# Vulnerabilities published in 2019


- [CVE-2019-19161](https://insights.sbomify.com/CVE-2019-19161/): Code injection in MIPLATFORM (high 7.2)
- [CVE-2019-19160](https://insights.sbomify.com/CVE-2019-19160/): Code injection in Reportexpress ProPlus (medium 5.7)
- [CVE-2019-19151](https://insights.sbomify.com/CVE-2019-19151/): Privilege escalation in BIG-IP, BIG-IQ, iWorkflow, Enterprise Manager (medium 5.5)
- [CVE-2019-19150](https://insights.sbomify.com/CVE-2019-19150/): Information disclosure in BIG-IP APM (medium 4.9)
- [CVE-2019-1915](https://insights.sbomify.com/CVE-2019-1915/): Multiple Cisco Unified Communications Products Cross-Site Request Forgery Vulnerability (medium 6.5)
- [CVE-2019-19148](https://insights.sbomify.com/CVE-2019-19148/): Command injection in tellabs:optical line terminal 1150 firmware (critical 9.8)
- [CVE-2019-19145](https://insights.sbomify.com/CVE-2019-19145/): Hardcoded credentials in SuperLoader (medium 5.8)
- [CVE-2019-19144](https://insights.sbomify.com/CVE-2019-19144/): XML External Entity Injection vulnerability in Quantum DXi6702 2.3.0.3 (11449-53631 Build304) devices via rest/Users?action=authenticate. (critical 9.8)
- [CVE-2019-19143](https://insights.sbomify.com/CVE-2019-19143/): Missing authorization in tp-link:tl-wr849n firmware (medium 6.1)
- [CVE-2019-19142](https://insights.sbomify.com/CVE-2019-19142/): Missing authorization in intelbras:wrn 240 firmware (high 7.5)
- [CVE-2019-19141](https://insights.sbomify.com/CVE-2019-19141/): Path traversal in plex:media server (high 8.8)
- [CVE-2019-1914](https://insights.sbomify.com/CVE-2019-1914/): Cisco Small Business 220 Series Smart Switches Command Injection Vulnerability (high 7.2)
- [CVE-2019-19138](https://insights.sbomify.com/CVE-2019-19138/): Other in ivanti:workspace control (high 7.5)
- [CVE-2019-19135](https://insights.sbomify.com/CVE-2019-19135/): Insufficient Nonce Validation in Eclipse Milo Client (high 7.4)
- [CVE-2019-19134](https://insights.sbomify.com/CVE-2019-19134/): Cross-site scripting in heroplugins:hero maps premium (medium 6.1)
- [CVE-2019-19133](https://insights.sbomify.com/CVE-2019-19133/): Cross-site scripting in csshero:csshero (medium 6.1)
- [CVE-2019-1913](https://insights.sbomify.com/CVE-2019-1913/): Cisco Small Business 220 Series Smart Switches Remote Code Execution Vulnerabilities (critical 9.8)
- [CVE-2019-19129](https://insights.sbomify.com/CVE-2019-19129/): Cross-site scripting in afterlogic:aurora (medium 6.1)
- [CVE-2019-19127](https://insights.sbomify.com/CVE-2019-19127/): Auth bypass in tribalgroup:sits\ (high 8.1)
- [CVE-2019-19126](https://insights.sbomify.com/CVE-2019-19126/): Security feature bypass in canonical:ubuntu linux (low 3.3)
- [CVE-2019-1912](https://insights.sbomify.com/CVE-2019-1912/): Cisco Small Business 220 Series Smart Switches Authentication Bypass Vulnerability (critical 9.1)
- [CVE-2019-19119](https://insights.sbomify.com/CVE-2019-19119/): Information disclosure in paessler:prtg network monitor (medium 5.5)
- [CVE-2019-19118](https://insights.sbomify.com/CVE-2019-19118/): Django allows unintended model editing (medium 6.5)
- [CVE-2019-19117](https://insights.sbomify.com/CVE-2019-19117/): Command injection in phicomm:k2\(psg1218\) firmware (high 8.8)
