# Vulnerabilities published in 2019 - [CVE-2019-4049](https://insights.sbomify.com/CVE-2019-4049/): Denial of service in MQ (medium 6.2) - [CVE-2019-4048](https://insights.sbomify.com/CVE-2019-4048/): Information disclosure in Maximo Asset Management (low 2.1) - [CVE-2019-4047](https://insights.sbomify.com/CVE-2019-4047/): Information disclosure in Jazz Reporting Service (medium 4.3) - [CVE-2019-4046](https://insights.sbomify.com/CVE-2019-4046/): Denial of service in WebSphere Application Server (medium 5.9) - [CVE-2019-4045](https://insights.sbomify.com/CVE-2019-4045/): Business logic in Business Automation Workflow (medium 4.3) - [CVE-2019-4043](https://insights.sbomify.com/CVE-2019-4043/): XML external entity in Sterling B2B Integrator (high 7.1) - [CVE-2019-4040](https://insights.sbomify.com/CVE-2019-4040/): Cross-site scripting in i (medium 6.1) - [CVE-2019-4039](https://insights.sbomify.com/CVE-2019-4039/): Denial of service in MQ (medium 6.2) - [CVE-2019-4038](https://insights.sbomify.com/CVE-2019-4038/): Code injection in Security Identity Manager (high 7.2) - [CVE-2019-4036](https://insights.sbomify.com/CVE-2019-4036/): Denial of service in Security Access Manager (high 7.5) - [CVE-2019-4035](https://insights.sbomify.com/CVE-2019-4035/): Open redirect in Content Navigator (medium 6.3) - [CVE-2019-4034](https://insights.sbomify.com/CVE-2019-4034/): Code injection in Content Navigator (medium 6.3) - [CVE-2019-4033](https://insights.sbomify.com/CVE-2019-4033/): Cross-site scripting in Content Navigator (medium 5.4) - [CVE-2019-4032](https://insights.sbomify.com/CVE-2019-4032/): SQL injection in Financial Transaction Manager (medium 6.3) - [CVE-2019-4031](https://insights.sbomify.com/CVE-2019-4031/): Privilege escalation in Workload Scheduler Distributed (high 8.4) - [CVE-2019-4030](https://insights.sbomify.com/CVE-2019-4030/): Cross-site scripting in WebSphere Application Server (medium 5.4) - [CVE-2019-4029](https://insights.sbomify.com/CVE-2019-4029/): Cross-site scripting in Sterling B2B Integrator (medium 5.4) - [CVE-2019-4028](https://insights.sbomify.com/CVE-2019-4028/): Cross-site scripting in Sterling B2B Integrator (medium 5.4) - [CVE-2019-4027](https://insights.sbomify.com/CVE-2019-4027/): Cross-site scripting in Sterling B2B Integrator (medium 5.4) - [CVE-2019-4016](https://insights.sbomify.com/CVE-2019-4016/): Memory corruption in DB2 for Linux, UNIX and Windows (high 8.4) - [CVE-2019-4015](https://insights.sbomify.com/CVE-2019-4015/): Memory corruption in DB2 for Linux, UNIX and Windows (high 8.4) - [CVE-2019-4014](https://insights.sbomify.com/CVE-2019-4014/): Memory corruption in DB2 (high 8.4) - [CVE-2019-4013](https://insights.sbomify.com/CVE-2019-4013/): File upload in BigFix Platform (critical 9.0) - [CVE-2019-4012](https://insights.sbomify.com/CVE-2019-4012/): SQL injection in BigFix WebUI Profile Management (medium 6.3) - [CVE-2019-4011](https://insights.sbomify.com/CVE-2019-4011/): Cross-site scripting in BigFix Platform (medium 5.4) - [CVE-2019-4008](https://insights.sbomify.com/CVE-2019-4008/): Information disclosure in API Connect (critical 9.0) - [CVE-2019-4001](https://insights.sbomify.com/CVE-2019-4001/): Code injection in Druva inSync Client (high 7.8) - [CVE-2019-4000](https://insights.sbomify.com/CVE-2019-4000/): Code injection in Druva inSync Mac OS Client (high 7.8) - [CVE-2019-3999](https://insights.sbomify.com/CVE-2019-3999/): Command injection in Druva inSync Windows Client (high 7.8) - [CVE-2019-3998](https://insights.sbomify.com/CVE-2019-3998/): Auth bypass in SimpliSafe SS3 Base Station (medium 5.5) - [CVE-2019-3997](https://insights.sbomify.com/CVE-2019-3997/): Auth bypass in SimpliSafe SS3 (medium 4.6) - [CVE-2019-3996](https://insights.sbomify.com/CVE-2019-3996/): Server-side request forgery in ELOG (medium 6.5) - [CVE-2019-3995](https://insights.sbomify.com/CVE-2019-3995/): Null dereference in ELOG (high 7.5) - [CVE-2019-3994](https://insights.sbomify.com/CVE-2019-3994/): Use after free