# Vulnerabilities published in 2019


- [CVE-2019-19284](https://insights.sbomify.com/CVE-2019-19284/): Cross-site scripting in XHQ (medium 5.4)
- [CVE-2019-19283](https://insights.sbomify.com/CVE-2019-19283/): Information disclosure in XHQ (medium 5.3)
- [CVE-2019-19282](https://insights.sbomify.com/CVE-2019-19282/): Denial of service in OpenPCS 7 V8.1 (high 7.5)
- [CVE-2019-19281](https://insights.sbomify.com/CVE-2019-19281/): Denial of service in SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (high 7.5)
- [CVE-2019-1928](https://insights.sbomify.com/CVE-2019-1928/): Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities (high 7.8)
- [CVE-2019-19279](https://insights.sbomify.com/CVE-2019-19279/): Denial of service in SIPROTEC 4 and SIPROTEC Compact relays equipped with EN100 Ethernet communication modules (high 7.5)
- [CVE-2019-19278](https://insights.sbomify.com/CVE-2019-19278/): Security feature bypass in SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR32..-.....-.... MLFB 6SR4...-.....-.... MLFB 6SR5...-.....-.... With option A30 (HMIs 12 inches or larger) (medium 6.8)
- [CVE-2019-19277](https://insights.sbomify.com/CVE-2019-19277/): Privilege escalation in SIPORT MP (medium 6.5)
- [CVE-2019-19276](https://insights.sbomify.com/CVE-2019-19276/): Memory corruption in SIMATIC HMI Comfort Panels 1st Generation (incl. SIPLUS variants) (medium 5.3)
- [CVE-2019-19275](https://insights.sbomify.com/CVE-2019-19275/): typed-ast Out-of-bounds Read (high 7.5)
- [CVE-2019-19274](https://insights.sbomify.com/CVE-2019-19274/): typed-ast Out-of-bounds Read (high 7.5)
- [CVE-2019-19273](https://insights.sbomify.com/CVE-2019-19273/): Memory corruption in google:android (high 7.8)
- [CVE-2019-19272](https://insights.sbomify.com/CVE-2019-19272/): Null dereference in proftpd:proftpd (high 7.5)
- [CVE-2019-19271](https://insights.sbomify.com/CVE-2019-19271/): Security feature bypass in proftpd:proftpd (high 7.5)
- [CVE-2019-19270](https://insights.sbomify.com/CVE-2019-19270/): Security feature bypass in fedoraproject:fedora (high 7.5)
- [CVE-2019-1927](https://insights.sbomify.com/CVE-2019-1927/): Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities (high 7.8)
- [CVE-2019-19269](https://insights.sbomify.com/CVE-2019-19269/): Null dereference in debian:debian linux (medium 4.9)
- [CVE-2019-19266](https://insights.sbomify.com/CVE-2019-19266/): Cross-site scripting in icewarp:mail server (medium 5.4)
- [CVE-2019-19265](https://insights.sbomify.com/CVE-2019-19265/): Cross-site scripting in icewarp:mail server (medium 6.1)
- [CVE-2019-19264](https://insights.sbomify.com/CVE-2019-19264/): Path traversal in simplifile:recordfusion (high 7.5)
- [CVE-2019-19263](https://insights.sbomify.com/CVE-2019-19263/): Misconfiguration in gitlab:gitlab (medium 4.3)
- [CVE-2019-19262](https://insights.sbomify.com/CVE-2019-19262/): Misconfiguration in gitlab:gitlab (medium 4.3)
- [CVE-2019-19261](https://insights.sbomify.com/CVE-2019-19261/): Server-side request forgery in gitlab:gitlab (high 8.8)
- [CVE-2019-19260](https://insights.sbomify.com/CVE-2019-19260/): Missing authorization in gitlab:gitlab (medium 5.4)
