# Vulnerabilities published in 2019


- [CVE-2019-19896](https://insights.sbomify.com/CVE-2019-19896/): Misconfiguration in ixpdata:easyinstall (critical 9.9)
- [CVE-2019-19895](https://insights.sbomify.com/CVE-2019-19895/): Privilege escalation in ixpdata:easyinstall (high 8.8)
- [CVE-2019-19894](https://insights.sbomify.com/CVE-2019-19894/): Misconfiguration in ixpdata:easyinstall (medium 5.5)
- [CVE-2019-19893](https://insights.sbomify.com/CVE-2019-19893/): Path traversal in ixpdata:easyinstall (high 7.5)
- [CVE-2019-19891](https://insights.sbomify.com/CVE-2019-19891/): Weak cryptography in mitel:sip-dect firmware (medium 5.9)
- [CVE-2019-19890](https://insights.sbomify.com/CVE-2019-19890/): Information disclosure in humaxdigital:hgb10r-02 firmware (high 7.5)
- [CVE-2019-1989](https://insights.sbomify.com/CVE-2019-1989/): Memory corruption in Android (high 8.8)
- [CVE-2019-19889](https://insights.sbomify.com/CVE-2019-19889/): Information disclosure in humaxdigital:hgb10r-02 firmware (high 7.5)
- [CVE-2019-19888](https://insights.sbomify.com/CVE-2019-19888/): Denial of service in rockcarry:ffjpeg (medium 6.5)
- [CVE-2019-19887](https://insights.sbomify.com/CVE-2019-19887/): Null dereference in rockcarry:ffjpeg (medium 6.5)
- [CVE-2019-19886](https://insights.sbomify.com/CVE-2019-19886/): Denial of service in fedoraproject:fedora (high 7.5)
- [CVE-2019-19885](https://insights.sbomify.com/CVE-2019-19885/): Missing authorization in bender:com465dp firmware (critical 9.1)
- [CVE-2019-19882](https://insights.sbomify.com/CVE-2019-19882/): Privilege escalation in shadow project:shadow (high 7.8)
- [CVE-2019-19880](https://insights.sbomify.com/CVE-2019-19880/): Null dereference in debian:debian linux (high 7.5)
- [CVE-2019-1988](https://insights.sbomify.com/CVE-2019-1988/): Memory corruption in Android (high 8.8)
- [CVE-2019-19879](https://insights.sbomify.com/CVE-2019-19879/): Security feature bypass in hashicorp:sentinel (high 7.5)
- [CVE-2019-19878](https://insights.sbomify.com/CVE-2019-19878/): Auth bypass in br-automation:industrial automation aprol (high 7.5)
- [CVE-2019-19877](https://insights.sbomify.com/CVE-2019-19877/): Path traversal in br-automation:industrial automation aprol (medium 5.3)
- [CVE-2019-19876](https://insights.sbomify.com/CVE-2019-19876/): SQL injection in br-automation:industrial automation aprol (critical 9.8)
- [CVE-2019-19875](https://insights.sbomify.com/CVE-2019-19875/): Command injection in br-automation:industrial automation aprol (critical 9.8)
- [CVE-2019-19874](https://insights.sbomify.com/CVE-2019-19874/): Command injection in br-automation:industrial automation aprol (critical 9.8)
- [CVE-2019-19873](https://insights.sbomify.com/CVE-2019-19873/): Auth bypass in br-automation:industrial automation aprol (high 7.5)
- [CVE-2019-19872](https://insights.sbomify.com/CVE-2019-19872/): Command injection in br-automation:industrial automation aprol (critical 9.8)
- [CVE-2019-1987](https://insights.sbomify.com/CVE-2019-1987/): Memory corruption in Android (high 7.8)
- [CVE-2019-19869](https://insights.sbomify.com/CVE-2019-19869/): Missing authorization in br-automation:industrial automation aprol (high 7.5)
