# Vulnerabilities published in 2019


- [CVE-2019-18624](https://insights.sbomify.com/CVE-2019-18624/): Security feature bypass in opera:mini (critical 9.8)
- [CVE-2019-18623](https://insights.sbomify.com/CVE-2019-18623/): Privilege escalation in energycap:energycap (critical 9.8)
- [CVE-2019-18622](https://insights.sbomify.com/CVE-2019-18622/): SQL injection in phpMyAdmin (critical 9.8)
- [CVE-2019-1862](https://insights.sbomify.com/CVE-2019-1862/): Cisco IOS XE Software Web UI Command Injection Vulnerability (high 7.2)
- [CVE-2019-18619](https://insights.sbomify.com/CVE-2019-18619/): Memory corruption in hp:envy - 13t-ah100 firmware (high 7.8)
- [CVE-2019-18618](https://insights.sbomify.com/CVE-2019-18618/): Security feature bypass in hp:elite slice firmware (medium 6.0)
- [CVE-2019-18615](https://insights.sbomify.com/CVE-2019-18615/): Information disclosure in arista:cloudvision portal (medium 4.9)
- [CVE-2019-18614](https://insights.sbomify.com/CVE-2019-18614/): Memory corruption in cypress:cyw20735 firmware (high 7.8)
- [CVE-2019-18612](https://insights.sbomify.com/CVE-2019-18612/): Information disclosure in mediawiki:abusefilter (medium 5.3)
- [CVE-2019-18611](https://insights.sbomify.com/CVE-2019-18611/): Information disclosure in mediawiki:checkuser (medium 6.5)
- [CVE-2019-18610](https://insights.sbomify.com/CVE-2019-18610/): Missing authorization in debian:debian linux (high 8.8)
- [CVE-2019-1861](https://insights.sbomify.com/CVE-2019-1861/): Cisco Industrial Network Director Remote Code Execution Vulnerability (high 7.2)
- [CVE-2019-18609](https://insights.sbomify.com/CVE-2019-18609/): Integer overflow in canonical:ubuntu linux (critical 9.8)
- [CVE-2019-18608](https://insights.sbomify.com/CVE-2019-18608/): Cezerin Unauthorized Acces (high 7.5)
- [CVE-2019-18604](https://insights.sbomify.com/CVE-2019-18604/): Memory corruption in axodraw2 project:axodraw2 (critical 9.8)
- [CVE-2019-18603](https://insights.sbomify.com/CVE-2019-18603/): Information disclosure in debian:debian linux (medium 5.9)
- [CVE-2019-18602](https://insights.sbomify.com/CVE-2019-18602/): Information disclosure in debian:debian linux (high 7.5)
- [CVE-2019-18601](https://insights.sbomify.com/CVE-2019-18601/): Denial of service in openafs:openafs (high 7.5)
- [CVE-2019-1860](https://insights.sbomify.com/CVE-2019-1860/): Cisco Unified Intelligence Center Remote File Injection Vulnerability (medium 5.9)
- [CVE-2019-1859](https://insights.sbomify.com/CVE-2019-1859/): Cisco Small Business Switches Secure Shell Certificate Authentication Bypass Vulnerability (high 7.2)
- [CVE-2019-18588](https://insights.sbomify.com/CVE-2019-18588/): Cross-site scripting in Unisphere for PowerMax (critical 9.0)
- [CVE-2019-18582](https://insights.sbomify.com/CVE-2019-18582/): Code injection in Data Protection Advisor (critical 9.1)
- [CVE-2019-18581](https://insights.sbomify.com/CVE-2019-18581/): Missing authorization in Data Protection Advisor (critical 9.1)
- [CVE-2019-18580](https://insights.sbomify.com/CVE-2019-18580/): Deserialization in EMC Storage M&R (critical 9.8)
- [CVE-2019-1858](https://insights.sbomify.com/CVE-2019-1858/): Cisco FXOS and NX-OS Software Simple Network Management Protocol Denial of Service Vulnerability (high 8.6)