- [CVE-2019-1926](https://insights.sbomify.com/CVE-2019-1926/): Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities (high 7.8)
- [CVE-2019-19259](https://insights.sbomify.com/CVE-2019-19259/): Missing authorization in gitlab:gitlab (medium 4.3)
- [CVE-2019-19258](https://insights.sbomify.com/CVE-2019-19258/): Missing authorization in gitlab:gitlab (medium 5.3)
- [CVE-2019-19257](https://insights.sbomify.com/CVE-2019-19257/): Missing authorization in gitlab:gitlab (medium 5.3)
- [CVE-2019-19256](https://insights.sbomify.com/CVE-2019-19256/): Missing authorization in gitlab:gitlab (medium 5.3)
- [CVE-2019-19255](https://insights.sbomify.com/CVE-2019-19255/): Missing authorization in gitlab:gitlab (medium 4.3)
- [CVE-2019-19254](https://insights.sbomify.com/CVE-2019-19254/): Missing authorization in gitlab:gitlab (medium 5.3)
- [CVE-2019-19252](https://insights.sbomify.com/CVE-2019-19252/): Memory corruption in linux:linux kernel (high 7.8)
- [CVE-2019-19251](https://insights.sbomify.com/CVE-2019-19251/): Information disclosure in last.fm:last.fm desktop (medium 5.3)
- [CVE-2019-19250](https://insights.sbomify.com/CVE-2019-19250/): SQL injection in opentrade project:opentrade (critical 9.8)
- [CVE-2019-1925](https://insights.sbomify.com/CVE-2019-1925/): Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities (high 7.8)
- [CVE-2019-19249](https://insights.sbomify.com/CVE-2019-19249/): Other in querytreeapp:querytree (critical 9.8)
- [CVE-2019-19248](https://insights.sbomify.com/CVE-2019-19248/): Privilege escalation in ea:origin (high 7.8)
- [CVE-2019-19247](https://insights.sbomify.com/CVE-2019-19247/): Privilege escalation in ea:origin (high 7.8)
- [CVE-2019-19246](https://insights.sbomify.com/CVE-2019-19246/): Memory corruption in canonical:ubuntu linux (high 7.5)
- [CVE-2019-19245](https://insights.sbomify.com/CVE-2019-19245/): SQL injection in napc:xinet elegant 6 asset library (critical 9.8)
- [CVE-2019-19244](https://insights.sbomify.com/CVE-2019-19244/): Denial of service in canonical:ubuntu linux (high 7.5)
- [CVE-2019-19242](https://insights.sbomify.com/CVE-2019-19242/): Null dereference in canonical:ubuntu linux (medium 5.9)
- [CVE-2019-19241](https://insights.sbomify.com/CVE-2019-19241/): Privilege escalation in linux:linux kernel (high 7.8)
- [CVE-2019-19240](https://insights.sbomify.com/CVE-2019-19240/): Information disclosure in embedthis:goahead (medium 5.3)
- [CVE-2019-1924](https://insights.sbomify.com/CVE-2019-1924/): Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities (high 7.8)
- [CVE-2019-19235](https://insights.sbomify.com/CVE-2019-19235/): Other in asus:atk package (high 7.0)
- [CVE-2019-19234](https://insights.sbomify.com/CVE-2019-19234/): Security feature bypass in sudo:sudo (high 7.5)
- [CVE-2019-19232](https://insights.sbomify.com/CVE-2019-19232/): Auth bypass in sudo:sudo (high 7.5)
- [CVE-2019-19231](https://insights.sbomify.com/CVE-2019-19231/): Privilege escalation in CA Client Automation (high 7.3)
- [CVE-2019-19230](https://insights.sbomify.com/CVE-2019-19230/): Deserialization in CA Release Automation (critical 9.8)
- [CVE-2019-1923](https://insights.sbomify.com/CVE-2019-1923/): Cisco Small Business SPA500 Series IP Phones Local Command Execution Vulnerability (medium 6.6)
