# Vulnerabilities published in 2019


- [CVE-2019-19537](https://insights.sbomify.com/CVE-2019-19537/): Race condition in linux:linux kernel (medium 4.2)
- [CVE-2019-19536](https://insights.sbomify.com/CVE-2019-19536/): Information disclosure in debian:debian linux (medium 4.6)
- [CVE-2019-19535](https://insights.sbomify.com/CVE-2019-19535/): Information disclosure in debian:debian linux (medium 4.6)
- [CVE-2019-19534](https://insights.sbomify.com/CVE-2019-19534/): Information disclosure in canonical:ubuntu linux (low 2.4)
- [CVE-2019-19533](https://insights.sbomify.com/CVE-2019-19533/): Information disclosure in linux:linux kernel (low 2.4)
- [CVE-2019-19532](https://insights.sbomify.com/CVE-2019-19532/): Memory corruption in linux:linux kernel (medium 6.8)
- [CVE-2019-19531](https://insights.sbomify.com/CVE-2019-19531/): Use after free in debian:debian linux (medium 6.8)
- [CVE-2019-19530](https://insights.sbomify.com/CVE-2019-19530/): Use after free in debian:debian linux (medium 4.6)
- [CVE-2019-1953](https://insights.sbomify.com/CVE-2019-1953/): Cisco Enterprise NFV Infrastructure Software Password Recovery Vulnerability (medium 6.5)
- [CVE-2019-19529](https://insights.sbomify.com/CVE-2019-19529/): Use after free in canonical:ubuntu linux (medium 6.3)
- [CVE-2019-19528](https://insights.sbomify.com/CVE-2019-19528/): Use after free in linux:linux kernel (medium 6.1)
- [CVE-2019-19527](https://insights.sbomify.com/CVE-2019-19527/): Use after free in debian:debian linux (medium 6.8)
- [CVE-2019-19526](https://insights.sbomify.com/CVE-2019-19526/): Use after free in canonical:ubuntu linux (medium 4.6)
- [CVE-2019-19525](https://insights.sbomify.com/CVE-2019-19525/): Use after free in debian:debian linux (medium 4.6)
- [CVE-2019-19524](https://insights.sbomify.com/CVE-2019-19524/): Use after free in canonical:ubuntu linux (medium 4.6)
- [CVE-2019-19523](https://insights.sbomify.com/CVE-2019-19523/): Use after free in debian:debian linux (medium 4.6)
- [CVE-2019-19522](https://insights.sbomify.com/CVE-2019-19522/): Privilege escalation in openbsd:openbsd (high 7.8)
- [CVE-2019-19521](https://insights.sbomify.com/CVE-2019-19521/): Auth bypass in openbsd:openbsd (critical 9.8)
- [CVE-2019-19520](https://insights.sbomify.com/CVE-2019-19520/): Privilege escalation in openbsd:openbsd (high 7.8)
- [CVE-2019-1952](https://insights.sbomify.com/CVE-2019-1952/): Cisco Enterprise NFV Infrastructure Software Path Traversal Vulnerability (medium 6.7)
- [CVE-2019-19519](https://insights.sbomify.com/CVE-2019-19519/): Privilege escalation in openbsd:openbsd (high 7.8)
- [CVE-2019-19518](https://insights.sbomify.com/CVE-2019-19518/): Auth bypass in CA Automic Sysload (critical 9.8)
- [CVE-2019-19517](https://insights.sbomify.com/CVE-2019-19517/): Cross-site request forgery in intelbras:action rf 1200 firmware (high 8.8)
- [CVE-2019-19516](https://insights.sbomify.com/CVE-2019-19516/): Cross-site request forgery in intelbras:wrn 150 firmware (medium 6.5)
- [CVE-2019-19515](https://insights.sbomify.com/CVE-2019-19515/): Cross-site scripting in ayision:ays-wr01 firmware (medium 6.1)
- [CVE-2019-19514](https://insights.sbomify.com/CVE-2019-19514/): Cross-site scripting in ayision:ays-wr01 firmware (medium 5.4)