- [CVE-2019-18579](https://insights.sbomify.com/CVE-2019-18579/): Misconfiguration in CPG BIOS (high 7.6)
- [CVE-2019-18578](https://insights.sbomify.com/CVE-2019-18578/): Cross-site scripting in XtremIO (critical 9.0)
- [CVE-2019-18577](https://insights.sbomify.com/CVE-2019-18577/): Privilege escalation in XtremIO (medium 6.7)
- [CVE-2019-18576](https://insights.sbomify.com/CVE-2019-18576/): Information disclosure in XtremIO (medium 6.7)
- [CVE-2019-18575](https://insights.sbomify.com/CVE-2019-18575/): Other in Dell Command Configure (DCC) (high 7.1)
- [CVE-2019-18574](https://insights.sbomify.com/CVE-2019-18574/): Cross-site scripting in RSA Authentication Manager (medium 4.8)
- [CVE-2019-18573](https://insights.sbomify.com/CVE-2019-18573/): Auth bypass in RSA Identity Governance & Lifecycle (high 8.7)
- [CVE-2019-18572](https://insights.sbomify.com/CVE-2019-18572/): Auth bypass in RSA Identity Governance & Lifecycle (high 8.3)
- [CVE-2019-18571](https://insights.sbomify.com/CVE-2019-18571/): Cross-site scripting in RSA Identity Governance & Lifecycle (medium 5.4)
- [CVE-2019-1857](https://insights.sbomify.com/CVE-2019-1857/): Cisco HyperFlex HX-Series Web-Based Management Interface Cross-Site Request Forgery Vulnerability (medium 6.1)
- [CVE-2019-18568](https://insights.sbomify.com/CVE-2019-18568/): Privilege escalation in Antivirus Free Antivirus (high 8.1)
- [CVE-2019-18567](https://insights.sbomify.com/CVE-2019-18567/): Bromium client - out of bound read results in race condition causing Kernel memory leaks or denial of service (medium 6.1)
- [CVE-2019-1856](https://insights.sbomify.com/CVE-2019-1856/): Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2019-1855](https://insights.sbomify.com/CVE-2019-1855/): Cisco Jabber for Windows DLL Preloading Vulnerability (high 7.3)
- [CVE-2019-1854](https://insights.sbomify.com/CVE-2019-1854/): Cisco Expressway Series Directory Traversal Vulnerability (medium 4.1)
- [CVE-2019-1853](https://insights.sbomify.com/CVE-2019-1853/): Cisco AnyConnect Secure Mobility Client for Linux Out-of-Bounds Memory Read Vulnerability (medium 4.8)
- [CVE-2019-1852](https://insights.sbomify.com/CVE-2019-1852/): Cisco Prime Network Registrar Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2019-1851](https://insights.sbomify.com/CVE-2019-1851/): Cisco Identity Services Engine Arbitrary Client Certificate Creation Vulnerability (medium 6.8)
- [CVE-2019-1850](https://insights.sbomify.com/CVE-2019-1850/): Cisco Integrated Management Controller Command Injection Vulnerability (high 7.2)
- [CVE-2019-1849](https://insights.sbomify.com/CVE-2019-1849/): Cisco IOS XR Software BGP MPLS-Based EVPN Denial of Service Vulnerability (high 7.4)
- [CVE-2019-1848](https://insights.sbomify.com/CVE-2019-1848/): Cisco DNA Center Authentication Bypass Vulnerability (critical 9.3)
- [CVE-2019-18466](https://insights.sbomify.com/CVE-2019-18466/): Podman Symlink Vulnerability (medium 5.5)
- [CVE-2019-18465](https://insights.sbomify.com/CVE-2019-18465/): Auth bypass in ipswitch:moveit transfer (critical 9.8)
- [CVE-2019-18464](https://insights.sbomify.com/CVE-2019-18464/): SQL injection in ipswitch:moveit transfer (critical 9.8)
