# Vulnerabilities published in 2019


- [CVE-2019-3925](https://insights.sbomify.com/CVE-2019-3925/): Command injection in Crestron AirMedia (critical 9.8)
- [CVE-2019-3924](https://insights.sbomify.com/CVE-2019-3924/): Server-side request forgery in MikroTik RouterOS (high 7.5)
- [CVE-2019-3923](https://insights.sbomify.com/CVE-2019-3923/): Cross-site scripting in Tenable Nessus (medium 5.4)
- [CVE-2019-3922](https://insights.sbomify.com/CVE-2019-3922/): Memory corruption in Alcatel Lucent I-240W-Q GPON ONT (critical 9.8)
- [CVE-2019-3921](https://insights.sbomify.com/CVE-2019-3921/): Memory corruption in Alcatel Lucent I-240W-Q GPON ONT (high 8.8)
- [CVE-2019-3920](https://insights.sbomify.com/CVE-2019-3920/): Command injection in Alcatel Lucent I-240W-Q GPON ONT (high 8.8)
- [CVE-2019-3919](https://insights.sbomify.com/CVE-2019-3919/): Command injection in Alcatel Lucent I-240W-Q GPON ONT (high 8.8)
- [CVE-2019-3918](https://insights.sbomify.com/CVE-2019-3918/): Hardcoded credentials in Alcatel Lucent I-240W-Q GPON ONT (critical 9.8)
- [CVE-2019-3917](https://insights.sbomify.com/CVE-2019-3917/): Missing authorization in Alcatel Lucent I-240W-Q GPON ONT (high 7.5)
- [CVE-2019-3916](https://insights.sbomify.com/CVE-2019-3916/): Information disclosure in Fios Quantum Gateway (G1100) (high 7.5)
- [CVE-2019-3915](https://insights.sbomify.com/CVE-2019-3915/): Auth bypass in Fios Quantum Gateway (G1100) (high 7.5)
- [CVE-2019-3914](https://insights.sbomify.com/CVE-2019-3914/): Command injection in Fios Quantum Gateway (G1100) (high 7.2)
- [CVE-2019-3913](https://insights.sbomify.com/CVE-2019-3913/): Command injection in LabKey Server Community Edition (medium 4.9)
- [CVE-2019-3912](https://insights.sbomify.com/CVE-2019-3912/): Open redirect in LabKey Server Community Edition (medium 6.1)
- [CVE-2019-3911](https://insights.sbomify.com/CVE-2019-3911/): Cross-site scripting in LabKey Server Community Edition (medium 6.1)
- [CVE-2019-3910](https://insights.sbomify.com/CVE-2019-3910/): Auth bypass in Crestron AM-100 Before 1.6.0.2 (critical 9.1)
- [CVE-2019-3909](https://insights.sbomify.com/CVE-2019-3909/): Hardcoded credentials in Premisys Identicard 3.1.190 (critical 9.8)
- [CVE-2019-3908](https://insights.sbomify.com/CVE-2019-3908/): Hardcoded credentials in Premisys Identicard 3.1.190 (high 7.5)
- [CVE-2019-3907](https://insights.sbomify.com/CVE-2019-3907/): Weak cryptography in Premisys Identicard 3.1.190 (high 7.5)
- [CVE-2019-3906](https://insights.sbomify.com/CVE-2019-3906/): Hardcoded credentials in Premisys Identicard 3.1.190 (high 8.8)
- [CVE-2019-3905](https://insights.sbomify.com/CVE-2019-3905/): Server-side request forgery in zohocorp:manageengine adselfservice plus (critical 10.0)
- [CVE-2019-3902](https://insights.sbomify.com/CVE-2019-3902/): Mercurial Path Traversal/Link Following vulnerability (medium 5.1)
- [CVE-2019-3901](https://insights.sbomify.com/CVE-2019-3901/): Race condition in kernel (medium 5.6)
- [CVE-2019-3900](https://insights.sbomify.com/CVE-2019-3900/): Denial of service in Kernel (medium 6.3)
- [CVE-2019-3899](https://insights.sbomify.com/CVE-2019-3899/): Missing authorization in heketi (high 7.3)
- [CVE-2019-3897](https://insights.sbomify.com/CVE-2019-3897/): Information disclosure in redhat-certification (medium 5.3)
- [CVE-2019-3896](https://insights.sbomify.com/CVE-2019-3896/): Memory corruption in kernel (high 7.0)
- [CVE-2019-3895](https://insights.sbomify.com/CVE-2019-3895/): Openstack Octavia Access Control Vulnerability (medium 5.5)
- [CVE-2019-3894](https://insights.sbomify.com/CVE-2019-3894/): Security feature bypass in wildfly (medium 5.4)
- [CVE-2019-3893](https://insights.sbomify.com/CVE-2019-3893/): Information disclosure in foreman (medium 4.9)
- [CVE-2019-3891](https://insights.sbomify.com/CVE-2019-3891/): Information disclosure in candlepin (medium 5.5)
