)
- [CVE-2019-0086](https://insights.sbomify.com/CVE-2019-0086/): Privilege escalation in Intel(R) Converged Security & Management Engine (CSME) Dynamic Application Loader, Intel (R) Trusted Execution Engine Interface (TXE) (high 7.8)
- [CVE-2019-0075](https://insights.sbomify.com/CVE-2019-0075/): Junos OS: SRX Series: Denial of Service vulnerability in srxpfe related to PIM (high 7.5)
- [CVE-2019-0074](https://insights.sbomify.com/CVE-2019-0074/): Path traversal in Junos OS (medium 5.5)
- [CVE-2019-0073](https://insights.sbomify.com/CVE-2019-0073/): Junos OS: PKI key pairs are exported with insecure file permissions (medium 6.6)
- [CVE-2019-0072](https://insights.sbomify.com/CVE-2019-0072/): Information disclosure in SBR Carrier (medium 5.6)
- [CVE-2019-0071](https://insights.sbomify.com/CVE-2019-0071/): Junos OS: EX2300, EX3400 Series: Veriexec signature checking not enforced in specific versions of Junos OS (high 7.8)
- [CVE-2019-0070](https://insights.sbomify.com/CVE-2019-0070/): Privilege escalation in Junos OS (high 8.8)
- [CVE-2019-0069](https://insights.sbomify.com/CVE-2019-0069/): Information disclosure in Junos OS (medium 5.9)
- [CVE-2019-0068](https://insights.sbomify.com/CVE-2019-0068/): Junos OS: SRX Series: Denial of Service vulnerability in flowd due to multicast packets (medium 6.5)
- [CVE-2019-0067](https://insights.sbomify.com/CVE-2019-0067/): Denial of service in Junos OS (medium 6.5)
- [CVE-2019-0066](https://insights.sbomify.com/CVE-2019-0066/): Denial of service in Junos OS (high 7.5)
- [CVE-2019-0065](https://insights.sbomify.com/CVE-2019-0065/): Junos OS: MX Series: Denial of Service vulnerability in MS-PIC component on MS-MIC or MS-MPC (medium 5.3)
- [CVE-2019-0064](https://insights.sbomify.com/CVE-2019-0064/): Junos OS: SRX5000 Series: flowd process crash due to receipt of specific TCP packet (high 7.5)
- [CVE-2019-0063](https://insights.sbomify.com/CVE-2019-0063/): Junos OS: MX Series: jdhcpd crash when receiving a specific crafted DHCP response message (medium 6.5)
- [CVE-2019-0062](https://insights.sbomify.com/CVE-2019-0062/): Junos OS: Session fixation vulnerability in J-Web (high 7.5)
- [CVE-2019-0061](https://insights.sbomify.com/CVE-2019-0061/): Junos OS: Insecure management daemon (MGD) configuration may allow local privilege escalation (high 7.8)
- [CVE-2019-0060](https://insights.sbomify.com/CVE-2019-0060/): Junos OS: SRX Series: flowd process crash due to processing of specific transit IP packets (high 7.5)
- [CVE-2019-0059](https://insights.sbomify.com/CVE-2019-0059/): Denial of service in Junos OS (high 7.5)
- [CVE-2019-0058](https://insights.sbomify.com/CVE-2019-0058/): Junos OS: SRX Series: A weakness in the Veriexec subsystem may allow privilege escalation. (high 7.8)
- [CVE-2019-0057](https://insights.sbomify.com/CVE-2019-0057/): NFX Series: An attacker may be able to take control of the JDM application and subsequently the entire system. (high 7.8)
- [CVE-2019-0056](https://insights.sbomify.com/CVE-2019-0056/): Denial of service in Junos OS (high 7.5)
- [CVE-2019-0055](https://insights.sbomify.com/CVE-2019-0055/): Denial of service in Junos OS (high 7.5)
- [CVE-2019-0054](https://insights.sbomify.com/CVE-2019-0054/): Weak cryptography in Junos OS (medium 6.8)
- [CVE-2019-0053](https://insights.sbomify.com/CVE-2019-0053/): Junos OS: Insufficient validation of environment variables in telnet client may lead to stack-based buffer overflow (high 7.8)
- [CVE-2019-0052](https://insights.sbomify.com/CVE-2019-0052/): SRX Series: srxpfe process crash while JSF/UTM module parses specific HTTP packets (high 7.5)
- [CVE-2019-0051](https://insights.sbomify.com/CVE-2019-0051/): SRX5000 Series: Denial of Service vulnerability in SSL-Proxy feature. (medium 6.5)
- [CVE-2019-0050](https://insights.sbomify.com/CVE-2019-0050/): Junos OS: SRX1500: Denial of service due to crash of srxpfe process under heavy traffic conditions. (high 7.5)
- [CVE-2019-0049](https://insights.sbomify.com/CVE-2019-0049/): Junos OS: RPD process crashes when BGP peer restarts (high 7.5)
- [CVE-2019-0048](https://insights.sbomify.com/CVE-2019-0048/): Security feature bypass in Junos OS (medium 5.8)