- [CVE-2019-19866](https://insights.sbomify.com/CVE-2019-19866/): Information disclosure in atos:unify openscape uc web client (high 7.5)
- [CVE-2019-19865](https://insights.sbomify.com/CVE-2019-19865/): Cross-site scripting in atos:unify openscape uc web client (medium 6.1)
- [CVE-2019-1986](https://insights.sbomify.com/CVE-2019-1986/): Memory corruption in Android (high 8.8)
- [CVE-2019-19859](https://insights.sbomify.com/CVE-2019-19859/): Other in serpico project:serpico (medium 5.3)
- [CVE-2019-19858](https://insights.sbomify.com/CVE-2019-19858/): Cross-site scripting in serpico project:serpico (medium 4.8)
- [CVE-2019-19857](https://insights.sbomify.com/CVE-2019-19857/): Auth bypass in serpico project:serpico (medium 6.5)
- [CVE-2019-19856](https://insights.sbomify.com/CVE-2019-19856/): Cross-site scripting in serpico project:serpico (medium 4.8)
- [CVE-2019-19855](https://insights.sbomify.com/CVE-2019-19855/): Cross-site scripting in serpico project:serpico (medium 4.8)
- [CVE-2019-19854](https://insights.sbomify.com/CVE-2019-19854/): Cross-site request forgery in serpico project:serpico (high 8.8)
- [CVE-2019-19852](https://insights.sbomify.com/CVE-2019-19852/): Cross-site scripting in sangoma:freepbx (medium 4.8)
- [CVE-2019-19851](https://insights.sbomify.com/CVE-2019-19851/): Cross-site scripting in sangoma:freepbx (medium 4.8)
- [CVE-2019-19850](https://insights.sbomify.com/CVE-2019-19850/): TYPO3 SQL Injection in low-level Query Generator (medium 5.5)
- [CVE-2019-1985](https://insights.sbomify.com/CVE-2019-1985/): Security feature bypass in Android (high 7.8)
- [CVE-2019-19849](https://insights.sbomify.com/CVE-2019-19849/): TYPO3 Insecure Deserialization in Query Generator & Query View (high 8.8)
- [CVE-2019-19848](https://insights.sbomify.com/CVE-2019-19848/): TYPO3 Directory Traversal on ZIP extraction (medium 6.8)
- [CVE-2019-19847](https://insights.sbomify.com/CVE-2019-19847/): Memory corruption in libspiro project:libspiro (high 8.1)
- [CVE-2019-19846](https://insights.sbomify.com/CVE-2019-19846/): SQL injection in joomla:joomla\! (critical 9.8)
- [CVE-2019-19845](https://insights.sbomify.com/CVE-2019-19845/): Path traversal in joomla:joomla\! (medium 5.3)
- [CVE-2019-19844](https://insights.sbomify.com/CVE-2019-19844/): Django Potential account hijack via password reset form (critical 9.8)
- [CVE-2019-19843](https://insights.sbomify.com/CVE-2019-19843/): Information disclosure in ruckuswireless:unleashed (critical 9.8)
- [CVE-2019-19842](https://insights.sbomify.com/CVE-2019-19842/): Command injection in ruckuswireless:unleashed (critical 9.8)
- [CVE-2019-19841](https://insights.sbomify.com/CVE-2019-19841/): Command injection in ruckuswireless:unleashed (critical 9.8)
- [CVE-2019-19840](https://insights.sbomify.com/CVE-2019-19840/): Memory corruption in ruckuswireless:unleashed (critical 9.8)
- [CVE-2019-1984](https://insights.sbomify.com/CVE-2019-1984/): Cisco Enterprise Network Functions Virtualization Infrastructure Software Arbitrary File Write Vulnerability (medium 6.5)
- [CVE-2019-19839](https://insights.sbomify.com/CVE-2019-19839/): Command injection in ruckuswireless:unleashed (critical 9.8)
