# Vulnerabilities published in 2019


- [CVE-2019-19664](https://insights.sbomify.com/CVE-2019-19664/): Cross-site request forgery in maxum:rumpus ftp (high 7.1)
- [CVE-2019-19663](https://insights.sbomify.com/CVE-2019-19663/): Cross-site request forgery in maxum:rumpus (medium 6.5)
- [CVE-2019-19662](https://insights.sbomify.com/CVE-2019-19662/): Cross-site request forgery in maxum:rumpus ftp (medium 6.5)
- [CVE-2019-19661](https://insights.sbomify.com/CVE-2019-19661/): Cross-site scripting in maxum:rumpus ftp (medium 6.1)
- [CVE-2019-19660](https://insights.sbomify.com/CVE-2019-19660/): Cross-site request forgery in maxum:rumpus (medium 6.5)
- [CVE-2019-1966](https://insights.sbomify.com/CVE-2019-1966/): Cisco Unified Computing System Fabric Interconnect root Privilege Escalation Vulnerability (high 7.8)
- [CVE-2019-19659](https://insights.sbomify.com/CVE-2019-19659/): Cross-site request forgery in maxum:rumpus (high 8.8)
- [CVE-2019-19650](https://insights.sbomify.com/CVE-2019-19650/): SQL injection in zohocorp:manageengine applications manager (high 8.8)
- [CVE-2019-1965](https://insights.sbomify.com/CVE-2019-1965/): Cisco NX-OS Software Remote Management Memory Leak Denial of Service Vulnerability (high 7.7)
- [CVE-2019-19649](https://insights.sbomify.com/CVE-2019-19649/): SQL injection in zohocorp:manageengine applications manager (critical 9.8)
- [CVE-2019-19648](https://insights.sbomify.com/CVE-2019-19648/): Out-of-bounds read in YARA (high 7.8)
- [CVE-2019-19647](https://insights.sbomify.com/CVE-2019-19647/): Memory corruption in fedoraproject:fedora (high 7.8)
- [CVE-2019-19646](https://insights.sbomify.com/CVE-2019-19646/): Other in netapp:cloud backup (critical 9.8)
- [CVE-2019-19645](https://insights.sbomify.com/CVE-2019-19645/): Denial of service in netapp:cloud backup (medium 5.5)
- [CVE-2019-19643](https://insights.sbomify.com/CVE-2019-19643/): Denial of service in ise:smart connect knx vaillant (high 7.5)
- [CVE-2019-19642](https://insights.sbomify.com/CVE-2019-19642/): Command injection in supermicro:x8sti-f bios (high 8.8)
- [CVE-2019-1964](https://insights.sbomify.com/CVE-2019-1964/): Cisco NX-OS Software IPv6 Denial of Service Vulnerability (high 8.6)
- [CVE-2019-19638](https://insights.sbomify.com/CVE-2019-19638/): Integer overflow in saitoha:libsixel (critical 9.8)
- [CVE-2019-19637](https://insights.sbomify.com/CVE-2019-19637/): Integer overflow in saitoha:libsixel (critical 9.8)
- [CVE-2019-19636](https://insights.sbomify.com/CVE-2019-19636/): Integer overflow in saitoha:libsixel (critical 9.8)
- [CVE-2019-19635](https://insights.sbomify.com/CVE-2019-19635/): Memory corruption in saitoha:libsixel (critical 9.8)
- [CVE-2019-19634](https://insights.sbomify.com/CVE-2019-19634/): class.upload.php in verot.net omits .pht from the set of dangerous file extensions (critical 9.8)
- [CVE-2019-19632](https://insights.sbomify.com/CVE-2019-19632/): Cross-site scripting in bigswitch:big cloud fabric (medium 6.1)
- [CVE-2019-19631](https://insights.sbomify.com/CVE-2019-19631/): Information disclosure in bigswitch:big cloud fabric (high 8.8)