- [CVE-2019-18463](https://insights.sbomify.com/CVE-2019-18463/): Misconfiguration in gitlab:gitlab (medium 4.3)
- [CVE-2019-18462](https://insights.sbomify.com/CVE-2019-18462/): Misconfiguration in gitlab:gitlab (medium 4.3)
- [CVE-2019-18461](https://insights.sbomify.com/CVE-2019-18461/): Information disclosure in gitlab:gitlab (medium 4.3)
- [CVE-2019-18460](https://insights.sbomify.com/CVE-2019-18460/): Missing authorization in gitlab:gitlab (high 7.5)
- [CVE-2019-1846](https://insights.sbomify.com/CVE-2019-1846/): Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers MPLS OAM Denial of Service Vulnerability (high 7.4)
- [CVE-2019-18459](https://insights.sbomify.com/CVE-2019-18459/): Misconfiguration in gitlab:gitlab (medium 5.3)
- [CVE-2019-18458](https://insights.sbomify.com/CVE-2019-18458/): Missing authorization in gitlab:gitlab (low 2.7)
- [CVE-2019-18457](https://insights.sbomify.com/CVE-2019-18457/): Misconfiguration in gitlab:gitlab (high 8.8)
- [CVE-2019-18456](https://insights.sbomify.com/CVE-2019-18456/): Missing authorization in gitlab:gitlab (medium 5.3)
- [CVE-2019-18455](https://insights.sbomify.com/CVE-2019-18455/): Denial of service in gitlab:gitlab (high 7.5)
- [CVE-2019-18454](https://insights.sbomify.com/CVE-2019-18454/): Cross-site scripting in gitlab:gitlab (medium 6.1)
- [CVE-2019-18453](https://insights.sbomify.com/CVE-2019-18453/): Missing authorization in gitlab:gitlab (medium 4.3)
- [CVE-2019-18452](https://insights.sbomify.com/CVE-2019-18452/): Missing authorization in gitlab:gitlab (medium 5.3)
- [CVE-2019-18451](https://insights.sbomify.com/CVE-2019-18451/): Open redirect in gitlab:gitlab (medium 6.1)
- [CVE-2019-18450](https://insights.sbomify.com/CVE-2019-18450/): Misconfiguration in gitlab:gitlab (medium 4.3)
- [CVE-2019-1845](https://insights.sbomify.com/CVE-2019-1845/): Denial of service in Cisco TelePresence Video Communication Server (VCS) (high 8.6)
- [CVE-2019-18449](https://insights.sbomify.com/CVE-2019-18449/): Missing authorization in gitlab:gitlab (medium 4.3)
- [CVE-2019-18448](https://insights.sbomify.com/CVE-2019-18448/): Missing authorization in gitlab:gitlab (medium 6.5)
- [CVE-2019-18447](https://insights.sbomify.com/CVE-2019-18447/): Misconfiguration in gitlab:gitlab (medium 4.3)
- [CVE-2019-18446](https://insights.sbomify.com/CVE-2019-18446/): Misconfiguration in gitlab:gitlab (medium 4.3)
- [CVE-2019-1844](https://insights.sbomify.com/CVE-2019-1844/): Cisco Email Security Appliance Filter Bypass Vulnerability (medium 5.3)
- [CVE-2019-1843](https://insights.sbomify.com/CVE-2019-1843/): Cisco RV110W, RV130W, and RV215W Routers Management Interface Denial of Service Vulnerability (high 8.6)
- [CVE-2019-18426](https://insights.sbomify.com/CVE-2019-18426/): WhatsApp Cross-Site Scripting (high 8.2, exploited in the wild)
- [CVE-2019-18425](https://insights.sbomify.com/CVE-2019-18425/): Privilege escalation in debian:debian linux (critical 9.8)
- [CVE-2019-18424](https://insights.sbomify.com/CVE-2019-18424/): Memory corruption in debian:debian linux (medium 6.8)
- [CVE-2019-18423](https://insights.sbomify.com/CVE-2019-18423/): Null dereference in debian:debian linux (high 8.8)
- [CVE-2019-18422](https://insights.sbomify.com/CVE-2019-18422/): Privilege escalation in debian:debian linux (high 8.8)