- [CVE-2019-3890](https://insights.sbomify.com/CVE-2019-3890/): Security feature bypass in evolution-ews (high 8.1)
- [CVE-2019-3889](https://insights.sbomify.com/CVE-2019-3889/): Cross-site scripting in atomic-openshift (medium 4.6)
- [CVE-2019-3888](https://insights.sbomify.com/CVE-2019-3888/): Credential exposure through log files in Undertow (medium 5.3)
- [CVE-2019-3887](https://insights.sbomify.com/CVE-2019-3887/): Missing authorization in Kernel (medium 6.7)
- [CVE-2019-3886](https://insights.sbomify.com/CVE-2019-3886/): Missing authorization in libvirt (medium 5.4)
- [CVE-2019-3885](https://insights.sbomify.com/CVE-2019-3885/): Use after free in pacemaker (low 3.3)
- [CVE-2019-3884](https://insights.sbomify.com/CVE-2019-3884/): Auth bypass in atomic-openshift (low 3.6)
- [CVE-2019-3883](https://insights.sbomify.com/CVE-2019-3883/): Denial of service in 389-ds-base (medium 5.3)
- [CVE-2019-3882](https://insights.sbomify.com/CVE-2019-3882/): Denial of service in kernel (medium 4.7)
- [CVE-2019-3881](https://insights.sbomify.com/CVE-2019-3881/): Insecure path handling in Bundler (high 7.8)
- [CVE-2019-3880](https://insights.sbomify.com/CVE-2019-3880/): Path traversal in samba (medium 4.2)
- [CVE-2019-3879](https://insights.sbomify.com/CVE-2019-3879/): Missing authorization in ovirt-engine (medium 6.5)
- [CVE-2019-3878](https://insights.sbomify.com/CVE-2019-3878/): Auth bypass in mod auth mellon (high 8.1)
- [CVE-2019-3877](https://insights.sbomify.com/CVE-2019-3877/): Open redirect in mod auth mellon (medium 5.8)
- [CVE-2019-3876](https://insights.sbomify.com/CVE-2019-3876/): Cross-site request forgery in web-console (medium 5.0)
- [CVE-2019-3875](https://insights.sbomify.com/CVE-2019-3875/): Improper Certificate Validation and Insufficient Verification of Data Authenticity in Keycloak (medium 6.5)
- [CVE-2019-3874](https://insights.sbomify.com/CVE-2019-3874/): Denial of service in kernel (medium 5.3)
- [CVE-2019-3873](https://insights.sbomify.com/CVE-2019-3873/): Cross-site scripting in picketlink (medium 6.4)
- [CVE-2019-3872](https://insights.sbomify.com/CVE-2019-3872/): Cross-site scripting in picketlink (medium 5.4)
- [CVE-2019-3871](https://insights.sbomify.com/CVE-2019-3871/): Server-side request forgery in pdns (medium 6.5)
- [CVE-2019-3870](https://insights.sbomify.com/CVE-2019-3870/): Misconfiguration in samba (medium 6.1)
- [CVE-2019-3869](https://insights.sbomify.com/CVE-2019-3869/): Information disclosure in Tower (high 7.2)
- [CVE-2019-3868](https://insights.sbomify.com/CVE-2019-3868/): Exposure of Sensitive Information to an Unauthorized Actor in Keycloak (low 3.8)
- [CVE-2019-3867](https://insights.sbomify.com/CVE-2019-3867/): Auth bypass in quay (medium 4.1)
- [CVE-2019-3866](https://insights.sbomify.com/CVE-2019-3866/): Misconfiguration in openstack-mistral (medium 5.9)
- [CVE-2019-3865](https://insights.sbomify.com/CVE-2019-3865/): Cross-site scripting in quay (medium 4.7)
- [CVE-2019-3864](https://insights.sbomify.com/CVE-2019-3864/): Cross-site request forgery in quay (medium 5.4)
- [CVE-2019-3863](https://insights.sbomify.com/CVE-2019-3863/): Memory corruption in libssh2 (high 7.5)
- [CVE-2019-3862](https://insights.sbomify.com/CVE-2019-3862/): Memory corruption in libssh2 (high 7.3)
- [CVE-2019-3861](https://insights.sbomify.com/CVE-2019-3861/): Memory corruption in libssh2 (medium 5.0)
- [CVE-2019-3860](https://insights.sbomify.com/CVE-2019-3860/): Memory corruption in libssh2 (medium 5.0)
- [CVE-2019-3859](https://insights.sbomify.com/CVE-2019-3859/): Memory corruption in libssh2 (medium 5.0)
- [CVE-2019-3858](https://insights.sbomify.com/CVE-2019-3858/): Memory corruption in libssh2 (medium 5.0)
- [CVE-2019-3857](https://insights.sbomify.com/CVE-2019-3857/): Integer overflow in libssh2 (high 7.5)
- [CVE-2019-3856](https://insights.sbomify.com/CVE-2019-3856/): Integer overflow in libssh2 (high 7.5)