- [CVE-2019-19115](https://insights.sbomify.com/CVE-2019-19115/): Privilege escalation in nahimic:apo software component (high 7.8)
- [CVE-2019-19113](https://insights.sbomify.com/CVE-2019-19113/): SQL injection in newbee-mall project:newbee-mall (critical 9.8)
- [CVE-2019-19112](https://insights.sbomify.com/CVE-2019-19112/): Cross-site scripting in gvectors:wpforo (medium 6.1)
- [CVE-2019-19111](https://insights.sbomify.com/CVE-2019-19111/): Cross-site scripting in gvectors:wpforo (medium 6.1)
- [CVE-2019-19110](https://insights.sbomify.com/CVE-2019-19110/): Cross-site scripting in gvectors:wpforo (medium 4.8)
- [CVE-2019-1911](https://insights.sbomify.com/CVE-2019-1911/): Cisco Unified Communications Domain Manager Restricted Shell Escape Vulnerability (medium 5.3)
- [CVE-2019-19109](https://insights.sbomify.com/CVE-2019-19109/): Cross-site request forgery in gvectors:wpforo (high 8.8)
- [CVE-2019-19108](https://insights.sbomify.com/CVE-2019-19108/): B&R Automation Runtime SNMP Authentication and Authorization Weakness (critical 9.4)
- [CVE-2019-19107](https://insights.sbomify.com/CVE-2019-19107/): ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Information Exposure (medium 6.2)
- [CVE-2019-19106](https://insights.sbomify.com/CVE-2019-19106/): ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Access Control issues (critical 9.1)
- [CVE-2019-19105](https://insights.sbomify.com/CVE-2019-19105/): ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Plaintext storing of credentials (medium 6.2)
- [CVE-2019-19104](https://insights.sbomify.com/CVE-2019-19104/): ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Improper Authentication and Access Control (critical 9.1)
- [CVE-2019-19102](https://insights.sbomify.com/CVE-2019-19102/): Zip Slip vulnerability in 3rd-Party library in B&R Automation Studio upgrade service (medium 5.5)
- [CVE-2019-19101](https://insights.sbomify.com/CVE-2019-19101/): Incomplete communication encryption and validation in B&R Automation Studio upgrade service (medium 6.5)
- [CVE-2019-19100](https://insights.sbomify.com/CVE-2019-19100/): Privilege escalation via B&R Automation Studio upgrade service (high 7.5)
- [CVE-2019-1910](https://insights.sbomify.com/CVE-2019-1910/): Cisco IOS XR Software Intermediate System to Intermediate System Denial of Service Vulnerability (high 7.4)
- [CVE-2019-19097](https://insights.sbomify.com/CVE-2019-19097/): ABB eSOMS: SSL medium strength Cipher Suites (medium 5.9)
- [CVE-2019-19096](https://insights.sbomify.com/CVE-2019-19096/): ABB eSOMS: REDIS clear text credentials (medium 6.1)
- [CVE-2019-19095](https://insights.sbomify.com/CVE-2019-19095/): ABB eSOMS: Stored XSS vulnerability (medium 5.4)
- [CVE-2019-19094](https://insights.sbomify.com/CVE-2019-19094/): ABB eSOMS: SQL injection vulnerability (high 7.6)
- [CVE-2019-19093](https://insights.sbomify.com/CVE-2019-19093/): ABB eSOMS: Password complexity issue (medium 6.5)
- [CVE-2019-19092](https://insights.sbomify.com/CVE-2019-19092/): ABB eSOMS: Viewstate without MAC Signature (low 3.5)
- [CVE-2019-19091](https://insights.sbomify.com/CVE-2019-19091/): ABB eSOMS: HTTP response information leakage (medium 4.3)
- [CVE-2019-19090](https://insights.sbomify.com/CVE-2019-19090/): ABB eSOMS: Secure Flag not set (low 3.5)
- [CVE-2019-1909](https://insights.sbomify.com/CVE-2019-1909/): Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability (medium 6.8)
