# Vulnerabilities published in 2019


- [CVE-2019-7550](https://insights.sbomify.com/CVE-2019-7550/): Information disclosure in n/a (medium 5.3)
- [CVE-2019-7549](https://insights.sbomify.com/CVE-2019-7549/): Missing authorization in n/a (medium 4.3)
- [CVE-2019-7548](https://insights.sbomify.com/CVE-2019-7548/): SQLAlchemy is vulnerable to SQL Injection via group_by parameter (high 7.8)
- [CVE-2019-7547](https://insights.sbomify.com/CVE-2019-7547/): Cross-site scripting in n/a (medium 4.8)
- [CVE-2019-7546](https://insights.sbomify.com/CVE-2019-7546/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7545](https://insights.sbomify.com/CVE-2019-7545/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2019-7544](https://insights.sbomify.com/CVE-2019-7544/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2019-7543](https://insights.sbomify.com/CVE-2019-7543/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7541](https://insights.sbomify.com/CVE-2019-7541/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7539](https://insights.sbomify.com/CVE-2019-7539/): ipycache is vulnerable to Code Injection (high 8.8)
- [CVE-2019-7537](https://insights.sbomify.com/CVE-2019-7537/): Donfig Command Injection in collect_yaml method (critical 9.8)
- [CVE-2019-7535](https://insights.sbomify.com/CVE-2019-7535/): Information disclosure in n/a (medium 5.3)
- [CVE-2019-7524](https://insights.sbomify.com/CVE-2019-7524/): Memory corruption in n/a (high 8.8)
- [CVE-2019-7489](https://insights.sbomify.com/CVE-2019-7489/): Auth bypass in Email Security Appliance (critical 9.8)
- [CVE-2019-7488](https://insights.sbomify.com/CVE-2019-7488/): Hardcoded credentials in Email Security Appliance (critical 9.8)
- [CVE-2019-7487](https://insights.sbomify.com/CVE-2019-7487/): Path traversal in SonicOS (high 7.8)
- [CVE-2019-7486](https://insights.sbomify.com/CVE-2019-7486/): Code injection in SMA100 (high 8.8)
- [CVE-2019-7485](https://insights.sbomify.com/CVE-2019-7485/): Memory corruption in SMA100 (high 8.8)
- [CVE-2019-7484](https://insights.sbomify.com/CVE-2019-7484/): SQL injection in SMA100 (medium 6.5)
- [CVE-2019-7483](https://insights.sbomify.com/CVE-2019-7483/): SonicWall SMA100 Directory Traversal (high 7.5, exploited in the wild)
- [CVE-2019-7482](https://insights.sbomify.com/CVE-2019-7482/): Memory corruption in SMA100 (critical 9.8)
- [CVE-2019-7481](https://insights.sbomify.com/CVE-2019-7481/): SonicWall SMA100 SQL Injection (high 7.5, exploited in the wild)
- [CVE-2019-7479](https://insights.sbomify.com/CVE-2019-7479/): Privilege escalation in SonicOS (high 7.2)
- [CVE-2019-7478](https://insights.sbomify.com/CVE-2019-7478/): SQL injection in GMS (critical 9.8)
- [CVE-2019-7477](https://insights.sbomify.com/CVE-2019-7477/): Weak cryptography in SonicOS (high 7.5)
- [CVE-2019-7476](https://insights.sbomify.com/CVE-2019-7476/): Hardcoded credentials in Global Management System (GMS) (high 8.1)
- [CVE-2019-7475](https://insights.sbomify.com/CVE-2019-7475/): Missing authorization in SonicOS (critical 9.8)
- [CVE-2019-7474](https://insights.sbomify.com/CVE-2019-7474/): Denial of service in SonicOS (medium 6.5)
- [CVE-2019-7443](https://insights.sbomify.com/CVE-2019-7443/): Privilege escalation in n/a (high 8.1)
- [CVE-2019-7442](https://insights.sbomify.com/CVE-2019-7442/): XML external entity in n/a (critical 9.8)
- [CVE-2019-7441](https://insights.sbomify.com/CVE-2019-7441/): Business logic in n/a (medium 6.5)
- [CVE-2019-7440](https://insights.sbomify.com/CVE-2019-7440/): Cross-site request forgery in n/a (medium 6.5)