- [CVE-2019-19838](https://insights.sbomify.com/CVE-2019-19838/): Command injection in ruckuswireless:unleashed (critical 9.8)
- [CVE-2019-19837](https://insights.sbomify.com/CVE-2019-19837/): Missing authorization in ruckuswireless:unleashed (medium 5.3)
- [CVE-2019-19836](https://insights.sbomify.com/CVE-2019-19836/): Code injection in ruckuswireless:unleashed (critical 9.8)
- [CVE-2019-19835](https://insights.sbomify.com/CVE-2019-19835/): Server-side request forgery in ruckuswireless:unleashed (high 7.5)
- [CVE-2019-19834](https://insights.sbomify.com/CVE-2019-19834/): Path traversal in ruckuswireless:unleashed (high 7.2)
- [CVE-2019-19833](https://insights.sbomify.com/CVE-2019-19833/): Cross-site request forgery in tautulli:tautulli (medium 6.5)
- [CVE-2019-19832](https://insights.sbomify.com/CVE-2019-19832/): Cross-site request forgery in xerox:altalink c8035 firmware (high 8.8)
- [CVE-2019-19830](https://insights.sbomify.com/CVE-2019-19830/): Other in canonical:ubuntu linux (medium 6.5)
- [CVE-2019-1983](https://insights.sbomify.com/CVE-2019-1983/): Cisco Email Security Appliance and Cisco Content Security Management Appliance Denial of Service Vulnerability (high 7.5)
- [CVE-2019-19829](https://insights.sbomify.com/CVE-2019-19829/): Cross-site scripting in solarwinds:serv-u ftp server (medium 5.4)
- [CVE-2019-19826](https://insights.sbomify.com/CVE-2019-19826/): Deserialization in drupal:views dynamic field (high 8.1)
- [CVE-2019-19825](https://insights.sbomify.com/CVE-2019-19825/): Security feature bypass in totolink:a3002ru firmware (critical 9.8)
- [CVE-2019-19824](https://insights.sbomify.com/CVE-2019-19824/): Command injection in totolink:a3002ru firmware (high 8.8)
- [CVE-2019-19823](https://insights.sbomify.com/CVE-2019-19823/): Information disclosure in ciktel:mesh router firmware (high 7.5)
- [CVE-2019-19822](https://insights.sbomify.com/CVE-2019-19822/): Missing authorization in ciktel:mesh router firmware (high 7.5)
- [CVE-2019-19821](https://insights.sbomify.com/CVE-2019-19821/): Privilege escalation in combodo:itop (high 8.1)
- [CVE-2019-19820](https://insights.sbomify.com/CVE-2019-19820/): Memory corruption in kyrol:internet security (high 7.8)
- [CVE-2019-1982](https://insights.sbomify.com/CVE-2019-1982/): Cisco Firepower Threat Defense Software HTTP Filtering Bypass Vulnerability (medium 5.8)
- [CVE-2019-19819](https://insights.sbomify.com/CVE-2019-19819/): Null dereference in gonitro:nitropdf (medium 5.5)
- [CVE-2019-19818](https://insights.sbomify.com/CVE-2019-19818/): Memory corruption in gonitro:nitro free pdf reader (medium 5.5)
- [CVE-2019-19817](https://insights.sbomify.com/CVE-2019-19817/): Memory corruption in gonitro:nitro free pdf reader (medium 5.5)
- [CVE-2019-19816](https://insights.sbomify.com/CVE-2019-19816/): Memory corruption in canonical:ubuntu linux (high 7.8)
- [CVE-2019-19815](https://insights.sbomify.com/CVE-2019-19815/): Null dereference in linux:linux kernel (medium 5.5)
- [CVE-2019-19814](https://insights.sbomify.com/CVE-2019-19814/): Memory corruption in linux:linux kernel (high 7.8)
- [CVE-2019-19813](https://insights.sbomify.com/CVE-2019-19813/): Use after free in canonical:ubuntu linux (medium 5.5)
