# Vulnerabilities published in 2019


- [CVE-2019-3566](https://insights.sbomify.com/CVE-2019-3566/): Business logic in WhatsApp Business for Android (medium 5.9)
- [CVE-2019-3565](https://insights.sbomify.com/CVE-2019-3565/): Denial of service in Facebook Thrift (high 7.5)
- [CVE-2019-3564](https://insights.sbomify.com/CVE-2019-3564/): Improper Input Validation and Excessive Iteration in Go Facebook Thrift (high 7.5)
- [CVE-2019-3563](https://insights.sbomify.com/CVE-2019-3563/): Memory corruption in Wangle (critical 9.8)
- [CVE-2019-3562](https://insights.sbomify.com/CVE-2019-3562/): Cross-site scripting in Oculus Browser (medium 6.1)
- [CVE-2019-3561](https://insights.sbomify.com/CVE-2019-3561/): Memory corruption in HHVM (critical 9.8)
- [CVE-2019-3560](https://insights.sbomify.com/CVE-2019-3560/): Denial of service in fizz (high 7.5)
- [CVE-2019-3559](https://insights.sbomify.com/CVE-2019-3559/): Denial of service in Facebook Thrift (high 7.5)
- [CVE-2019-3558](https://insights.sbomify.com/CVE-2019-3558/): Denial of service in Facebook Thrift (high 7.5)
- [CVE-2019-3557](https://insights.sbomify.com/CVE-2019-3557/): Memory corruption in HHVM (critical 9.8)
- [CVE-2019-3556](https://insights.sbomify.com/CVE-2019-3556/): Path traversal in HHVM (high 8.1)
- [CVE-2019-3554](https://insights.sbomify.com/CVE-2019-3554/): Denial of service in Wangle (medium 5.9)
- [CVE-2019-3553](https://insights.sbomify.com/CVE-2019-3553/): Denial of service in Facebook Thrift (high 7.5)
- [CVE-2019-3552](https://insights.sbomify.com/CVE-2019-3552/): Denial of service in Facebook Thrift (high 7.5)
- [CVE-2019-3501](https://insights.sbomify.com/CVE-2019-3501/): Cross-site scripting in ougc awards project:ougc awards (medium 4.8)
- [CVE-2019-3500](https://insights.sbomify.com/CVE-2019-3500/): Information disclosure in aria2 project:aria2 (high 7.8)
- [CVE-2019-3498](https://insights.sbomify.com/CVE-2019-3498/): Improper Input Validation in Django (medium 6.5)
- [CVE-2019-3497](https://insights.sbomify.com/CVE-2019-3497/): Hardcoded credentials in indionetworks:unibox firmware (high 8.8)
- [CVE-2019-3496](https://insights.sbomify.com/CVE-2019-3496/): Hardcoded credentials in indionetworks:unibox firmware (high 8.8)
- [CVE-2019-3495](https://insights.sbomify.com/CVE-2019-3495/): File upload in indionetworks:unibox firmware (high 8.8)
- [CVE-2019-3494](https://insights.sbomify.com/CVE-2019-3494/): SQL injection in simply-blog project:simply-blog (high 7.5)
- [CVE-2019-3493](https://insights.sbomify.com/CVE-2019-3493/): Other in Micro Focus Network Automation and Micro Focus Network Operations Management (NOM) (high 8.8)
- [CVE-2019-3490](https://insights.sbomify.com/CVE-2019-3490/): Cross-site scripting in Netstorage component of Open Enterprise Server (medium 6.1)
- [CVE-2019-3489](https://insights.sbomify.com/CVE-2019-3489/): File upload in Micro Focus Content Manager (high 7.5)
- [CVE-2019-3486](https://insights.sbomify.com/CVE-2019-3486/): ArcSight Security Management Center stored cross site script issue in version prior to 2.9.1 (medium 4.6)
- [CVE-2019-3485](https://insights.sbomify.com/CVE-2019-3485/): ArcSight Logger stored cross site script issue in version prior to 6.7.1 (medium 4.6)
- [CVE-2019-3484](https://insights.sbomify.com/CVE-2019-3484/): Other in ArcSight Logger (high 7.8)
- [CVE-2019-3483](https://insights.sbomify.com/CVE-2019-3483/): Information disclosure in ArcSight Logger (medium 6.5)
- [CVE-2019-3482](https://insights.sbomify.com/CVE-2019-3482/): Path traversal in ArcSight Logger (medium 6.5)
- [CVE-2019-3481](https://insights.sbomify.com/CVE-2019-3481/): XML external entity in ArcSight Logger (high 7.1)
- [CVE-2019-3480](https://insights.sbomify.com/CVE-2019-3480/): Cross-site scripting in ArcSight Logger (medium 6.1)
- [CVE-2019-3479](https://insights.sbomify.com/CVE-2019-3479/): Other in ArcSight Logger (critical 9.8)