- [CVE-2019-3855](https://insights.sbomify.com/CVE-2019-3855/): Integer overflow in libssh2 (high 7.5)
- [CVE-2019-3852](https://insights.sbomify.com/CVE-2019-3852/): Moodle context freezing (medium 4.3)
- [CVE-2019-3851](https://insights.sbomify.com/CVE-2019-3851/): Moodle Secure layout contained an insecure link in Boost theme (medium 4.3)
- [CVE-2019-3850](https://insights.sbomify.com/CVE-2019-3850/): Moodle Stored HTML in assignment submission comments allowed links to be opened directly (medium 4.3)
- [CVE-2019-3849](https://insights.sbomify.com/CVE-2019-3849/): Moodle Users could elevate their role when accessing the LTI tool on a provider site (medium 6.3)
- [CVE-2019-3848](https://insights.sbomify.com/CVE-2019-3848/): Moodle Logged in users could view all calendar events (medium 4.3)
- [CVE-2019-3847](https://insights.sbomify.com/CVE-2019-3847/): Moodle XSS Vulnerability (medium 5.4)
- [CVE-2019-3846](https://insights.sbomify.com/CVE-2019-3846/): Memory corruption in kernel (high 8.0)
- [CVE-2019-3845](https://insights.sbomify.com/CVE-2019-3845/): Missing authorization in qpid-dispatch-router (high 8.0)
- [CVE-2019-3844](https://insights.sbomify.com/CVE-2019-3844/): Privilege escalation in systemd (medium 4.5)
- [CVE-2019-3843](https://insights.sbomify.com/CVE-2019-3843/): Privilege escalation in systemd (medium 4.5)
- [CVE-2019-3842](https://insights.sbomify.com/CVE-2019-3842/): Security feature bypass in systemd (medium 4.5)
- [CVE-2019-3841](https://insights.sbomify.com/CVE-2019-3841/): Security feature bypass in kubevirt/virt-cdi-importer (high 7.4)
- [CVE-2019-3840](https://insights.sbomify.com/CVE-2019-3840/): Null dereference in libvirt (medium 5.8)
- [CVE-2019-3839](https://insights.sbomify.com/CVE-2019-3839/): Security feature bypass in ghostscript (high 7.3)
- [CVE-2019-3838](https://insights.sbomify.com/CVE-2019-3838/): Security feature bypass in ghostscript (high 7.3)
- [CVE-2019-3837](https://insights.sbomify.com/CVE-2019-3837/): Race condition in kernel (medium 6.1)
- [CVE-2019-3836](https://insights.sbomify.com/CVE-2019-3836/): Memory corruption in gnutls (medium 5.9)
- [CVE-2019-3835](https://insights.sbomify.com/CVE-2019-3835/): Security feature bypass in ghostscript (high 7.3)
- [CVE-2019-3834](https://insights.sbomify.com/CVE-2019-3834/): Other in struts (medium 5.6)
- [CVE-2019-3833](https://insights.sbomify.com/CVE-2019-3833/): Denial of service in openwsman (high 7.5)
- [CVE-2019-3832](https://insights.sbomify.com/CVE-2019-3832/): Memory corruption in libsndfile (low 3.3)
- [CVE-2019-3831](https://insights.sbomify.com/CVE-2019-3831/): Privilege escalation in vdsm (medium 6.4)
- [CVE-2019-3830](https://insights.sbomify.com/CVE-2019-3830/): Ceilometer Prints Sensitive Configuration Data to Log (medium 4.0)
- [CVE-2019-3829](https://insights.sbomify.com/CVE-2019-3829/): Memory corruption in gnutls (medium 5.3)
- [CVE-2019-3828](https://insights.sbomify.com/CVE-2019-3828/): Ansible Path Traversal vulnerability (medium 4.2)
- [CVE-2019-3827](https://insights.sbomify.com/CVE-2019-3827/): Missing authorization in gvfs (high 7.0)
- [CVE-2019-3826](https://insights.sbomify.com/CVE-2019-3826/): Cross-site scripting in prometheus (medium 6.1)
- [CVE-2019-3825](https://insights.sbomify.com/CVE-2019-3825/): Auth bypass in gdm (medium 6.3)
- [CVE-2019-3824](https://insights.sbomify.com/CVE-2019-3824/): Memory corruption in canonical:ubuntu linux (medium 6.5)
- [CVE-2019-3823](https://insights.sbomify.com/CVE-2019-3823/): Memory corruption in curl (medium 4.3)
- [CVE-2019-3822](https://insights.sbomify.com/CVE-2019-3822/): Memory corruption in curl (high 7.1)
- [CVE-2019-3821](https://insights.sbomify.com/CVE-2019-3821/): Denial of service in ceph (high 7.5)
- [CVE-2019-3820](https://insights.sbomify.com/CVE-2019-3820/): Security feature bypass in gnome-shell (medium 4.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/47/