- [CVE-2019-7439](https://insights.sbomify.com/CVE-2019-7439/): Denial of service in n/a (medium 6.5)
- [CVE-2019-7438](https://insights.sbomify.com/CVE-2019-7438/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7437](https://insights.sbomify.com/CVE-2019-7437/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7436](https://insights.sbomify.com/CVE-2019-7436/): Path traversal in n/a (medium 6.5)
- [CVE-2019-7435](https://insights.sbomify.com/CVE-2019-7435/): Cross-site scripting in n/a (medium 5.3)
- [CVE-2019-7434](https://insights.sbomify.com/CVE-2019-7434/): Path traversal in n/a (medium 6.5)
- [CVE-2019-7433](https://insights.sbomify.com/CVE-2019-7433/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2019-7432](https://insights.sbomify.com/CVE-2019-7432/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2019-7431](https://insights.sbomify.com/CVE-2019-7431/): Path traversal in n/a (medium 6.5)
- [CVE-2019-7430](https://insights.sbomify.com/CVE-2019-7430/): Cross-site scripting in n/a (medium 5.3)
- [CVE-2019-7429](https://insights.sbomify.com/CVE-2019-7429/): Path traversal in n/a (medium 6.5)
- [CVE-2019-7427](https://insights.sbomify.com/CVE-2019-7427/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7426](https://insights.sbomify.com/CVE-2019-7426/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7425](https://insights.sbomify.com/CVE-2019-7425/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7424](https://insights.sbomify.com/CVE-2019-7424/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7423](https://insights.sbomify.com/CVE-2019-7423/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7422](https://insights.sbomify.com/CVE-2019-7422/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7421](https://insights.sbomify.com/CVE-2019-7421/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7420](https://insights.sbomify.com/CVE-2019-7420/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7419](https://insights.sbomify.com/CVE-2019-7419/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7418](https://insights.sbomify.com/CVE-2019-7418/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7417](https://insights.sbomify.com/CVE-2019-7417/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7416](https://insights.sbomify.com/CVE-2019-7416/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7413](https://insights.sbomify.com/CVE-2019-7413/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7412](https://insights.sbomify.com/CVE-2019-7412/): Cross-site scripting in n/a (critical 9.8)
- [CVE-2019-7411](https://insights.sbomify.com/CVE-2019-7411/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2019-7410](https://insights.sbomify.com/CVE-2019-7410/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7409](https://insights.sbomify.com/CVE-2019-7409/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7404](https://insights.sbomify.com/CVE-2019-7404/): Path traversal in n/a (high 7.5)
- [CVE-2019-7403](https://insights.sbomify.com/CVE-2019-7403/): Path traversal in n/a (medium 4.9)
- [CVE-2019-7402](https://insights.sbomify.com/CVE-2019-7402/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7401](https://insights.sbomify.com/CVE-2019-7401/): Memory corruption in n/a (critical 9.8)
- [CVE-2019-7400](https://insights.sbomify.com/CVE-2019-7400/): Rukovoditel before 2.4.1 allows XSS. (medium 6.1)
- [CVE-2019-7399](https://insights.sbomify.com/CVE-2019-7399/): Other in n/a (high 7.4)
- [CVE-2019-7398](https://insights.sbomify.com/CVE-2019-7398/): Denial of service in n/a (high 7.5)