- [CVE-2019-19229](https://insights.sbomify.com/CVE-2019-19229/): Path traversal in fronius:datamanager box 2.0 firmware (medium 6.5)
- [CVE-2019-19228](https://insights.sbomify.com/CVE-2019-19228/): Hardcoded credentials in fronius:datamanager box 2.0 firmware (critical 9.8)
- [CVE-2019-19227](https://insights.sbomify.com/CVE-2019-19227/): Null dereference in linux:linux kernel (medium 5.5)
- [CVE-2019-19226](https://insights.sbomify.com/CVE-2019-19226/): Missing authorization in dlink:dsl-2680 firmware (high 7.5)
- [CVE-2019-19225](https://insights.sbomify.com/CVE-2019-19225/): Missing authorization in dlink:dsl-2680 firmware (high 7.5)
- [CVE-2019-19224](https://insights.sbomify.com/CVE-2019-19224/): Missing authorization in dlink:dsl-2680 firmware (high 7.5)
- [CVE-2019-19223](https://insights.sbomify.com/CVE-2019-19223/): Missing authorization in dlink:dsl-2680 firmware (high 7.5)
- [CVE-2019-19222](https://insights.sbomify.com/CVE-2019-19222/): Cross-site scripting in dlink:dsl-2680 firmware (medium 5.4)
- [CVE-2019-19221](https://insights.sbomify.com/CVE-2019-19221/): Memory corruption in canonical:ubuntu linux (medium 5.5)
- [CVE-2019-19220](https://insights.sbomify.com/CVE-2019-19220/): Command injection in bmcsoftware:control-m\/agent (high 8.8)
- [CVE-2019-1922](https://insights.sbomify.com/CVE-2019-1922/): Cisco IP Phone 7800 and 8800 Series Session Initiation Protocol Denial of Service Vulnerability (medium 5.3)
- [CVE-2019-19219](https://insights.sbomify.com/CVE-2019-19219/): Path traversal in bmcsoftware:control-m\/agent (high 7.5)
- [CVE-2019-19218](https://insights.sbomify.com/CVE-2019-19218/): Information disclosure in bmcsoftware:control-m\/agent (high 7.5)
- [CVE-2019-19217](https://insights.sbomify.com/CVE-2019-19217/): Command injection in bmcsoftware:control-m\/agent (high 8.8)
- [CVE-2019-19216](https://insights.sbomify.com/CVE-2019-19216/): Privilege escalation in bmcsoftware:control-m\/agent (high 8.8)
- [CVE-2019-19215](https://insights.sbomify.com/CVE-2019-19215/): Memory corruption in bmcsoftware:control-m\/agent (high 8.8)
- [CVE-2019-19212](https://insights.sbomify.com/CVE-2019-19212/): Dolibarr Cross-site Scripting via the qty parameter in product/fournisseurs.php (critical 9.8)
- [CVE-2019-19211](https://insights.sbomify.com/CVE-2019-19211/): Dolibarr ERP and CRM contain XSS Vulnerability (medium 6.1)
- [CVE-2019-19210](https://insights.sbomify.com/CVE-2019-19210/): Dolibarr ERP and CRM contain XSS Vulnerability (medium 5.4)
- [CVE-2019-1921](https://insights.sbomify.com/CVE-2019-1921/): Cisco Email Security Appliance Content Filter Bypass Vulnerability (medium 5.8)
- [CVE-2019-19209](https://insights.sbomify.com/CVE-2019-19209/): Dolibarr ERP and CRM SQLi (high 7.5)
- [CVE-2019-19208](https://insights.sbomify.com/CVE-2019-19208/): Code injection in codiad (critical 9.8)
- [CVE-2019-19207](https://insights.sbomify.com/CVE-2019-19207/): SQL injection in rconfig:rconfig (high 8.8)
- [CVE-2019-19206](https://insights.sbomify.com/CVE-2019-19206/): Dolibarr ERP and CRM contain XSS Vulnerability (medium 5.4)
- [CVE-2019-19204](https://insights.sbomify.com/CVE-2019-19204/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2019-19203](https://insights.sbomify.com/CVE-2019-19203/): Memory corruption in fedoraproject:fedora (high 7.5)