- [CVE-2019-19810](https://insights.sbomify.com/CVE-2019-19810/): Deserialization in eleveo:call recording (critical 10.0)
- [CVE-2019-1981](https://insights.sbomify.com/CVE-2019-1981/): Cisco Firepower Threat Defense Software NULL Character Obfuscation Detection Bypass Vulnerability (medium 5.8)
- [CVE-2019-19807](https://insights.sbomify.com/CVE-2019-19807/): Use after free in canonical:ubuntu linux (high 7.8)
- [CVE-2019-19806](https://insights.sbomify.com/CVE-2019-19806/): Information disclosure in mfscripts:yetishare (medium 5.3)
- [CVE-2019-19805](https://insights.sbomify.com/CVE-2019-19805/): Information disclosure in mfscripts:yetishare (medium 5.3)
- [CVE-2019-19802](https://insights.sbomify.com/CVE-2019-19802/): Missing authorization in gallagher:command centre (medium 6.5)
- [CVE-2019-19801](https://insights.sbomify.com/CVE-2019-19801/): Missing authorization in gallagher:command centre (medium 5.5)
- [CVE-2019-19800](https://insights.sbomify.com/CVE-2019-19800/): Missing authorization in zohocorp:manageengine applications manager (medium 5.3)
- [CVE-2019-1980](https://insights.sbomify.com/CVE-2019-1980/): Cisco Firepower Threat Defense Software Nonstandard Protocol Detection Bypass Vulnerability (medium 5.8)
- [CVE-2019-19799](https://insights.sbomify.com/CVE-2019-19799/): Missing authorization in zohocorp:manageengine applications manager (medium 5.3)
- [CVE-2019-19797](https://insights.sbomify.com/CVE-2019-19797/): Memory corruption in debian:debian linux (medium 5.5)
- [CVE-2019-19796](https://insights.sbomify.com/CVE-2019-19796/): Memory corruption in yabasic:yabasic (high 7.8)
- [CVE-2019-19795](https://insights.sbomify.com/CVE-2019-19795/): Memory corruption in samurai project:samurai (high 7.8)
- [CVE-2019-19794](https://insights.sbomify.com/CVE-2019-19794/): miekg/dns insecurely generates random numbers (medium 5.9)
- [CVE-2019-19793](https://insights.sbomify.com/CVE-2019-19793/): Race condition in cyxtera:appgate sdp (high 8.8)
- [CVE-2019-19792](https://insights.sbomify.com/CVE-2019-19792/): Privilege escalation in eset:cyber security (medium 5.2)
- [CVE-2019-19791](https://insights.sbomify.com/CVE-2019-19791/): Auth bypass in lemonldap-ng:lemonldap\ (critical 9.8)
- [CVE-2019-19790](https://insights.sbomify.com/CVE-2019-19790/): Path traversal in progress:telerik ui for asp.net ajax (critical 9.8)
- [CVE-2019-19789](https://insights.sbomify.com/CVE-2019-19789/): Null dereference in codesys:plcwinnt (medium 6.5)
- [CVE-2019-19788](https://insights.sbomify.com/CVE-2019-19788/): Security feature bypass in Opera for Android (medium 5.5)
- [CVE-2019-19787](https://insights.sbomify.com/CVE-2019-19787/): Memory corruption in atasm project:atasm (high 7.8)
- [CVE-2019-19786](https://insights.sbomify.com/CVE-2019-19786/): Memory corruption in atasm project:atasm (high 7.8)
- [CVE-2019-19785](https://insights.sbomify.com/CVE-2019-19785/): Memory corruption in atasm project:atasm (high 7.8)
- [CVE-2019-19783](https://insights.sbomify.com/CVE-2019-19783/): Privilege escalation in canonical:ubuntu linux (medium 6.5)
- [CVE-2019-19782](https://insights.sbomify.com/CVE-2019-19782/): Memory corruption in labf:aceaxe plus (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/75/