- [CVE-2019-7397](https://insights.sbomify.com/CVE-2019-7397/): Denial of service in n/a (high 7.5)
- [CVE-2019-7396](https://insights.sbomify.com/CVE-2019-7396/): Denial of service in n/a (high 7.5)
- [CVE-2019-7395](https://insights.sbomify.com/CVE-2019-7395/): Denial of service in n/a (high 7.5)
- [CVE-2019-7394](https://insights.sbomify.com/CVE-2019-7394/): Privilege escalation in CA Risk Authentication (high 8.8)
- [CVE-2019-7393](https://insights.sbomify.com/CVE-2019-7393/): Cross-site scripting in CA Risk Authentication (medium 4.3)
- [CVE-2019-7392](https://insights.sbomify.com/CVE-2019-7392/): Auth bypass in n/a (critical 9.1)
- [CVE-2019-7391](https://insights.sbomify.com/CVE-2019-7391/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2019-7390](https://insights.sbomify.com/CVE-2019-7390/): Missing authorization in n/a (high 8.6)
- [CVE-2019-7389](https://insights.sbomify.com/CVE-2019-7389/): Missing authorization in n/a (high 7.5)
- [CVE-2019-7388](https://insights.sbomify.com/CVE-2019-7388/): Information disclosure in n/a (high 7.5)
- [CVE-2019-7387](https://insights.sbomify.com/CVE-2019-7387/): Path traversal in n/a (medium 6.5)
- [CVE-2019-7386](https://insights.sbomify.com/CVE-2019-7386/): Memory corruption in n/a (medium 6.5)
- [CVE-2019-7385](https://insights.sbomify.com/CVE-2019-7385/): Command injection in n/a (high 7.8)
- [CVE-2019-7384](https://insights.sbomify.com/CVE-2019-7384/): Command injection in n/a (high 7.8)
- [CVE-2019-7383](https://insights.sbomify.com/CVE-2019-7383/): Command injection in n/a (high 7.8)
- [CVE-2019-7366](https://insights.sbomify.com/CVE-2019-7366/): Memory corruption in Autodesk FBX Software Development Kit (high 7.8)
- [CVE-2019-7365](https://insights.sbomify.com/CVE-2019-7365/): Other in Autodesk Desktop Application (high 7.8)
- [CVE-2019-7364](https://insights.sbomify.com/CVE-2019-7364/): Other in Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D, AutoCAD P&ID (high 7.8)
- [CVE-2019-7363](https://insights.sbomify.com/CVE-2019-7363/): Use after free in Autodesk Design Review (high 7.8)
- [CVE-2019-7362](https://insights.sbomify.com/CVE-2019-7362/): Other in Autodesk Design Review (high 7.8)
- [CVE-2019-7361](https://insights.sbomify.com/CVE-2019-7361/): Deserialization in Autodesk Advance Steel (high 7.8)
- [CVE-2019-7360](https://insights.sbomify.com/CVE-2019-7360/): Use after free in Autodesk Advance Steel (high 7.8)
- [CVE-2019-7359](https://insights.sbomify.com/CVE-2019-7359/): Memory corruption in Autodesk Advance Steel (high 7.8)
- [CVE-2019-7358](https://insights.sbomify.com/CVE-2019-7358/): Memory corruption in Autodesk Advance Steel (high 7.8)
- [CVE-2019-7357](https://insights.sbomify.com/CVE-2019-7357/): Subrion CMS CSRF Vulnerability (high 8.8)
- [CVE-2019-7356](https://insights.sbomify.com/CVE-2019-7356/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2019-7353](https://insights.sbomify.com/CVE-2019-7353/): Missing authorization in n/a (critical 9.1)
- [CVE-2019-7352](https://insights.sbomify.com/CVE-2019-7352/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7351](https://insights.sbomify.com/CVE-2019-7351/): Other in n/a (medium 6.5)
- [CVE-2019-7350](https://insights.sbomify.com/CVE-2019-7350/): Auth bypass in n/a (high 7.3)
- [CVE-2019-7349](https://insights.sbomify.com/CVE-2019-7349/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7348](https://insights.sbomify.com/CVE-2019-7348/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7347](https://insights.sbomify.com/CVE-2019-7347/): Race condition in n/a (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/23/