# Vulnerabilities published in 2019


- [CVE-2019-18813](https://insights.sbomify.com/CVE-2019-18813/): Denial of service in canonical:ubuntu linux (high 7.5)
- [CVE-2019-18812](https://insights.sbomify.com/CVE-2019-18812/): Denial of service in linux:linux kernel (high 7.5)
- [CVE-2019-18811](https://insights.sbomify.com/CVE-2019-18811/): Denial of service in fedoraproject:fedora (medium 5.5)
- [CVE-2019-18810](https://insights.sbomify.com/CVE-2019-18810/): Denial of service in canonical:ubuntu linux (high 7.5)
- [CVE-2019-1881](https://insights.sbomify.com/CVE-2019-1881/): Cisco Industrial Network Director Cross-Site Request Forgery Vulnerability (medium 4.7)
- [CVE-2019-18809](https://insights.sbomify.com/CVE-2019-18809/): Denial of service in canonical:ubuntu linux (medium 4.6)
- [CVE-2019-18808](https://insights.sbomify.com/CVE-2019-18808/): Denial of service in canonical:ubuntu linux (medium 5.5)
- [CVE-2019-18807](https://insights.sbomify.com/CVE-2019-18807/): Denial of service in linux:linux kernel (high 7.5)
- [CVE-2019-18806](https://insights.sbomify.com/CVE-2019-18806/): Denial of service in linux:linux kernel (medium 5.5)
- [CVE-2019-18805](https://insights.sbomify.com/CVE-2019-18805/): Integer overflow in broadcom:fabric operating system (critical 9.8)
- [CVE-2019-18804](https://insights.sbomify.com/CVE-2019-18804/): Null dereference in canonical:ubuntu linux (high 7.5)
- [CVE-2019-18802](https://insights.sbomify.com/CVE-2019-18802/): Security feature bypass in envoyproxy:envoy (critical 9.8)
- [CVE-2019-18801](https://insights.sbomify.com/CVE-2019-18801/): Memory corruption in envoyproxy:envoy (critical 9.8)
- [CVE-2019-18800](https://insights.sbomify.com/CVE-2019-18800/): Information disclosure in rakuten:viber (high 8.8)
- [CVE-2019-1880](https://insights.sbomify.com/CVE-2019-1880/): Cisco Unified Computing System BIOS Signature Bypass Vulnerability (medium 4.4)
- [CVE-2019-18799](https://insights.sbomify.com/CVE-2019-18799/): Null dereference in sass-lang:libsass (medium 6.5)
- [CVE-2019-18798](https://insights.sbomify.com/CVE-2019-18798/): Memory corruption in sass-lang:libsass (medium 6.5)
- [CVE-2019-18797](https://insights.sbomify.com/CVE-2019-18797/): Denial of service in sass-lang:libsass (medium 6.5)
- [CVE-2019-18796](https://insights.sbomify.com/CVE-2019-18796/): Denial of service in un4seen:bass (medium 6.5)
- [CVE-2019-18795](https://insights.sbomify.com/CVE-2019-18795/): Memory corruption in un4seen:bass (medium 6.5)
- [CVE-2019-18794](https://insights.sbomify.com/CVE-2019-18794/): Use after free in un4seen:bass (medium 6.5)
- [CVE-2019-18793](https://insights.sbomify.com/CVE-2019-18793/): Cross-site scripting in parallels:parallels plesk panel (medium 6.1)
- [CVE-2019-18792](https://insights.sbomify.com/CVE-2019-18792/): Security feature bypass in debian:debian linux (critical 9.1)
- [CVE-2019-18791](https://insights.sbomify.com/CVE-2019-18791/): Cross-site scripting in lexmark:6500e firmware (medium 5.4)
- [CVE-2019-18790](https://insights.sbomify.com/CVE-2019-18790/): Missing authorization in debian:debian linux (medium 6.5)
- [CVE-2019-1879](https://insights.sbomify.com/CVE-2019-1879/): Cisco Integrated Management Controller CLI Command Injection Vulnerability (medium 6.4)