- [CVE-2019-0047](https://insights.sbomify.com/CVE-2019-0047/): Junos OS: Persistent XSS vulnerability in J-Web (high 8.8)
- [CVE-2019-0046](https://insights.sbomify.com/CVE-2019-0046/): Denial of service in Junos OS (medium 6.5)
- [CVE-2019-0044](https://insights.sbomify.com/CVE-2019-0044/): Junos OS: SRX5000 series: Kernel crash (vmcore) upon receipt of a specific packet on fxp0 interface (high 7.5)
- [CVE-2019-0043](https://insights.sbomify.com/CVE-2019-0043/): Junos OS: RPD process crashes upon receipt of a specific SNMP packet (high 7.5)
- [CVE-2019-0042](https://insights.sbomify.com/CVE-2019-0042/): Security feature bypass in Juniper Identity Management Service (medium 5.7)
- [CVE-2019-0041](https://insights.sbomify.com/CVE-2019-0041/): Junos OS: EX4300-MP Series: IP transit traffic can reach the control plane via loopback interface. (medium 6.5)
- [CVE-2019-0040](https://insights.sbomify.com/CVE-2019-0040/): Junos OS: Specially crafted packets sent to port 111 on any interface triggers responses from the management interface (medium 6.5)
- [CVE-2019-0039](https://insights.sbomify.com/CVE-2019-0039/): Junos OS: Login credentials are vulnerable to brute force attacks through the REST API (medium 5.3)
- [CVE-2019-0038](https://insights.sbomify.com/CVE-2019-0038/): SRX Series: Crafted packets destined to fxp0 management interface on SRX340/SRX345 devices can lead to DoS (medium 6.5)
- [CVE-2019-0037](https://insights.sbomify.com/CVE-2019-0037/): Junos OS: jdhcpd crash upon receipt of crafted DHCPv6 solicit message (high 7.4)
- [CVE-2019-0036](https://insights.sbomify.com/CVE-2019-0036/): Junos OS: Firewall filter terms named "internal-1" and "internal-2" being ignored (high 7.2)
- [CVE-2019-0035](https://insights.sbomify.com/CVE-2019-0035/): Junos OS: 'set system ports console insecure' allows root password recovery on OAM volumes (medium 6.8)
- [CVE-2019-0033](https://insights.sbomify.com/CVE-2019-0033/): SRX Series: A remote attacker may cause a high CPU Denial of Service to the device when proxy ARP is configured. (high 7.5)
- [CVE-2019-0032](https://insights.sbomify.com/CVE-2019-0032/): Junos Space Service Now and Service Insight: Organization username and password stored in plaintext in log files. (medium 6.5)
- [CVE-2019-0031](https://insights.sbomify.com/CVE-2019-0031/): Junos OS: jdhcpd daemon memory consumption Denial of Service when receiving specific IPv6 DHCP packets. (high 7.4)
- [CVE-2019-0030](https://insights.sbomify.com/CVE-2019-0030/): Juniper ATP: Password hashing uses DES and a hardcoded salt (medium 6.7)
- [CVE-2019-0029](https://insights.sbomify.com/CVE-2019-0029/): Juniper ATP: Splunk credentials are in logged in clear text (high 8.8)
- [CVE-2019-0028](https://insights.sbomify.com/CVE-2019-0028/): Junos OS: RPD process crashes due to specific BGP peer restarts condition. (high 7.5)
- [CVE-2019-0027](https://insights.sbomify.com/CVE-2019-0027/): Juniper ATP: Persistent Cross-Site Scripting vulnerability in Snort Rules configuration (medium 5.4)
- [CVE-2019-0026](https://insights.sbomify.com/CVE-2019-0026/): Juniper ATP: Persistent Cross-Site Scripting vulnerability in Zone configuration (medium 5.4)
- [CVE-2019-0025](https://insights.sbomify.com/CVE-2019-0025/): Juniper ATP: Persistent Cross-Site Scripting vulnerability in RADIUS configuration menu (medium 5.4)
- [CVE-2019-0024](https://insights.sbomify.com/CVE-2019-0024/): Juniper ATP: Persistent Cross-Site Scripting vulnerability in the Email Collectors menu (medium 5.4)
- [CVE-2019-0023](https://insights.sbomify.com/CVE-2019-0023/): Juniper ATP: Persistent Cross-Site Scripting vulnerability in the Golden VM menu (medium 5.4)
- [CVE-2019-0022](https://insights.sbomify.com/CVE-2019-0022/): Hardcoded credentials in Juniper ATP (critical 10.0)
- [CVE-2019-0021](https://insights.sbomify.com/CVE-2019-0021/): Juniper ATP: secret CLI inputs are logged to /var/log/syslog in clear text (high 7.1)
- [CVE-2019-0020](https://insights.sbomify.com/CVE-2019-0020/): Juniper ATP: Hard coded credentials used in Web Collector (critical 10.0)
