# Vulnerabilities published in 2019


- [CVE-2019-19390](https://insights.sbomify.com/CVE-2019-19390/): Cross-site scripting in matrix42:workspace management (medium 5.4)
- [CVE-2019-1939](https://insights.sbomify.com/CVE-2019-1939/): Cisco Webex Teams Logging Feature Command Execution Vulnerability (high 7.5)
- [CVE-2019-19389](https://insights.sbomify.com/CVE-2019-19389/): Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) in Ktor (medium 5.4)
- [CVE-2019-19388](https://insights.sbomify.com/CVE-2019-19388/): Cross-site scripting in fusionpbx:fusionpbx (medium 6.1)
- [CVE-2019-19387](https://insights.sbomify.com/CVE-2019-19387/): Cross-site scripting in fusionpbx:fusionpbx (medium 6.1)
- [CVE-2019-19386](https://insights.sbomify.com/CVE-2019-19386/): Cross-site scripting in fusionpbx:fusionpbx (medium 6.1)
- [CVE-2019-19385](https://insights.sbomify.com/CVE-2019-19385/): Cross-site scripting in fusionpbx:fusionpbx (medium 6.1)
- [CVE-2019-19384](https://insights.sbomify.com/CVE-2019-19384/): Cross-site scripting in fusionpbx:fusionpbx (medium 6.1)
- [CVE-2019-19383](https://insights.sbomify.com/CVE-2019-19383/): Memory corruption in freeftpd:freeftpd (high 8.8)
- [CVE-2019-19382](https://insights.sbomify.com/CVE-2019-19382/): Misconfiguration in maxpcsecure:anti virus plus (high 7.8)
- [CVE-2019-19381](https://insights.sbomify.com/CVE-2019-19381/): Cross-site scripting in abacus:abacus (medium 6.1)
- [CVE-2019-1938](https://insights.sbomify.com/CVE-2019-1938/): Cisco UCS Director and Cisco UCS Director Express for Big Data API Authentication Bypass Vulnerability (critical 9.8)
- [CVE-2019-19379](https://insights.sbomify.com/CVE-2019-19379/): Missing authorization in misp-project:misp (medium 5.3)
- [CVE-2019-19378](https://insights.sbomify.com/CVE-2019-19378/): Memory corruption in linux:linux kernel (high 7.8)
- [CVE-2019-19377](https://insights.sbomify.com/CVE-2019-19377/): Use after free in linux:linux kernel (high 7.8)
- [CVE-2019-19376](https://insights.sbomify.com/CVE-2019-19376/): Denial of service in octopus:octopus deploy (medium 6.5)
- [CVE-2019-19375](https://insights.sbomify.com/CVE-2019-19375/): Cross-site request forgery in octopus:octopus deploy (medium 5.3)
- [CVE-2019-19374](https://insights.sbomify.com/CVE-2019-19374/): Path traversal in squiz:matrix (critical 9.1)
- [CVE-2019-19373](https://insights.sbomify.com/CVE-2019-19373/): Deserialization in squiz:matrix (high 7.5)
- [CVE-2019-19372](https://insights.sbomify.com/CVE-2019-19372/): Path traversal in rconfig:rconfig (high 7.5)
- [CVE-2019-19371](https://insights.sbomify.com/CVE-2019-19371/): Cross-site scripting in mitel:micollab audio\, web \& video conferencing (medium 6.1)
- [CVE-2019-19370](https://insights.sbomify.com/CVE-2019-19370/): Cross-site scripting in mitel:micollab (medium 6.1)
- [CVE-2019-1937](https://insights.sbomify.com/CVE-2019-1937/): Auth bypass in Cisco Unified Computing System Director (critical 9.8)
- [CVE-2019-19368](https://insights.sbomify.com/CVE-2019-19368/): Cross-site scripting in maxum:rumpus (medium 6.1)
- [CVE-2019-19367](https://insights.sbomify.com/CVE-2019-19367/): Cross-site scripting in fusionpbx:fusionpbx (medium 6.1)
- [CVE-2019-19366](https://insights.sbomify.com/CVE-2019-19366/): Cross-site scripting in fusionpbx:fusionpbx (medium 6.1)
- [CVE-2019-19364](https://insights.sbomify.com/CVE-2019-19364/): Privilege escalation in sony:catalyst browse (high 7.8)
- [CVE-2019-19363](https://insights.sbomify.com/CVE-2019-19363/): Privilege escalation in ricoh:generic pcl5 driver (high 7.8)
- [CVE-2019-19362](https://insights.sbomify.com/CVE-2019-19362/): Information disclosure in teamviewer:teamviewer (medium 4.3)
- [CVE-2019-1936](https://insights.sbomify.com/CVE-2019-1936/): Command injection in Cisco Unified Computing System Director (high 7.2)
- [CVE-2019-19356](https://insights.sbomify.com/CVE-2019-19356/): Netis WF2419 Devices Remote Code Execution (high 7.5, exploited in the wild)
- [CVE-2019-19355](https://insights.sbomify.com/CVE-2019-19355/): Privilege escalation in openshift (high 7.0)
- [CVE-2019-19354](https://insights.sbomify.com/CVE-2019-19354/): Privilege escalation in operator-framework/hadoop (high 7.8)