- [CVE-2019-18786](https://insights.sbomify.com/CVE-2019-18786/): Information disclosure in canonical:ubuntu linux (medium 5.5)
- [CVE-2019-18785](https://insights.sbomify.com/CVE-2019-18785/): Information disclosure in suitecrm:suitecrm (high 7.5)
- [CVE-2019-18784](https://insights.sbomify.com/CVE-2019-18784/): SQL injection in salesagility:suitecrm (critical 9.8)
- [CVE-2019-18782](https://insights.sbomify.com/CVE-2019-18782/): Misconfiguration in salesagility:suitecrm (medium 5.3)
- [CVE-2019-18781](https://insights.sbomify.com/CVE-2019-18781/): Open redirect in zohocorp:manageengine adselfservice plus (medium 6.1)
- [CVE-2019-18780](https://insights.sbomify.com/CVE-2019-18780/): Command injection in veritas:access (critical 9.8)
- [CVE-2019-1878](https://insights.sbomify.com/CVE-2019-1878/): Cisco TelePresence Endpoint Command Shell Injection Vulnerability (high 7.5)
- [CVE-2019-1877](https://insights.sbomify.com/CVE-2019-1877/): Cisco Enterprise Chat and Email Attachment Download Vulnerability (medium 6.5)
- [CVE-2019-1876](https://insights.sbomify.com/CVE-2019-1876/): Cisco Wide Area Application Services Software HTTPS Proxy Authentication Bypass Vulnerability (medium 4.0)
- [CVE-2019-1875](https://insights.sbomify.com/CVE-2019-1875/): Cisco Prime Service Catalog Cross-Site Scripting Vulnerability (medium 4.8)
- [CVE-2019-1874](https://insights.sbomify.com/CVE-2019-1874/): Cisco Prime Service Catalog Cross-Site Request Forgery Vulnerability (high 8.8)
- [CVE-2019-1873](https://insights.sbomify.com/CVE-2019-1873/): Cisco ASA and FTD Software Cryptographic TLS and SSL Driver Denial of Service Vulnerability (high 8.6)
- [CVE-2019-1872](https://insights.sbomify.com/CVE-2019-1872/): Cisco TelePresence Video Communication Server and Cisco Expressway Series Server-Side Request Forgery Vulnerability (medium 5.3)
- [CVE-2019-1871](https://insights.sbomify.com/CVE-2019-1871/): Cisco Integrated Management Controller Buffer Overflow Vulnerability (high 7.2)
- [CVE-2019-1870](https://insights.sbomify.com/CVE-2019-1870/): Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2019-1869](https://insights.sbomify.com/CVE-2019-1869/): Cisco StarOS Denial of Service Vulnerability (high 8.6)
- [CVE-2019-18684](https://insights.sbomify.com/CVE-2019-18684/): Race condition in sudo project:sudo (high 7.0)
- [CVE-2019-18683](https://insights.sbomify.com/CVE-2019-18683/): Use after free in broadcom:fabric operating system (high 7.0)
- [CVE-2019-18680](https://insights.sbomify.com/CVE-2019-18680/): Null dereference in linux:linux kernel (high 7.5)
- [CVE-2019-1868](https://insights.sbomify.com/CVE-2019-1868/): Cisco Webex Meetings Server Information Disclosure Vulnerability (medium 5.3)
- [CVE-2019-18679](https://insights.sbomify.com/CVE-2019-18679/): Information disclosure in canonical:ubuntu linux (high 7.5)
- [CVE-2019-18678](https://insights.sbomify.com/CVE-2019-18678/): Other in canonical:ubuntu linux (medium 5.3)
- [CVE-2019-18677](https://insights.sbomify.com/CVE-2019-18677/): Open redirect in canonical:ubuntu linux (medium 6.1)
- [CVE-2019-18676](https://insights.sbomify.com/CVE-2019-18676/): Memory corruption in canonical:ubuntu linux (high 7.5)