- [CVE-2019-19630](https://insights.sbomify.com/CVE-2019-19630/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2019-1963](https://insights.sbomify.com/CVE-2019-1963/): Cisco FXOS and NX-OS Software Authenticated Simple Network Management Protocol Denial of Service Vulnerability (high 7.7)
- [CVE-2019-19629](https://insights.sbomify.com/CVE-2019-19629/): Information disclosure in gitlab:gitlab (high 7.5)
- [CVE-2019-19628](https://insights.sbomify.com/CVE-2019-19628/): Path traversal in gitlab:gitlab (critical 9.8)
- [CVE-2019-19627](https://insights.sbomify.com/CVE-2019-19627/): Information disclosure in ros:sros2 (high 7.5)
- [CVE-2019-19625](https://insights.sbomify.com/CVE-2019-19625/): Misconfiguration in ros:sros2 (high 7.5)
- [CVE-2019-19624](https://insights.sbomify.com/CVE-2019-19624/): Out-of-bounds Read in OpenCV (medium 6.5)
- [CVE-2019-19620](https://insights.sbomify.com/CVE-2019-19620/): Security feature bypass in dell:red cloak windows agent (low 3.3)
- [CVE-2019-1962](https://insights.sbomify.com/CVE-2019-1962/): Cisco NX-OS Software Cisco Fabric Services over IP Denial of Service Vulnerability (high 8.6)
- [CVE-2019-19619](https://insights.sbomify.com/CVE-2019-19619/): Cross-site Scripting in Documize (medium 6.1)
- [CVE-2019-19617](https://insights.sbomify.com/CVE-2019-19617/): phpMyAdmin unsanitized Git information (critical 9.8)
- [CVE-2019-19616](https://insights.sbomify.com/CVE-2019-19616/): Missing authorization in xtivia:web time and expense (medium 4.3)
- [CVE-2019-19615](https://insights.sbomify.com/CVE-2019-19615/): Cross-site scripting in sangoma:freepbx (medium 4.8)
- [CVE-2019-19614](https://insights.sbomify.com/CVE-2019-19614/): Auth bypass in halvotec:raquest (high 7.5)
- [CVE-2019-19613](https://insights.sbomify.com/CVE-2019-19613/): Open redirect in halvotec:raquest (medium 5.2)
- [CVE-2019-19612](https://insights.sbomify.com/CVE-2019-19612/): Cross-site scripting in halvotec:raquest (medium 5.4)
- [CVE-2019-19611](https://insights.sbomify.com/CVE-2019-19611/): Missing authorization in halvotec:raquest (high 7.5)
- [CVE-2019-19610](https://insights.sbomify.com/CVE-2019-19610/): Auth bypass in halvotec:raquest (medium 5.4)
- [CVE-2019-1961](https://insights.sbomify.com/CVE-2019-1961/): Cisco Enterprise NFV Infrastructure Software Web Portal Arbitrary File Read Vulnerability (medium 4.9)
- [CVE-2019-19609](https://insights.sbomify.com/CVE-2019-19609/): Command Injection in strapi (high 7.2)
- [CVE-2019-19608](https://insights.sbomify.com/CVE-2019-19608/): SQL injection in mitel:micollab audio\, web \& video conferencing (critical 9.8)
- [CVE-2019-19607](https://insights.sbomify.com/CVE-2019-19607/): SQL injection in mitel:micollab audio\, web \& video conferencing (critical 9.8)
- [CVE-2019-19606](https://insights.sbomify.com/CVE-2019-19606/): Path traversal in x-plane:x-plane (critical 9.8)
- [CVE-2019-19605](https://insights.sbomify.com/CVE-2019-19605/): Memory corruption in x-plane:x-plane (critical 9.8)
- [CVE-2019-19604](https://insights.sbomify.com/CVE-2019-19604/): Command injection in debian:debian linux (high 7.8)
- [CVE-2019-19603](https://insights.sbomify.com/CVE-2019-19603/): Denial of service in apache:guacamole (high 7.5)