- [CVE-2019-19513](https://insights.sbomify.com/CVE-2019-19513/): Memory corruption in un4seen:bassmidi (critical 9.8)
- [CVE-2019-1951](https://insights.sbomify.com/CVE-2019-1951/): Cisco SD-WAN Solution Packet Filtering Bypass Vulnerability (medium 5.8)
- [CVE-2019-19509](https://insights.sbomify.com/CVE-2019-19509/): Command injection in rconfig:rconfig (high 8.8)
- [CVE-2019-19507](https://insights.sbomify.com/CVE-2019-19507/): Validation bypass is possible in Json Pattern Validator (medium 5.3)
- [CVE-2019-19506](https://insights.sbomify.com/CVE-2019-19506/): Denial of service in tendacn:pa6 firmware (high 7.5)
- [CVE-2019-19505](https://insights.sbomify.com/CVE-2019-19505/): Memory corruption in tendacn:pa6 firmware (high 8.8)
- [CVE-2019-19502](https://insights.sbomify.com/CVE-2019-19502/): Code injection in maleck:image uploader and browser for ckeditor (critical 9.8)
- [CVE-2019-19501](https://insights.sbomify.com/CVE-2019-19501/): Privilege escalation in idrix:veracrypt (high 7.8)
- [CVE-2019-19500](https://insights.sbomify.com/CVE-2019-19500/): Cross-site scripting in matrix42:workspace management (medium 5.4)
- [CVE-2019-1950](https://insights.sbomify.com/CVE-2019-1950/): Cisco IOS XE SD-WAN Software Default Credentials Vulnerability (high 8.4)
- [CVE-2019-19499](https://insights.sbomify.com/CVE-2019-19499/): Grafana Arbitrary File Read (medium 6.5)
- [CVE-2019-19497](https://insights.sbomify.com/CVE-2019-19497/): Cross-site scripting in altn:mdaemon email server (medium 5.4)
- [CVE-2019-19496](https://insights.sbomify.com/CVE-2019-19496/): Cross-site scripting in alfresco:alfresco (medium 5.4)
- [CVE-2019-19495](https://insights.sbomify.com/CVE-2019-19495/): Other in technicolor:tc7230 steb firmware (critical 9.8)
- [CVE-2019-19494](https://insights.sbomify.com/CVE-2019-19494/): Memory corruption in compal:7284e firmware (high 8.8)
- [CVE-2019-19493](https://insights.sbomify.com/CVE-2019-19493/): File upload in kentico:xperience (medium 5.4)
- [CVE-2019-19492](https://insights.sbomify.com/CVE-2019-19492/): Hardcoded credentials in freeswitch:freeswitch (critical 9.8)
- [CVE-2019-19491](https://insights.sbomify.com/CVE-2019-19491/): Cross-site scripting in testlink:testlink (medium 6.1)
- [CVE-2019-19490](https://insights.sbomify.com/CVE-2019-19490/): Misconfiguration in litemanager:litemanager (high 7.3)
- [CVE-2019-1949](https://insights.sbomify.com/CVE-2019-1949/): Cisco Firepower Management Center Persistent Cross-Site Scripting Vulnerability (medium 4.8)
- [CVE-2019-19489](https://insights.sbomify.com/CVE-2019-19489/): Memory corruption in smplayer:smplayer (medium 5.5)
- [CVE-2019-19487](https://insights.sbomify.com/CVE-2019-19487/): Command injection in centreon:centreon (high 8.8)
- [CVE-2019-19486](https://insights.sbomify.com/CVE-2019-19486/): Path traversal in centreon:centreon (medium 6.5)
- [CVE-2019-19484](https://insights.sbomify.com/CVE-2019-19484/): Open redirect in centreon:centreon (medium 6.1)
- [CVE-2019-19481](https://insights.sbomify.com/CVE-2019-19481/): Memory corruption in opensc project:opensc (medium 4.6)