- [CVE-2019-18675](https://insights.sbomify.com/CVE-2019-18675/): Integer overflow in linux:linux kernel (high 7.8)
- [CVE-2019-18674](https://insights.sbomify.com/CVE-2019-18674/): Missing authorization in joomla:joomla\! (medium 5.3)
- [CVE-2019-18673](https://insights.sbomify.com/CVE-2019-18673/): Information disclosure in shiftcrypto:bitbox02 (medium 4.6)
- [CVE-2019-18672](https://insights.sbomify.com/CVE-2019-18672/): Security feature bypass in shapeshift:keepkey firmware (high 7.5)
- [CVE-2019-18671](https://insights.sbomify.com/CVE-2019-18671/): Memory corruption in keepkey:keepkey firmware (critical 9.8)
- [CVE-2019-18670](https://insights.sbomify.com/CVE-2019-18670/): Privilege escalation in acer:quick access (high 7.8)
- [CVE-2019-1867](https://insights.sbomify.com/CVE-2019-1867/): Cisco Elastic Services Controller REST API Authentication Bypass Vulnerability (critical 10.0)
- [CVE-2019-18668](https://insights.sbomify.com/CVE-2019-18668/): Business logic in wpwham:currency switcher for woocommerce (medium 6.5)
- [CVE-2019-18667](https://insights.sbomify.com/CVE-2019-18667/): Cross-site scripting in pfsense:pfsense-pkg-freeradius3 (medium 6.1)
- [CVE-2019-18666](https://insights.sbomify.com/CVE-2019-18666/): Auth bypass in dlink:dap-1360 revision f firmware (critical 9.8)
- [CVE-2019-18665](https://insights.sbomify.com/CVE-2019-18665/): Path traversal in secudos:domos (high 7.5)
- [CVE-2019-18664](https://insights.sbomify.com/CVE-2019-18664/): Cross-site scripting in secudos:domos (medium 5.4)
- [CVE-2019-18663](https://insights.sbomify.com/CVE-2019-18663/): SQL injection in isl:arp-guard (critical 9.8)
- [CVE-2019-18662](https://insights.sbomify.com/CVE-2019-18662/): SQL injection in youphptube:youphptube (critical 9.8)
- [CVE-2019-18661](https://insights.sbomify.com/CVE-2019-18661/): Auth bypass in fastweb:fastgate firmware (high 7.5)
- [CVE-2019-18660](https://insights.sbomify.com/CVE-2019-18660/): Information disclosure in canonical:ubuntu linux (medium 4.7)
- [CVE-2019-1866](https://insights.sbomify.com/CVE-2019-1866/): Cisco Webex Business Suite Host Header Value Integrity Vulnerability (low 3.1)
- [CVE-2019-18659](https://insights.sbomify.com/CVE-2019-18659/): Auth bypass in ready:wireless emergency alerts (medium 5.3)
- [CVE-2019-18658](https://insights.sbomify.com/CVE-2019-18658/): Helm Unsafe Link Following (critical 9.8)
- [CVE-2019-18657](https://insights.sbomify.com/CVE-2019-18657/): Other in clickhouse:clickhouse (medium 5.3)
- [CVE-2019-18656](https://insights.sbomify.com/CVE-2019-18656/): Pimcore XSS Vulnerability (medium 6.1)
- [CVE-2019-18655](https://insights.sbomify.com/CVE-2019-18655/): Memory corruption in upredsun:file sharing wizard (critical 9.8)
- [CVE-2019-18654](https://insights.sbomify.com/CVE-2019-18654/): Cross-site scripting in avg:anti-virus (medium 6.1)
- [CVE-2019-18653](https://insights.sbomify.com/CVE-2019-18653/): Cross-site scripting in avast:antivirus (medium 6.1)
- [CVE-2019-18652](https://insights.sbomify.com/CVE-2019-18652/): Cross-site scripting in watchguard:xmt515 firmware (medium 6.1)