- [CVE-2019-18421](https://insights.sbomify.com/CVE-2019-18421/): Race condition in debian:debian linux (high 7.5)
- [CVE-2019-18420](https://insights.sbomify.com/CVE-2019-18420/): Denial of service in debian:debian linux (medium 6.5)
- [CVE-2019-1842](https://insights.sbomify.com/CVE-2019-1842/): Cisco IOS XR Software Secure Shell Authentication Vulnerability (medium 5.4)
- [CVE-2019-18419](https://insights.sbomify.com/CVE-2019-18419/): Cross-site scripting in clonos:clonos (medium 6.1)
- [CVE-2019-18418](https://insights.sbomify.com/CVE-2019-18418/): Auth bypass in clonos:clonos (critical 9.8)
- [CVE-2019-18417](https://insights.sbomify.com/CVE-2019-18417/): File upload in sourcecodester:restaurant management system (high 8.8)
- [CVE-2019-18416](https://insights.sbomify.com/CVE-2019-18416/): Cross-site scripting in restaurant management system project:restaurant management system (medium 6.1)
- [CVE-2019-18415](https://insights.sbomify.com/CVE-2019-18415/): Cross-site scripting in restaurant management system project:restaurant management system (medium 6.1)
- [CVE-2019-18414](https://insights.sbomify.com/CVE-2019-18414/): Cross-site request forgery in sourcecodester:restaurant management system (high 8.8)
- [CVE-2019-18413](https://insights.sbomify.com/CVE-2019-18413/): SQL Injection and Cross-site Scripting in class-validator (low 3.7)
- [CVE-2019-18412](https://insights.sbomify.com/CVE-2019-18412/): XML external entity in jetbrains:idetalk (high 7.5)
- [CVE-2019-18411](https://insights.sbomify.com/CVE-2019-18411/): Cross-site request forgery in zohocorp:manageengine adselfservice plus (high 8.8)
- [CVE-2019-1841](https://insights.sbomify.com/CVE-2019-1841/): Cisco DNA Center Unintended Proxy Via SWIM Import Interface Vulnerability (medium 6.5)
- [CVE-2019-18409](https://insights.sbomify.com/CVE-2019-18409/): Ruby_parser-legacy Incorrect Permission Assignment for Critical Resource (high 7.8)
- [CVE-2019-18408](https://insights.sbomify.com/CVE-2019-18408/): Use after free in canonical:ubuntu linux (high 7.5)
- [CVE-2019-1840](https://insights.sbomify.com/CVE-2019-1840/): Cisco Prime Network Registrar Denial of Service Vulnerability (high 8.6)
- [CVE-2019-18397](https://insights.sbomify.com/CVE-2019-18397/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2019-18396](https://insights.sbomify.com/CVE-2019-18396/): Command injection in technicolor:td5130v2 firmware (high 7.2)
- [CVE-2019-18394](https://insights.sbomify.com/CVE-2019-18394/): Ignite Realtime Openfire vulnerable to Server Side Request Forgery (critical 9.8)
- [CVE-2019-18393](https://insights.sbomify.com/CVE-2019-18393/): Ignite Realtime Openfire directory traversal vulnerability (medium 5.3)
- [CVE-2019-18391](https://insights.sbomify.com/CVE-2019-18391/): Memory corruption in debian:debian linux (medium 5.5)
- [CVE-2019-18390](https://insights.sbomify.com/CVE-2019-18390/): Memory corruption in debian:debian linux (high 7.1)
- [CVE-2019-1839](https://insights.sbomify.com/CVE-2019-1839/): Cisco Remote PHY Device Software Command Injection Vulnerability (medium 6.7)
- [CVE-2019-18389](https://insights.sbomify.com/CVE-2019-18389/): Memory corruption in debian:debian linux (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/85/