- [CVE-2019-3477](https://insights.sbomify.com/CVE-2019-3477/): Open redirect in Solutions Business Manager (medium 6.1)
- [CVE-2019-3476](https://insights.sbomify.com/CVE-2019-3476/): Other in Micro Focus Data Protector (critical 9.8)
- [CVE-2019-3475](https://insights.sbomify.com/CVE-2019-3475/): Local privilege escalation in Filr famtd (high 7.8)
- [CVE-2019-3474](https://insights.sbomify.com/CVE-2019-3474/): Path traversal vulnerability in Filr web application (medium 6.5)
- [CVE-2019-3467](https://insights.sbomify.com/CVE-2019-3467/): Misconfiguration in Debian Edu (high 7.8)
- [CVE-2019-3466](https://insights.sbomify.com/CVE-2019-3466/): Privilege escalation in postgresql-common (Debian-specific Postgres management tools) (high 7.8)
- [CVE-2019-3465](https://insights.sbomify.com/CVE-2019-3465/): Signature validation bypass in XmlSecLibs (high 8.8)
- [CVE-2019-3464](https://insights.sbomify.com/CVE-2019-3464/): Command injection in rssh (critical 9.8)
- [CVE-2019-3463](https://insights.sbomify.com/CVE-2019-3463/): Command injection in rssh (critical 9.8)
- [CVE-2019-3462](https://insights.sbomify.com/CVE-2019-3462/): Other in apt as used in Debian Stretch and Ubuntu (high 8.1)
- [CVE-2019-3461](https://insights.sbomify.com/CVE-2019-3461/): Race condition in tmpreaper (high 7.0)
- [CVE-2019-3460](https://insights.sbomify.com/CVE-2019-3460/): Information disclosure in Linux (medium 6.5)
- [CVE-2019-3459](https://insights.sbomify.com/CVE-2019-3459/): Information disclosure in Linux (medium 6.5)
- [CVE-2019-3431](https://insights.sbomify.com/CVE-2019-3431/): Weak cryptography in ZXCLOUD GoldenData VAP (critical 9.8)
- [CVE-2019-3430](https://insights.sbomify.com/CVE-2019-3430/): Information disclosure in ZXCLOUD GoldenData VAP (medium 4.9)
- [CVE-2019-3429](https://insights.sbomify.com/CVE-2019-3429/): Information disclosure in ZXCLOUD GoldenData VAP (medium 5.3)
- [CVE-2019-3428](https://insights.sbomify.com/CVE-2019-3428/): Misconfiguration in ZXCDN IAMWEB (medium 6.5)
- [CVE-2019-3427](https://insights.sbomify.com/CVE-2019-3427/): Code injection in ZXCDN IAMWEB (high 7.2)
- [CVE-2019-3426](https://insights.sbomify.com/CVE-2019-3426/): Other in ZXUPN-9000E (high 8.8)
- [CVE-2019-3425](https://insights.sbomify.com/CVE-2019-3425/): Missing authorization in ZXUPN-9000E (high 8.8)
- [CVE-2019-3424](https://insights.sbomify.com/CVE-2019-3424/): Auth bypass in C520V21 (high 8.2)
- [CVE-2019-3423](https://insights.sbomify.com/CVE-2019-3423/): Path traversal in C520V21 (medium 5.3)
- [CVE-2019-3422](https://insights.sbomify.com/CVE-2019-3422/): Information disclosure in MF910S (medium 6.2)
- [CVE-2019-3421](https://insights.sbomify.com/CVE-2019-3421/): Command injection in ZX297520V3 (high 8.0)
- [CVE-2019-3420](https://insights.sbomify.com/CVE-2019-3420/): Information disclosure in ZXHN H108N (medium 6.5)
- [CVE-2019-3419](https://insights.sbomify.com/CVE-2019-3419/): Denial of service in ZXMP M721 DX (medium 5.7)
- [CVE-2019-3418](https://insights.sbomify.com/CVE-2019-3418/): Cross-site scripting in ZXHN F670 (medium 5.7)
- [CVE-2019-3417](https://insights.sbomify.com/CVE-2019-3417/): Command injection in ZXHN F670 (high 8.1)
- [CVE-2019-3416](https://insights.sbomify.com/CVE-2019-3416/): Other in ZXV10 B860A (high 8.1)
- [CVE-2019-3415](https://insights.sbomify.com/CVE-2019-3415/): Path traversal in MW (medium 5.7)
- [CVE-2019-3414](https://insights.sbomify.com/CVE-2019-3414/): Cross-site scripting in OTCP (medium 4.8)
- [CVE-2019-3413](https://insights.sbomify.com/CVE-2019-3413/): Cross-site scripting in NetNumen DAP (medium 5.4)
- [CVE-2019-3412](https://insights.sbomify.com/CVE-2019-3412/): Command injection in ZTE MF920 (critical 9.8)
- [CVE-2019-3411](https://insights.sbomify.com/CVE-2019-3411/): Auth bypass in ZTE MF920 (high 8.1)
- [CVE-2019-3410](https://insights.sbomify.com/CVE-2019-3410/): Cross-site request forgery in ZTE WF820+ LTE Outdoor CPE (medium 4.6)