- [CVE-2019-19353](https://insights.sbomify.com/CVE-2019-19353/): Privilege escalation in operator-framework/hive (high 7.0)
- [CVE-2019-19352](https://insights.sbomify.com/CVE-2019-19352/): Privilege escalation in operator-framework/presto (high 7.0)
- [CVE-2019-19351](https://insights.sbomify.com/CVE-2019-19351/): Privilege escalation in openshift (high 7.0)
- [CVE-2019-19350](https://insights.sbomify.com/CVE-2019-19350/): Privilege escalation in openshift/ansible-service-broker (high 7.8)
- [CVE-2019-1935](https://insights.sbomify.com/CVE-2019-1935/): Hardcoded credentials in Cisco Unified Computing System Director (critical 9.8)
- [CVE-2019-19349](https://insights.sbomify.com/CVE-2019-19349/): Privilege escalation in operator-framework/operator-metering (high 7.8)
- [CVE-2019-19348](https://insights.sbomify.com/CVE-2019-19348/): Privilege escalation in openshift/apb-base (high 7.0)
- [CVE-2019-19346](https://insights.sbomify.com/CVE-2019-19346/): Privilege escalation in openshift/mariadb-apb (high 7.0)
- [CVE-2019-19345](https://insights.sbomify.com/CVE-2019-19345/): Privilege escalation in openshift/mediawiki-apb (high 7.0)
- [CVE-2019-19344](https://insights.sbomify.com/CVE-2019-19344/): Use after free in samba (medium 6.5)
- [CVE-2019-19343](https://insights.sbomify.com/CVE-2019-19343/): Denial of service in Undertow (high 7.5)
- [CVE-2019-19342](https://insights.sbomify.com/CVE-2019-19342/): Information disclosure in Tower (medium 5.3)
- [CVE-2019-19341](https://insights.sbomify.com/CVE-2019-19341/): Misconfiguration in Tower (medium 5.9)
- [CVE-2019-19340](https://insights.sbomify.com/CVE-2019-19340/): Misconfiguration in Tower (high 8.2)
- [CVE-2019-1934](https://insights.sbomify.com/CVE-2019-1934/): Cisco Adaptive Security Appliance Software Web-Based Management Interface Privilege Escalation Vulnerability (high 8.8)
- [CVE-2019-19339](https://insights.sbomify.com/CVE-2019-19339/): Denial of service in kpatch: (medium 6.5)
- [CVE-2019-19338](https://insights.sbomify.com/CVE-2019-19338/): Information disclosure in Linux Kernel (medium 5.5)
- [CVE-2019-19337](https://insights.sbomify.com/CVE-2019-19337/): Denial of service in Ceph Storage (medium 6.5)
- [CVE-2019-19336](https://insights.sbomify.com/CVE-2019-19336/): Cross-site scripting in ovirt-engine (medium 5.4)
- [CVE-2019-19335](https://insights.sbomify.com/CVE-2019-19335/): Misconfiguration in openshift/installer (medium 4.4)
- [CVE-2019-19334](https://insights.sbomify.com/CVE-2019-19334/): Memory corruption in libyang (high 8.1)
- [CVE-2019-19333](https://insights.sbomify.com/CVE-2019-19333/): Memory corruption in libyang (high 8.1)
- [CVE-2019-19332](https://insights.sbomify.com/CVE-2019-19332/): Memory corruption in Kernel (medium 6.1)
- [CVE-2019-19331](https://insights.sbomify.com/CVE-2019-19331/): Denial of service in knot-resolver (high 7.5)
- [CVE-2019-19330](https://insights.sbomify.com/CVE-2019-19330/): Other in canonical:ubuntu linux (critical 9.8)
- [CVE-2019-1933](https://insights.sbomify.com/CVE-2019-1933/): Cisco Email Security Appliance Content Filter Bypass Vulnerability (medium 5.8)
- [CVE-2019-19329](https://insights.sbomify.com/CVE-2019-19329/): Cross-site scripting in wikimedia:wikidata query gui (medium 6.1)
- [CVE-2019-19328](https://insights.sbomify.com/CVE-2019-19328/): Cross-site scripting in wikimedia:wikidata query gui (medium 6.1)
- [CVE-2019-19327](https://insights.sbomify.com/CVE-2019-19327/): Cross-site scripting in wikimedia:wikidata query gui (medium 6.1)
- [CVE-2019-19326](https://insights.sbomify.com/CVE-2019-19326/): SilverStripe Web Cache Poisoning through HTTPRequestBuilder (medium 5.9)
- [CVE-2019-19325](https://insights.sbomify.com/CVE-2019-19325/): Reflected XSS in SilverStripe (medium 6.1)
- [CVE-2019-19324](https://insights.sbomify.com/CVE-2019-19324/): Security feature bypass in xmidt:cjwt (high 7.5)
- [CVE-2019-1932](https://insights.sbomify.com/CVE-2019-1932/): Cisco Advanced Malware Protection for Endpoints Windows Command Injection Vulnerability (medium 6.7)