- [CVE-2019-19089](https://insights.sbomify.com/CVE-2019-19089/): eSOMS: X-Content-Type-Options Header Missing (medium 6.1)
- [CVE-2019-19088](https://insights.sbomify.com/CVE-2019-19088/): Path traversal in gitlab:gitlab (critical 9.8)
- [CVE-2019-19087](https://insights.sbomify.com/CVE-2019-19087/): Misconfiguration in gitlab:gitlab (medium 4.3)
- [CVE-2019-19086](https://insights.sbomify.com/CVE-2019-19086/): Misconfiguration in gitlab:gitlab (medium 4.3)
- [CVE-2019-19085](https://insights.sbomify.com/CVE-2019-19085/): Cross-site scripting in octopus:server (medium 5.4)
- [CVE-2019-19084](https://insights.sbomify.com/CVE-2019-19084/): Information disclosure in octopus:octopus deploy (medium 4.3)
- [CVE-2019-19083](https://insights.sbomify.com/CVE-2019-19083/): Denial of service in canonical:ubuntu linux (medium 4.7)
- [CVE-2019-19082](https://insights.sbomify.com/CVE-2019-19082/): Denial of service in canonical:ubuntu linux (medium 4.7)
- [CVE-2019-19081](https://insights.sbomify.com/CVE-2019-19081/): Denial of service in linux:linux kernel (medium 5.9)
- [CVE-2019-19080](https://insights.sbomify.com/CVE-2019-19080/): Denial of service in linux:linux kernel (medium 5.9)
- [CVE-2019-1908](https://insights.sbomify.com/CVE-2019-1908/): Cisco Integrated Management Controller Information Disclosure Vulnerability (high 7.5)
- [CVE-2019-19079](https://insights.sbomify.com/CVE-2019-19079/): Denial of service in canonical:ubuntu linux (high 7.5)
- [CVE-2019-19078](https://insights.sbomify.com/CVE-2019-19078/): Denial of service in canonical:ubuntu linux (high 7.5)
- [CVE-2019-19077](https://insights.sbomify.com/CVE-2019-19077/): Denial of service in canonical:ubuntu linux (medium 5.5)
- [CVE-2019-19076](https://insights.sbomify.com/CVE-2019-19076/): Denial of service in canonical:ubuntu linux (medium 5.9)
- [CVE-2019-19075](https://insights.sbomify.com/CVE-2019-19075/): Denial of service in canonical:ubuntu linux (high 7.5)
- [CVE-2019-19074](https://insights.sbomify.com/CVE-2019-19074/): Denial of service in canonical:ubuntu linux (high 7.5)
- [CVE-2019-19073](https://insights.sbomify.com/CVE-2019-19073/): Denial of service in fedoraproject:fedora (medium 4.0)
- [CVE-2019-19072](https://insights.sbomify.com/CVE-2019-19072/): Denial of service in canonical:ubuntu linux (medium 4.4)
- [CVE-2019-19071](https://insights.sbomify.com/CVE-2019-19071/): Denial of service in canonical:ubuntu linux (high 7.5)
- [CVE-2019-19070](https://insights.sbomify.com/CVE-2019-19070/): Denial of service in fedoraproject:fedora (high 7.5)
- [CVE-2019-1907](https://insights.sbomify.com/CVE-2019-1907/): Cisco Integrated Management Controller Substring Comparison Privilege Escalation Vulnerability (high 8.8)
- [CVE-2019-19069](https://insights.sbomify.com/CVE-2019-19069/): Denial of service in broadcom:fabric operating system (high 7.5)
- [CVE-2019-19068](https://insights.sbomify.com/CVE-2019-19068/): Denial of service in canonical:ubuntu linux (medium 4.6)
- [CVE-2019-19067](https://insights.sbomify.com/CVE-2019-19067/): Denial of service in canonical:ubuntu linux (medium 4.4)
- [CVE-2019-19066](https://insights.sbomify.com/CVE-2019-19066/): Denial of service in canonical:ubuntu linux (medium 4.7)