- [CVE-2019-0019](https://insights.sbomify.com/CVE-2019-0019/): BGP packets can trigger rpd crash when BGP tracing is enabled. (high 7.5)
- [CVE-2019-0018](https://insights.sbomify.com/CVE-2019-0018/): Juniper ATP: Persistent Cross-Site Scripting (XSS) vulnerability in file upload menu (medium 5.4)
- [CVE-2019-0017](https://insights.sbomify.com/CVE-2019-0017/): Junos Space: Unrestricted file upload vulnerability (medium 6.5)
- [CVE-2019-0016](https://insights.sbomify.com/CVE-2019-0016/): Junos Space: Authenticated user able to delete devices without delete device privileges (medium 6.5)
- [CVE-2019-0015](https://insights.sbomify.com/CVE-2019-0015/): Junos OS: SRX Series: Deleted dynamic VPN users are allowed to establish VPN connections until reboot (medium 5.4)
- [CVE-2019-0014](https://insights.sbomify.com/CVE-2019-0014/): Junos OS: QFX and PTX Series: FPC process crashes after J-Flow processes a malformed packet (high 7.5)
- [CVE-2019-0013](https://insights.sbomify.com/CVE-2019-0013/): Junos OS: RPD crash upon receipt of malformed PIM packet (medium 6.5)
- [CVE-2019-0012](https://insights.sbomify.com/CVE-2019-0012/): Junos OS: rpd crash on VPLS PE upon receipt of specific BGP message (high 7.5)
- [CVE-2019-0011](https://insights.sbomify.com/CVE-2019-0011/): Denial of service in Junos OS (medium 6.5)
- [CVE-2019-0010](https://insights.sbomify.com/CVE-2019-0010/): Junos OS: SRX Series: Crafted HTTP traffic may cause UTM to consume all mbufs, leading to Denial of Service (high 7.5)
- [CVE-2019-0009](https://insights.sbomify.com/CVE-2019-0009/): Junos OS: EX2300 and EX3400: High disk I/O operations may disrupt the communication between RE and PFE (medium 5.5)
- [CVE-2019-0008](https://insights.sbomify.com/CVE-2019-0008/): Memory corruption in Junos OS (critical 9.8)
- [CVE-2019-0007](https://insights.sbomify.com/CVE-2019-0007/): Junos OS: vMX series: Predictable IP ID sequence numbers vulnerability (critical 9.3)
- [CVE-2019-0006](https://insights.sbomify.com/CVE-2019-0006/): Memory corruption in Junos OS (critical 9.8)
- [CVE-2019-0005](https://insights.sbomify.com/CVE-2019-0005/): Security feature bypass in juniper:junos (medium 5.3)
- [CVE-2019-0004](https://insights.sbomify.com/CVE-2019-0004/): Juniper ATP: API and device keys are logged in a world-readable permissions file (high 7.8)
- [CVE-2019-0003](https://insights.sbomify.com/CVE-2019-0003/): Denial of service in Junos OS (high 7.5)
- [CVE-2019-0002](https://insights.sbomify.com/CVE-2019-0002/): Junos OS: EX2300 and EX3400 series: Certain stateless firewall filter rules might not take effect (medium 5.8)
- [CVE-2019-0001](https://insights.sbomify.com/CVE-2019-0001/): Junos OS: MX Series: uncontrolled recursion and crash in Broadband Edge subscriber management daemon (bbe-smgd). (high 7.5)
- [ALEA-2019:3677](https://insights.sbomify.com/ALEA-2019-3677/): isns-utils bug fix and enhancement update (not scored)
- [ALEA-2019:3608](https://insights.sbomify.com/ALEA-2019-3608/): libaio bug fix and enhancement update (not scored)
- [ALEA-2019:3585](https://insights.sbomify.com/ALEA-2019-3585/): rdma bug fix and enhancement update (not scored)
- [ALEA-2019:3557](https://insights.sbomify.com/ALEA-2019-3557/): libtalloc bug fix and enhancement update (not scored)
- [ALEA-2019:3511](https://insights.sbomify.com/ALEA-2019-3511/): libvarlink bug fix and enhancement update (not scored)
- [ALEA-2019:3472](https://insights.sbomify.com/ALEA-2019-3472/): libpmemobj-cpp bug fix and enhancement update (not scored)
- [ALEA-2019:3461](https://insights.sbomify.com/ALEA-2019-3461/): new module: nodejs:12 (not scored)
- [ALEA-2019:3454](https://insights.sbomify.com/ALEA-2019-3454/): new packages: gcc-toolset-9-systemtap (not scored)
- [ALEA-2019:3447](https://insights.sbomify.com/ALEA-2019-3447/): new module: ruby:2.6 (not scored)
- [ALEA-2019:3444](https://insights.sbomify.com/ALEA-2019-3444/): new packages: gcc-toolset-9-valgrind (not scored)
- [ALEA-2019:3443](https://insights.sbomify.com/ALEA-2019-3443/): new packages: gcc-toolset-9-elfutils (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/163/