- [CVE-2019-19602](https://insights.sbomify.com/CVE-2019-19602/): Memory corruption in canonical:ubuntu linux (medium 6.1)
- [CVE-2019-19601](https://insights.sbomify.com/CVE-2019-19601/): Memory corruption in opendetex project:opendetex (high 7.8)
- [CVE-2019-1960](https://insights.sbomify.com/CVE-2019-1960/): Cisco Enterprise NFV Infrastructure Software Arbitrary File Read Vulnerabilities (medium 4.4)
- [CVE-2019-19598](https://insights.sbomify.com/CVE-2019-19598/): Auth bypass in dlink:dap-1860 firmware (high 8.8)
- [CVE-2019-19597](https://insights.sbomify.com/CVE-2019-19597/): Command injection in dlink:dap-1860 firmware (high 8.8)
- [CVE-2019-19596](https://insights.sbomify.com/CVE-2019-19596/): GitBook allows Cross-site Scripting via a local .md file. (medium 5.4)
- [CVE-2019-19595](https://insights.sbomify.com/CVE-2019-19595/): File upload in adobe:stock api integration (critical 9.8)
- [CVE-2019-19594](https://insights.sbomify.com/CVE-2019-19594/): File upload in adobe:stock api integration (critical 9.8)
- [CVE-2019-19592](https://insights.sbomify.com/CVE-2019-19592/): Cross-site scripting in jamasoftware:connect (medium 6.1)
- [CVE-2019-19590](https://insights.sbomify.com/CVE-2019-19590/): Use after free in radare:radare2 (high 7.8)
- [CVE-2019-1959](https://insights.sbomify.com/CVE-2019-1959/): Cisco Enterprise NFV Infrastructure Software Arbitrary File Read Vulnerabilities (medium 4.4)
- [CVE-2019-19589](https://insights.sbomify.com/CVE-2019-19589/): Security feature bypass in wp-pdf:pdf embedder (critical 9.8)
- [CVE-2019-19588](https://insights.sbomify.com/CVE-2019-19588/): Uncontrolled resource consumption in validators Python package (high 7.5)
- [CVE-2019-19587](https://insights.sbomify.com/CVE-2019-19587/): Cross-site scripting in wso2:enterprise integrator (medium 6.1)
- [CVE-2019-19585](https://insights.sbomify.com/CVE-2019-19585/): Privilege escalation in rconfig:rconfig (high 7.8)
- [CVE-2019-19583](https://insights.sbomify.com/CVE-2019-19583/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2019-19582](https://insights.sbomify.com/CVE-2019-19582/): Denial of service in fedoraproject:fedora (medium 6.5)
- [CVE-2019-19581](https://insights.sbomify.com/CVE-2019-19581/): Memory corruption in fedoraproject:fedora (medium 6.5)
- [CVE-2019-19580](https://insights.sbomify.com/CVE-2019-19580/): Race condition in fedoraproject:fedora (medium 6.6)
- [CVE-2019-1958](https://insights.sbomify.com/CVE-2019-1958/): Cisco HyperFlex Software Cross-Site Request Forgery Vulnerability (medium 5.4)
- [CVE-2019-19579](https://insights.sbomify.com/CVE-2019-19579/): Privilege escalation in fedoraproject:fedora (medium 6.8)
- [CVE-2019-19578](https://insights.sbomify.com/CVE-2019-19578/): Denial of service in fedoraproject:fedora (high 8.8)
- [CVE-2019-19577](https://insights.sbomify.com/CVE-2019-19577/): Race condition in fedoraproject:fedora (high 7.2)
- [CVE-2019-19576](https://insights.sbomify.com/CVE-2019-19576/): Remote code execution in verot/class.upload.php (critical 9.8)
- [CVE-2019-1957](https://insights.sbomify.com/CVE-2019-1957/): Cisco IoT Field Network Director TLS Renegotiation Denial of Service Vulnerability (medium 5.3)