- [CVE-2019-19065](https://insights.sbomify.com/CVE-2019-19065/): Denial of service in canonical:ubuntu linux (medium 4.7)
- [CVE-2019-19064](https://insights.sbomify.com/CVE-2019-19064/): Denial of service in fedoraproject:fedora (high 7.5)
- [CVE-2019-19063](https://insights.sbomify.com/CVE-2019-19063/): Denial of service in broadcom:brocade fabric operating system firmware (medium 4.6)
- [CVE-2019-19062](https://insights.sbomify.com/CVE-2019-19062/): Denial of service in canonical:ubuntu linux (medium 4.7)
- [CVE-2019-19061](https://insights.sbomify.com/CVE-2019-19061/): Denial of service in broadcom:brocade fabric operating system firmware (high 7.5)
- [CVE-2019-19060](https://insights.sbomify.com/CVE-2019-19060/): Denial of service in broadcom:brocade fabric operating system firmware (high 7.5)
- [CVE-2019-1906](https://insights.sbomify.com/CVE-2019-1906/): Cisco Prime Infrastructure Virtual Domain Privilege Escalation Vulnerability (medium 4.3)
- [CVE-2019-19059](https://insights.sbomify.com/CVE-2019-19059/): Denial of service in canonical:ubuntu linux (medium 4.7)
- [CVE-2019-19058](https://insights.sbomify.com/CVE-2019-19058/): Denial of service in canonical:ubuntu linux (medium 4.7)
- [CVE-2019-19057](https://insights.sbomify.com/CVE-2019-19057/): Denial of service in broadcom:brocade fabric operating system firmware (low 3.3)
- [CVE-2019-19056](https://insights.sbomify.com/CVE-2019-19056/): Denial of service in canonical:ubuntu linux (medium 4.7)
- [CVE-2019-19055](https://insights.sbomify.com/CVE-2019-19055/): Denial of service in canonical:ubuntu linux (medium 5.5)
- [CVE-2019-19054](https://insights.sbomify.com/CVE-2019-19054/): Denial of service in broadcom:brocade fabric operating system firmware (medium 4.7)
- [CVE-2019-19053](https://insights.sbomify.com/CVE-2019-19053/): Denial of service in broadcom:brocade fabric operating system firmware (high 7.5)
- [CVE-2019-19052](https://insights.sbomify.com/CVE-2019-19052/): Denial of service in broadcom:brocade fabric operating system firmware (high 7.5)
- [CVE-2019-19051](https://insights.sbomify.com/CVE-2019-19051/): Denial of service in canonical:ubuntu linux (medium 5.5)
- [CVE-2019-19050](https://insights.sbomify.com/CVE-2019-19050/): Denial of service in broadcom:fabric operating system (high 7.5)
- [CVE-2019-1905](https://insights.sbomify.com/CVE-2019-1905/): Cisco Email Security Appliance GZIP Content Filter Bypass Vulnerability (medium 5.8)
- [CVE-2019-19049](https://insights.sbomify.com/CVE-2019-19049/): Denial of service in linux:linux kernel (high 7.5)
- [CVE-2019-19048](https://insights.sbomify.com/CVE-2019-19048/): Denial of service in canonical:ubuntu linux (high 7.5)
- [CVE-2019-19047](https://insights.sbomify.com/CVE-2019-19047/): Denial of service in canonical:ubuntu linux (medium 5.5)
- [CVE-2019-19046](https://insights.sbomify.com/CVE-2019-19046/): Denial of service in fedoraproject:fedora (medium 6.5)
- [CVE-2019-19045](https://insights.sbomify.com/CVE-2019-19045/): Denial of service in canonical:ubuntu linux (medium 4.4)
- [CVE-2019-19044](https://insights.sbomify.com/CVE-2019-19044/): Denial of service in broadcom:brocade fabric operating system firmware (high 7.5)
- [CVE-2019-19043](https://insights.sbomify.com/CVE-2019-19043/): Denial of service in canonical:ubuntu linux (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/81/