- [CVE-2019-19480](https://insights.sbomify.com/CVE-2019-19480/): Memory corruption in opensc project:opensc (medium 4.6)
- [CVE-2019-1948](https://insights.sbomify.com/CVE-2019-1948/): Cisco Webex Meetings Mobile (iOS) SSL Certificate Validation Vulnerability (medium 5.9)
- [CVE-2019-19479](https://insights.sbomify.com/CVE-2019-19479/): Memory corruption in debian:debian linux (medium 5.5)
- [CVE-2019-19475](https://insights.sbomify.com/CVE-2019-19475/): Misconfiguration in zohocorp:manageengine applications manager (high 8.8)
- [CVE-2019-19470](https://insights.sbomify.com/CVE-2019-19470/): Deserialization in tinywall:tinywall (high 7.8)
- [CVE-2019-1947](https://insights.sbomify.com/CVE-2019-1947/): Cisco Email Security Appliance Denial of Service Vulnerability (high 8.6)
- [CVE-2019-19469](https://insights.sbomify.com/CVE-2019-19469/): Cross-site request forgery in zmanda:amanda (high 8.8)
- [CVE-2019-19468](https://insights.sbomify.com/CVE-2019-19468/): Memory corruption in 10-strike:free photo viewer (high 7.8)
- [CVE-2019-19466](https://insights.sbomify.com/CVE-2019-19466/): SCEditor 2.1.3 allows XSS. (medium 6.1)
- [CVE-2019-19464](https://insights.sbomify.com/CVE-2019-19464/): Information disclosure in cbc:gem (medium 5.3)
- [CVE-2019-19463](https://insights.sbomify.com/CVE-2019-19463/): Weak cryptography in huami:mi fit (medium 5.3)
- [CVE-2019-19462](https://insights.sbomify.com/CVE-2019-19462/): Null dereference in canonical:ubuntu linux (medium 5.5)
- [CVE-2019-19461](https://insights.sbomify.com/CVE-2019-19461/): Cross-site scripting in teampasswordmanager:team password manager (medium 5.4)
- [CVE-2019-19460](https://insights.sbomify.com/CVE-2019-19460/): Misconfiguration in saltosystem:proaccess space (medium 5.5)
- [CVE-2019-1946](https://insights.sbomify.com/CVE-2019-1946/): Cisco Enterprise NFV Infrastructure Software Web-Based Management Interface Authentication Bypass Vulnerability (medium 6.5)
- [CVE-2019-19459](https://insights.sbomify.com/CVE-2019-19459/): Path traversal in saltosystem:proaccess space (critical 9.8)
- [CVE-2019-19458](https://insights.sbomify.com/CVE-2019-19458/): Path traversal in saltosystem:proaccess space (high 8.6)
- [CVE-2019-19457](https://insights.sbomify.com/CVE-2019-19457/): Cross-site scripting in saltosystem:proaccess space (medium 5.4)
- [CVE-2019-19456](https://insights.sbomify.com/CVE-2019-19456/): Cross-site scripting in wowza:streaming engine (medium 6.1)
- [CVE-2019-19455](https://insights.sbomify.com/CVE-2019-19455/): Privilege escalation in wowza:streaming engine (high 7.8)
- [CVE-2019-19454](https://insights.sbomify.com/CVE-2019-19454/): Path traversal in wowza:streaming engine (high 7.5)
- [CVE-2019-19453](https://insights.sbomify.com/CVE-2019-19453/): Cross-site scripting in wowza:streaming engine (medium 5.4)
- [CVE-2019-19452](https://insights.sbomify.com/CVE-2019-19452/): Memory corruption in patriotmemory:viper rgb driver (high 7.8)
- [CVE-2019-19451](https://insights.sbomify.com/CVE-2019-19451/): Denial of service in fedoraproject:fedora (medium 5.5)
- [CVE-2019-19450](https://insights.sbomify.com/CVE-2019-19450/): ReportLab vulnerable to remote code execution via paraparser (critical 9.8)