- [CVE-2019-18651](https://insights.sbomify.com/CVE-2019-18651/): Cross-site request forgery in 3xlogic:infinias access control firmware (medium 6.5)
- [CVE-2019-18650](https://insights.sbomify.com/CVE-2019-18650/): Cross-site request forgery in joomla:joomla\! (high 8.8)
- [CVE-2019-1865](https://insights.sbomify.com/CVE-2019-1865/): Cisco Integrated Management Controller Command Injection Vulnerability (high 8.8)
- [CVE-2019-18649](https://insights.sbomify.com/CVE-2019-18649/): Cross-site scripting in untangle:ng firewall (medium 4.8)
- [CVE-2019-18648](https://insights.sbomify.com/CVE-2019-18648/): Cross-site scripting in untangle:ng firewall (medium 4.8)
- [CVE-2019-18647](https://insights.sbomify.com/CVE-2019-18647/): Command injection in untangle:ng firewall (high 7.2)
- [CVE-2019-18646](https://insights.sbomify.com/CVE-2019-18646/): SQL injection in untangle:ng firewall (high 7.2)
- [CVE-2019-18645](https://insights.sbomify.com/CVE-2019-18645/): Path traversal in totaldefense:anti-virus (medium 5.5)
- [CVE-2019-18644](https://insights.sbomify.com/CVE-2019-18644/): Race condition in totaldefense:anti-virus (medium 5.9)
- [CVE-2019-18643](https://insights.sbomify.com/CVE-2019-18643/): File upload in sparkdevnetwork:rock rms (critical 9.8)
- [CVE-2019-18642](https://insights.sbomify.com/CVE-2019-18642/): Business logic in sparkdevnetwork:rock rms (critical 9.8)
- [CVE-2019-18641](https://insights.sbomify.com/CVE-2019-18641/): Missing authorization in sparkdevnetwork:rock rms (critical 9.8)
- [CVE-2019-1864](https://insights.sbomify.com/CVE-2019-1864/): Cisco Integrated Management Controller Command Injection Vulnerability (high 8.8)
- [CVE-2019-18636](https://insights.sbomify.com/CVE-2019-18636/): Cross-site scripting in jitbit:.net forum (medium 5.4)
- [CVE-2019-18635](https://insights.sbomify.com/CVE-2019-18635/): Null dereference in themooltipass:moolticute (high 7.5)
- [CVE-2019-18634](https://insights.sbomify.com/CVE-2019-18634/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2019-18633](https://insights.sbomify.com/CVE-2019-18633/): Security feature bypass in europa:eidas-node integration package (critical 9.8)
- [CVE-2019-18632](https://insights.sbomify.com/CVE-2019-18632/): Security feature bypass in europa:eidas-node integration package (critical 9.8)
- [CVE-2019-18631](https://insights.sbomify.com/CVE-2019-18631/): Deserialization in centrify:authentication service (high 7.8)
- [CVE-2019-18630](https://insights.sbomify.com/CVE-2019-18630/): Information disclosure in xerox:altalink b8045 firmware (high 7.5)
- [CVE-2019-1863](https://insights.sbomify.com/CVE-2019-1863/): Cisco Integrated Management Controller Privilege Escalation Vulnerability (medium 6.5)
- [CVE-2019-18629](https://insights.sbomify.com/CVE-2019-18629/): Code injection in xerox:altalink b8045 firmware (high 8.1)
- [CVE-2019-18628](https://insights.sbomify.com/CVE-2019-18628/): Security feature bypass in xerox:altalink b8045 firmware (medium 4.9)
- [CVE-2019-18626](https://insights.sbomify.com/CVE-2019-18626/): Missing authorization in harriscomputer:ormed mis (medium 4.3)
- [CVE-2019-18625](https://insights.sbomify.com/CVE-2019-18625/): Security feature bypass in debian:debian linux (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/84/