- [CVE-2019-3409](https://insights.sbomify.com/CVE-2019-3409/): Command injection in ZTE WF820+ LTE Outdoor CPE (critical 9.0)
- [CVE-2019-3405](https://insights.sbomify.com/CVE-2019-3405/): Denial of service in 360F5 (medium 5.3)
- [CVE-2019-3404](https://insights.sbomify.com/CVE-2019-3404/): Auth bypass in 360 Router F5C (high 7.5)
- [CVE-2019-3403](https://insights.sbomify.com/CVE-2019-3403/): Missing authorization in Jira (medium 5.3)
- [CVE-2019-3402](https://insights.sbomify.com/CVE-2019-3402/): Cross-site scripting in Jira (medium 6.1)
- [CVE-2019-3401](https://insights.sbomify.com/CVE-2019-3401/): Missing authorization in Jira (medium 5.3)
- [CVE-2019-3400](https://insights.sbomify.com/CVE-2019-3400/): Cross-site scripting in Jira (medium 6.1)
- [CVE-2019-3399](https://insights.sbomify.com/CVE-2019-3399/): Missing authorization in Jira (high 7.5)
- [CVE-2019-3398](https://insights.sbomify.com/CVE-2019-3398/): Atlassian Confluence Server and Data Center Path Traversal (high 8.8, exploited in the wild)
- [CVE-2019-3397](https://insights.sbomify.com/CVE-2019-3397/): Path traversal in Bitbucket Data Center (critical 9.1)
- [CVE-2019-3396](https://insights.sbomify.com/CVE-2019-3396/): Atlassian Confluence Server and Data Center Server-Side Template Injection (critical 9.8, exploited in the wild)
- [CVE-2019-3395](https://insights.sbomify.com/CVE-2019-3395/): Server-side request forgery in Confluence Server (critical 9.8)
- [CVE-2019-3394](https://insights.sbomify.com/CVE-2019-3394/): Path traversal in Confluence Server (high 8.8)
- [CVE-2019-3031](https://insights.sbomify.com/CVE-2019-3031/): Information disclosure in VM VirtualBox (medium 6.0)
- [CVE-2019-3028](https://insights.sbomify.com/CVE-2019-3028/): Other in VM VirtualBox (high 8.8)
- [CVE-2019-3027](https://insights.sbomify.com/CVE-2019-3027/): Denial of service in Application Object Library (medium 5.3)
- [CVE-2019-3026](https://insights.sbomify.com/CVE-2019-3026/): Information disclosure in VM VirtualBox (medium 6.5)
- [CVE-2019-3025](https://insights.sbomify.com/CVE-2019-3025/): Other in Hospitality RES 3700 (critical 9.0)
- [CVE-2019-3024](https://insights.sbomify.com/CVE-2019-3024/): Other in Installed Base (medium 4.7)
- [CVE-2019-3023](https://insights.sbomify.com/CVE-2019-3023/): Other in PeopleSoft Enterprise PT PeopleTools (medium 4.7)
- [CVE-2019-3022](https://insights.sbomify.com/CVE-2019-3022/): Other in Content Manager (medium 5.8)
- [CVE-2019-3021](https://insights.sbomify.com/CVE-2019-3021/): Denial of service in VM VirtualBox (medium 6.5)
- [CVE-2019-3020](https://insights.sbomify.com/CVE-2019-3020/): Other in Primavera P6 Enterprise Project Portfolio Management (critical 9.3)
- [CVE-2019-3019](https://insights.sbomify.com/CVE-2019-3019/): Other in Banking Digital Experience (medium 5.4)
- [CVE-2019-3018](https://insights.sbomify.com/CVE-2019-3018/): Denial of service in MySQL Server (medium 4.4)
- [CVE-2019-3017](https://insights.sbomify.com/CVE-2019-3017/): Other in VM VirtualBox (high 8.2)
- [CVE-2019-3016](https://insights.sbomify.com/CVE-2019-3016/): Race condition in linux kernel (medium 6.2)
- [CVE-2019-3015](https://insights.sbomify.com/CVE-2019-3015/): Information disclosure in PeopleSoft Enterprise PT PeopleTools (medium 4.3)
- [CVE-2019-3014](https://insights.sbomify.com/CVE-2019-3014/): Cross-site scripting in PeopleSoft Enterprise PT PeopleTools (medium 6.1)
- [CVE-2019-3012](https://insights.sbomify.com/CVE-2019-3012/): Information disclosure in Business Intelligence Enterprise Edition (medium 5.3)
- [CVE-2019-3011](https://insights.sbomify.com/CVE-2019-3011/): Denial of service in MySQL Server (medium 6.5)
- [CVE-2019-3010](https://insights.sbomify.com/CVE-2019-3010/): Oracle Solaris Privilege Escalation (high 8.8, exploited in the wild)
- [CVE-2019-3009](https://insights.sbomify.com/CVE-2019-3009/): Denial of service in MySQL Server (medium 4.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/50/