- [CVE-2019-1945](https://insights.sbomify.com/CVE-2019-1945/): Cisco Adaptive Security Appliance Smart Tunnel Vulnerabilities (medium 6.7)
- [CVE-2019-19449](https://insights.sbomify.com/CVE-2019-19449/): Memory corruption in linux:linux kernel (high 7.8)
- [CVE-2019-19448](https://insights.sbomify.com/CVE-2019-19448/): Use after free in canonical:ubuntu linux (high 7.8)
- [CVE-2019-19447](https://insights.sbomify.com/CVE-2019-19447/): Use after free in linux:linux kernel (high 7.8)
- [CVE-2019-19441](https://insights.sbomify.com/CVE-2019-19441/): Information disclosure in HUAWEI P30 (medium 6.5)
- [CVE-2019-1944](https://insights.sbomify.com/CVE-2019-1944/): Cisco Adaptive Security Appliance Smart Tunnel Vulnerabilities (medium 6.7)
- [CVE-2019-1943](https://insights.sbomify.com/CVE-2019-1943/): Cisco Small Business Series Switches Open Redirect Vulnerability (medium 4.7)
- [CVE-2019-1942](https://insights.sbomify.com/CVE-2019-1942/): Cisco Identity Services Engine Blind SQL Injection Vulnerability (medium 4.3)
- [CVE-2019-19417](https://insights.sbomify.com/CVE-2019-19417/): Memory corruption in AR120-S (high 7.5)
- [CVE-2019-19416](https://insights.sbomify.com/CVE-2019-19416/): Memory corruption in AR120-S (high 7.5)
- [CVE-2019-19415](https://insights.sbomify.com/CVE-2019-19415/): Memory corruption in AR120-S (high 7.5)
- [CVE-2019-19414](https://insights.sbomify.com/CVE-2019-19414/): Integer overflow in CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800;DBS3900 TDD LTE;DP300;RP200;TE30;TE40;TE50;TE60 (high 7.5)
- [CVE-2019-19413](https://insights.sbomify.com/CVE-2019-19413/): Integer overflow in CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800;DBS3900 TDD LTE;DP300;RP200;TE30;TE40;TE50;TE60 (high 7.5)
- [CVE-2019-19412](https://insights.sbomify.com/CVE-2019-19412/): Security feature bypass in ALP-AL00B (medium 4.6)
- [CVE-2019-19411](https://insights.sbomify.com/CVE-2019-19411/): Weak cryptography in USG9500 (low 3.7)
- [CVE-2019-1941](https://insights.sbomify.com/CVE-2019-1941/): Cisco Identity Services Engine Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2019-1940](https://insights.sbomify.com/CVE-2019-1940/): Cisco Industrial Network Director Web Services Management Agent Unauthorized Information Disclosure Vulnerability (medium 5.3)
- [CVE-2019-19398](https://insights.sbomify.com/CVE-2019-19398/): Memory corruption in M5 lite 10 (critical 9.8)
- [CVE-2019-19397](https://insights.sbomify.com/CVE-2019-19397/): Weak cryptography in S12700;S1700;S2700;S5700;S6700;S7700;S9700 (high 7.5)
- [CVE-2019-19396](https://insights.sbomify.com/CVE-2019-19396/): Denial of service in omniosce:omnios (high 7.5)
- [CVE-2019-19394](https://insights.sbomify.com/CVE-2019-19394/): Cross-site scripting in northern.tech:cfengine (medium 6.1)
- [CVE-2019-19393](https://insights.sbomify.com/CVE-2019-19393/): Cross-site scripting in rittal:cmc pu iii 7030.000 firmware (medium 6.1)
- [CVE-2019-19392](https://insights.sbomify.com/CVE-2019-19392/): Privilege escalation in fordnn:usersexportimport (critical 9.8)
- [CVE-2019-19391](https://insights.sbomify.com/CVE-2019-19391/): Memory corruption in luajit:luajit (critical 9.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/78/