- [CVE-2019-19563](https://insights.sbomify.com/CVE-2019-19563/): Misconfiguration in harman:hermes (low 2.4)
- [CVE-2019-19562](https://insights.sbomify.com/CVE-2019-19562/): Auth bypass in harman:hermes (medium 4.6)
- [CVE-2019-19561](https://insights.sbomify.com/CVE-2019-19561/): Misconfiguration in harman:hermes (low 2.4)
- [CVE-2019-19560](https://insights.sbomify.com/CVE-2019-19560/): Auth bypass in harman:hermes (medium 4.6)
- [CVE-2019-1956](https://insights.sbomify.com/CVE-2019-1956/): Cisco SPA112 2-Port Phone Adapter Stored Cross-Site Scripting Vulnerability (medium 4.8)
- [CVE-2019-19557](https://insights.sbomify.com/CVE-2019-19557/): Misconfiguration in harman:hermes (low 2.4)
- [CVE-2019-19556](https://insights.sbomify.com/CVE-2019-19556/): Auth bypass in harman:hermes (medium 4.6)
- [CVE-2019-19555](https://insights.sbomify.com/CVE-2019-19555/): Memory corruption in xfig project:xfig (medium 5.5)
- [CVE-2019-19553](https://insights.sbomify.com/CVE-2019-19553/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2019-19552](https://insights.sbomify.com/CVE-2019-19552/): Cross-site scripting in sangoma:freepbx (medium 4.8)
- [CVE-2019-19551](https://insights.sbomify.com/CVE-2019-19551/): Cross-site scripting in sangoma:freepbx (medium 4.8)
- [CVE-2019-19550](https://insights.sbomify.com/CVE-2019-19550/): Auth bypass in senior:rubiweb (high 7.5)
- [CVE-2019-1955](https://insights.sbomify.com/CVE-2019-1955/): Cisco Email Security Appliance Header Injection Vulnerability (medium 5.3)
- [CVE-2019-19548](https://insights.sbomify.com/CVE-2019-19548/): Privilege escalation in Norton Power Eraser (high 7.8)
- [CVE-2019-19547](https://insights.sbomify.com/CVE-2019-19547/): Cross-site scripting in Endpoint Detection and Response (SEDR) (medium 6.1)
- [CVE-2019-19546](https://insights.sbomify.com/CVE-2019-19546/): Information disclosure in Norton Password Manager (medium 6.5)
- [CVE-2019-19545](https://insights.sbomify.com/CVE-2019-19545/): Misconfiguration in Norton Password Manager (medium 6.3)
- [CVE-2019-19544](https://insights.sbomify.com/CVE-2019-19544/): Privilege escalation in CA Automic Dollar Universe (high 7.8)
- [CVE-2019-19543](https://insights.sbomify.com/CVE-2019-19543/): Use after free in linux:linux kernel (high 7.8)
- [CVE-2019-19542](https://insights.sbomify.com/CVE-2019-19542/): Cross-site scripting in cridio:listingpro (medium 5.4)
- [CVE-2019-19541](https://insights.sbomify.com/CVE-2019-19541/): Cross-site scripting in cridio:listingpro (medium 5.4)
- [CVE-2019-19540](https://insights.sbomify.com/CVE-2019-19540/): Cross-site scripting in cridio:listingpro (medium 6.1)
- [CVE-2019-1954](https://insights.sbomify.com/CVE-2019-1954/): Cisco Webex Meetings Server Open Redirection Vulnerability (medium 4.3)
- [CVE-2019-19539](https://insights.sbomify.com/CVE-2019-19539/): Information disclosure in hp:web viewpoint t0320 (medium 5.5)
- [CVE-2019-19538](https://insights.sbomify.com/CVE-2019-19538/): Command injection in sangoma:freepbx (high 7.2)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/77/