- [CVE-2019-19319](https://insights.sbomify.com/CVE-2019-19319/): Use after free in linux:linux kernel (medium 6.5)
- [CVE-2019-19318](https://insights.sbomify.com/CVE-2019-19318/): Use after free in canonical:ubuntu linux (medium 4.4)
- [CVE-2019-19317](https://insights.sbomify.com/CVE-2019-19317/): Memory corruption in netapp:cloud backup (critical 9.8)
- [CVE-2019-19316](https://insights.sbomify.com/CVE-2019-19316/): Use of a Broken or Risky Cryptographic Algorithm in Terraform (high 7.5)
- [CVE-2019-19315](https://insights.sbomify.com/CVE-2019-19315/): Privilege escalation in nalpeiron:licensing service (high 7.1)
- [CVE-2019-19314](https://insights.sbomify.com/CVE-2019-19314/): Information disclosure in gitlab:gitlab (high 7.5)
- [CVE-2019-19313](https://insights.sbomify.com/CVE-2019-19313/): Denial of service in gitlab:gitlab (high 7.5)
- [CVE-2019-19312](https://insights.sbomify.com/CVE-2019-19312/): Missing authorization in gitlab:gitlab (medium 5.8)
- [CVE-2019-19311](https://insights.sbomify.com/CVE-2019-19311/): Cross-site scripting in gitlab:gitlab (medium 5.4)
- [CVE-2019-19310](https://insights.sbomify.com/CVE-2019-19310/): Information disclosure in gitlab:gitlab (medium 4.9)
- [CVE-2019-1931](https://insights.sbomify.com/CVE-2019-1931/): Cisco Firepower Management Center RSS Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2019-19309](https://insights.sbomify.com/CVE-2019-19309/): Missing authorization in gitlab:gitlab (medium 4.3)
- [CVE-2019-19308](https://insights.sbomify.com/CVE-2019-19308/): Null dereference in gnome:gnome-font-viewer (medium 5.5)
- [CVE-2019-19307](https://insights.sbomify.com/CVE-2019-19307/): Integer overflow in cesanta:mongoose (critical 9.8)
- [CVE-2019-19306](https://insights.sbomify.com/CVE-2019-19306/): Cross-site scripting in zoho:lead magnet (medium 5.4)
- [CVE-2019-19301](https://insights.sbomify.com/CVE-2019-19301/): Denial of service in SCALANCE X200-4P IRT (high 7.5)
- [CVE-2019-19300](https://insights.sbomify.com/CVE-2019-19300/): Denial of service in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 (high 7.5)
- [CVE-2019-1930](https://insights.sbomify.com/CVE-2019-1930/): Cisco Firepower Management Center RSS Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2019-19299](https://insights.sbomify.com/CVE-2019-19299/): Weak cryptography in SiNVR/SiVMS Video Server (high 7.5)
- [CVE-2019-19298](https://insights.sbomify.com/CVE-2019-19298/): Denial of service in SiNVR/SiVMS Video Server (high 7.5)
- [CVE-2019-19297](https://insights.sbomify.com/CVE-2019-19297/): Path traversal in SiNVR/SiVMS Video Server (high 7.5)
- [CVE-2019-19296](https://insights.sbomify.com/CVE-2019-19296/): Path traversal in SiNVR/SiVMS Video Server (medium 6.8)
- [CVE-2019-19295](https://insights.sbomify.com/CVE-2019-19295/): Other in Control Center Server (CCS) (medium 4.3)
- [CVE-2019-19294](https://insights.sbomify.com/CVE-2019-19294/): Cross-site scripting in Control Center Server (CCS) (medium 6.3)
- [CVE-2019-19293](https://insights.sbomify.com/CVE-2019-19293/): Cross-site scripting in Control Center Server (CCS) (medium 6.1)
- [CVE-2019-19292](https://insights.sbomify.com/CVE-2019-19292/): SQL injection in Control Center Server (CCS) (high 8.8)
- [CVE-2019-19291](https://insights.sbomify.com/CVE-2019-19291/): Information disclosure in Control Center Server (CCS) (medium 5.3)
- [CVE-2019-19290](https://insights.sbomify.com/CVE-2019-19290/): Path traversal in Control Center Server (CCS) (medium 6.5)
- [CVE-2019-1929](https://insights.sbomify.com/CVE-2019-1929/): Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities (high 7.8)
- [CVE-2019-19289](https://insights.sbomify.com/CVE-2019-19289/): Cross-site request forgery in XHQ (high 8.8)
- [CVE-2019-19288](https://insights.sbomify.com/CVE-2019-19288/): Cross-site scripting in XHQ (medium 6.1)
- [CVE-2019-19287](https://insights.sbomify.com/CVE-2019-19287/): Path traversal in XHQ (medium 6.5)
- [CVE-2019-19286](https://insights.sbomify.com/CVE-2019-19286/): SQL injection in XHQ (high 7.2)
- [CVE-2019-19285](https://insights.sbomify.com/CVE-2019-19285/): Cross-site scripting in XHQ (medium 5.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/79/