- [CVE-2019-19202](https://insights.sbomify.com/CVE-2019-19202/): Privilege escalation in vtiger:vtiger crm (high 8.8)
- [CVE-2019-19200](https://insights.sbomify.com/CVE-2019-19200/): Missing authorization in reddoxx:maildepot (high 8.8)
- [CVE-2019-1920](https://insights.sbomify.com/CVE-2019-1920/): Cisco IOS Access Points Software 802.11r Fast Transition Denial of Service Vulnerability (high 7.4)
- [CVE-2019-19199](https://insights.sbomify.com/CVE-2019-19199/): Auth bypass in reddoxx:maildepot (high 7.4)
- [CVE-2019-19198](https://insights.sbomify.com/CVE-2019-19198/): Cross-site scripting in scoutnet:kalender (medium 5.4)
- [CVE-2019-19197](https://insights.sbomify.com/CVE-2019-19197/): Privilege escalation in kyrolsecuritylabs:kyrol internet security (high 7.8)
- [CVE-2019-19196](https://insights.sbomify.com/CVE-2019-19196/): Memory corruption in telink-semi:tlsr8232 ble sdk (medium 6.5)
- [CVE-2019-19195](https://insights.sbomify.com/CVE-2019-19195/): Denial of service in microchip:atmsamb11 blusdk smart (medium 6.5)
- [CVE-2019-19194](https://insights.sbomify.com/CVE-2019-19194/): Weak cryptography in telink-semi:tlsr8232 ble sdk (high 8.8)
- [CVE-2019-19193](https://insights.sbomify.com/CVE-2019-19193/): Denial of service in ti:ble-stack (medium 6.5)
- [CVE-2019-19192](https://insights.sbomify.com/CVE-2019-19192/): Denial of service in st:bluenrg-2 (medium 6.5)
- [CVE-2019-19191](https://insights.sbomify.com/CVE-2019-19191/): Privilege escalation in shibboleth:service provider (high 7.8)
- [CVE-2019-1919](https://insights.sbomify.com/CVE-2019-1919/): Cisco FindIT Network Management Software Static Credentials Vulnerability (high 8.4)
- [CVE-2019-1918](https://insights.sbomify.com/CVE-2019-1918/): Cisco IOS XR Software Intermediate System–to–Intermediate System Denial of Service Vulnerability (high 7.4)
- [CVE-2019-1917](https://insights.sbomify.com/CVE-2019-1917/): Cisco Vision Dynamic Signage Director REST API Authentication Bypass Vulnerability (critical 9.1)
- [CVE-2019-19169](https://insights.sbomify.com/CVE-2019-19169/): Other in Dext.ocx ActiveX Control in Dext5 Upload (high 7.8)
- [CVE-2019-19168](https://insights.sbomify.com/CVE-2019-19168/): Code injection in Dext.ocx ActiveX Control in Dext5 Upload (high 7.8)
- [CVE-2019-19167](https://insights.sbomify.com/CVE-2019-19167/): Tobesoft Nexacro14 ActiveX File Download Vulnerability (high 7.8)
- [CVE-2019-19166](https://insights.sbomify.com/CVE-2019-19166/): Tobesoft XPlatform Arbitrary File Execution Vulnerability (high 7.8)
- [CVE-2019-19165](https://insights.sbomify.com/CVE-2019-19165/): Code injection in Ebiz4u ActiveX of Inogard Co,,LTD(AxECM.cab) on Windows 7/8/10 (high 7.2)
- [CVE-2019-19164](https://insights.sbomify.com/CVE-2019-19164/): Dext5 Upload ActiveX Arbitrary File Execution Vulnerability (high 7.8)
- [CVE-2019-19163](https://insights.sbomify.com/CVE-2019-19163/): Commax WallPad Remote Code Execution Vulnerability (high 7.5)
- [CVE-2019-19162](https://insights.sbomify.com/CVE-2019-19162/): Use after free in XPLATFORM (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/80/