in ELOG (high 7.5) - [CVE-2019-3993](https://insights.sbomify.com/CVE-2019-3993/): Information disclosure in ELOG (high 7.5) - [CVE-2019-3992](https://insights.sbomify.com/CVE-2019-3992/): Information disclosure in ELOG (high 7.5) - [CVE-2019-3990](https://insights.sbomify.com/CVE-2019-3990/): Missing authorization in Harbor (medium 4.3) - [CVE-2019-3989](https://insights.sbomify.com/CVE-2019-3989/): Command injection in Amazon's Blink XT2 Sync Module (critical 9.8) - [CVE-2019-3988](https://insights.sbomify.com/CVE-2019-3988/): Command injection in Amazon's Blink XT2 Sync Module (high 8.8) - [CVE-2019-3987](https://insights.sbomify.com/CVE-2019-3987/): Command injection in Amazon's Blink XT2 Sync Module (high 8.8) - [CVE-2019-3986](https://insights.sbomify.com/CVE-2019-3986/): Command injection in Amazon's Blink XT2 Sync Module (high 8.8) - [CVE-2019-3985](https://insights.sbomify.com/CVE-2019-3985/): Command injection in Amazon's Blink XT2 Sync Module (high 8.8) - [CVE-2019-3984](https://insights.sbomify.com/CVE-2019-3984/): Command injection in Blink XT2 Sync Module firmware (critical 9.8) - [CVE-2019-3983](https://insights.sbomify.com/CVE-2019-3983/): Hardcoded credentials in Amazon's Blink XT2 Sync Module (medium 6.8) - [CVE-2019-3982](https://insights.sbomify.com/CVE-2019-3982/): Denial of service in Tenable Nessus (medium 6.5) - [CVE-2019-3981](https://insights.sbomify.com/CVE-2019-3981/): Weak cryptography in WinBox (low 3.7) - [CVE-2019-3980](https://insights.sbomify.com/CVE-2019-3980/): File upload in SolarWinds Dameware Remote Mini Remote Client Agent Service (critical 9.8) - [CVE-2019-3979](https://insights.sbomify.com/CVE-2019-3979/): Other in MikroTik RouterOS (high 7.5) - [CVE-2019-3978](https://insights.sbomify.com/CVE-2019-3978/): Missing authorization in MikroTik RouterOS (high 7.5) - [CVE-2019-3977](https://insights.sbomify.com/CVE-2019-3977/): Security feature bypass in MikroTik RouterOS (high 7.5) - [CVE-2019-3976](https://insights.sbomify.com/CVE-2019-3976/): Path traversal in MikroTik RouterOS (high 8.8) - [CVE-2019-3975](https://insights.sbomify.com/CVE-2019-3975/): Memory corruption in WebAccess/SCADA (critical 9.8) - [CVE-2019-3974](https://insights.sbomify.com/CVE-2019-3974/): Other in Tenable Nessus (high 8.1) - [CVE-2019-3973](https://insights.sbomify.com/CVE-2019-3973/): Memory corruption in Comodo Antivirus (medium 5.5) - [CVE-2019-3972](https://insights.sbomify.com/CVE-2019-3972/): Denial of service in Comodo Antivirus (medium 5.5) - [CVE-2019-3971](https://insights.sbomify.com/CVE-2019-3971/): Null dereference in Comodo Antivirus (medium 5.5) - [CVE-2019-3970](https://insights.sbomify.com/CVE-2019-3970/): Privilege escalation in Comodo Antivirus (medium 5.5) - [CVE-2019-3969](https://insights.sbomify.com/CVE-2019-3969/): Privilege escalation in Comodo Antivirus (high 7.8) - [CVE-2019-3968](https://insights.sbomify.com/CVE-2019-3968/): Command injection in OpenEMR (high 8.8) - [CVE-2019-3967](https://insights.sbomify.com/CVE-2019-3967/): Path traversal in OpenEMR (medium 6.5) - [CVE-2019-3966](https://insights.sbomify.com/CVE-2019-3966/): Cross-site scripting in OpenEMR (medium 6.1) - [CVE-2019-3965](https://insights.sbomify.com/CVE-2019-3965/): Cross-site scripting in OpenEMR (medium 6.1) - [CVE-2019-3964](https://insights.sbomify.com/CVE-2019-3964/): Cross-site scripting in OpenEMR (medium 6.1) - [CVE-2019-3963](https://insights.sbomify.com/CVE-2019-3963/): Cross-site scripting in OpenEMR (medium 6.1) - [CVE-2019-3962](https://insights.sbomify.com/CVE-2019-3962/): Cross-site scripting in Nessus (low 3.3) - [CVE-2019-3961](https://insights.sbomify.com/CVE-2019-3961/): Cross-site scripting in Tenable Nessus (medium 6.1) - [CVE-2019-3960](https://insights.sbomify.com/CVE-2019-3960/): File upload in WallacePOS (high 7.2) - [CVE-2019-3959](https://insights.sbomify.com/CVE-2019-3959/): Cross-site request forgery in WallacePOS (high 8.8) - [CVE-2019-3958](https://insights.sbomify.com/CVE-2019-3958/): Cross-site scripting in WallacePOS (medium 5.4) - [CVE-2019-3957](https://insights.sbomify.com/CVE-2019-3957/): Memory corruption in Solarwinds Dameware Remote Mini Controller (high 7.4) - [CVE-2019-3956](https://insights.sbomify.com/CVE-2019-3956/): Memory corruption in Solarwinds Dameware Remote Mini Controller (high 7.4) - [CVE-2019-3955](https://insights.sbomify.com/CVE-2019-3955/): Memory corruption in Solarwinds Dameware Remote Mini Controller (high 7.5) - [CVE-2019-3954](https://insights.sbomify.com/CVE-2019-3954/): Memory corruption in Advantech WebAccess/SCADA (critical 9.8) - [CVE-2019-3953](https://insights.sbomify.com/CVE-2019-3953/): Memory corruption in Advantech WebAccess/SCADA (critical 9.8) - [CVE-2019-3951](https://insights.sbomify.com/CVE-2019-3951/): Memory corruption in Advantech WebAccess/SCADA (critical 9.8) - [CVE-2019-3950](https://insights.sbomify.com/CVE-2019-3950/): Hardcoded credentials in Basestation firmware (critical 9.8) - [CVE-2019-3949](https://insights.sbomify.com/CVE-2019-3949/): Misconfiguration in Basestation firmware (critical 9.8) - [CVE-2019-3948](https://insights.sbomify.com/CVE-2019-3948/): Missing authorization in Dahua DH-IPC HX883X and DH-IPC-HX863X (high 7.5) - [CVE-2019-3947](https://insights.sbomify.com/CVE-2019-3947/): Information disclosure in Fuji Electric V-Server (critical 9.8) - [CVE-2019-3946](https://insights.sbomify.com/CVE-2019-3946/): Integer overflow in Fuji Electric V-Server (high 7.5) - [CVE-2019-3945](https://insights.sbomify.com/CVE-2019-3945/): Denial of service in Parrot ANAFI (high 7.5) - [CVE-2019-3944](https://insights.sbomify.com/CVE-2019-3944/): Denial of service in Parrot ANAFI (high 7.5) - [CVE-2019-3943](https://insights.sbomify.com/CVE-2019-3943/): Path traversal in RouterOS (high 8.1) - [CVE-2019-3942](https://insights.sbomify.com/CVE-2019-3942/): Missing authorization in Advantech WebAccess (high 7.5) - [CVE-2019-3941](https://insights.sbomify.com/CVE-2019-3941/): Missing authorization in WebAccess (high 7.5) - [CVE-2019-3940](https://insights.sbomify.com/CVE-2019-3940/): File upload in WebAccess (critical 9.8) - [CVE-2019-3939](https://insights.sbomify.com/CVE-2019-3939/): Hardcoded credentials in Crestron AirMedia (critical 9.8) - [CVE-2019-3938](https://insights.sbomify.com/CVE-2019-3938/): Hardcoded credentials in Crestron AirMedia (high 7.8) - [CVE-2019-3937](https://insights.sbomify.com/CVE-2019-3937/): Information disclosure in Crestron AirMedia (high 7.8) - [CVE-2019-3936](https://insights.sbomify.com/CVE-2019-3936/): Denial of service in Crestron AirMedia (high 7.5) - [CVE-2019-3935](https://insights.sbomify.com/CVE-2019-3935/): Missing authorization in Crestron AirMedia (critical 9.1) - [CVE-2019-3934](https://insights.sbomify.com/CVE-2019-3934/): Auth bypass in Crestron AirMedia (medium 5.3) - [CVE-2019-3933](https://insights.sbomify.com/CVE-2019-3933/): Auth bypass in Crestron AirMedia (medium 5.3) - [CVE-2019-3932](https://insights.sbomify.com/CVE-2019-3932/): Hardcoded credentials in Crestron AirMedia (critical 9.8) - [CVE-2019-3931](https://insights.sbomify.com/CVE-2019-3931/): Command injection in Crestron AirMedia (high 8.8) - [CVE-2019-3930](https://insights.sbomify.com/CVE-2019-3930/): Memory corruption in Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT WIPS710, SHARP PN-L703WA, Optoma WPS-Pro, Blackbox HD WPS, InFocus LiteShow3, and InFocus LiteShow4. (critical 9.8) - [CVE-2019-3929](https://insights.sbomify.com/CVE-2019-3929/): Crestron Multiple Products Command Injection (critical 9.8, exploited in the wild) - [CVE-2019-3928](https://insights.sbomify.com/CVE-2019-3928/): Missing authorization in Crestron AirMedia (medium 5.3) - [CVE-2019-3927](https://insights.sbomify.com/CVE-2019-3927/): Missing authorization in Crestron AirMedia (critical 9.8) - [CVE-2019-3926](https://insights.sbomify.com/CVE-2019-3926/): Command injection in Crestron AirMedia (critical 9.8) --- From sbomify Insights: https://insights.sbomify.com/years/2019/page/46/