# Vulnerabilities published in 2019


- [CVE-2019-18388](https://insights.sbomify.com/CVE-2019-18388/): Null dereference in debian:debian linux (medium 5.5)
- [CVE-2019-18387](https://insights.sbomify.com/CVE-2019-18387/): SQL injection in hotel and lodge management system project:hotel and lodge management system (critical 9.8)
- [CVE-2019-18386](https://insights.sbomify.com/CVE-2019-18386/): Denial of service in unisys:mcp firmware (high 8.7)
- [CVE-2019-18385](https://insights.sbomify.com/CVE-2019-18385/): Information disclosure in terra-master:fs-210 firmware (high 7.5)
- [CVE-2019-18384](https://insights.sbomify.com/CVE-2019-18384/): Path traversal in terra-master:fs-210 firmware (medium 6.5)
- [CVE-2019-18383](https://insights.sbomify.com/CVE-2019-18383/): Missing authorization in terra-master:fs-210 firmware (high 7.5)
- [CVE-2019-18382](https://insights.sbomify.com/CVE-2019-18382/): Denial of service in avstar:pe204 firmware (high 7.5)
- [CVE-2019-18381](https://insights.sbomify.com/CVE-2019-18381/): Misconfiguration in Norton Password Manager (medium 6.3)
- [CVE-2019-18380](https://insights.sbomify.com/CVE-2019-18380/): Auth bypass in Industrial Control System Protection (ICSP) (medium 6.5)
- [CVE-2019-1838](https://insights.sbomify.com/CVE-2019-1838/): Cisco Application Policy Infrastructure Controller Web-Based Management Interface Cross-Site Scripting Vulnerability (medium 5.4)
- [CVE-2019-18379](https://insights.sbomify.com/CVE-2019-18379/): Server-side request forgery in Symantec Messaging Gateway (high 7.3)
- [CVE-2019-18378](https://insights.sbomify.com/CVE-2019-18378/): Cross-site scripting in Symantec Messaging Gateway (medium 4.8)
- [CVE-2019-18377](https://insights.sbomify.com/CVE-2019-18377/): Privilege escalation in Symantec Messaging Gateway (high 7.2)
- [CVE-2019-18376](https://insights.sbomify.com/CVE-2019-18376/): Information disclosure in Symantec Management Center (MC) (medium 5.9)
- [CVE-2019-18375](https://insights.sbomify.com/CVE-2019-18375/): Auth bypass in Symantec Advanced Secure Gateway (ASG) and ProxySG (medium 6.5)
- [CVE-2019-18374](https://insights.sbomify.com/CVE-2019-18374/): Auth bypass in Critical System Protection (CSP) (critical 9.8)
- [CVE-2019-18373](https://insights.sbomify.com/CVE-2019-18373/): Security feature bypass in Norton AppLock (medium 5.6)
- [CVE-2019-18372](https://insights.sbomify.com/CVE-2019-18372/): Privilege escalation in Symantec Endpoint Protection (high 7.8)
- [CVE-2019-18371](https://insights.sbomify.com/CVE-2019-18371/): Path traversal in mi:millet router 3g firmware (high 7.5)
- [CVE-2019-18370](https://insights.sbomify.com/CVE-2019-18370/): Command injection in mi:millet router 3g firmware (critical 9.8)
- [CVE-2019-1837](https://insights.sbomify.com/CVE-2019-1837/): Cisco Unified Communications Manager Denial of Service Vulnerability (medium 5.3)
- [CVE-2019-18369](https://insights.sbomify.com/CVE-2019-18369/): Missing authorization in jetbrains:youtrack (medium 5.3)
- [CVE-2019-18368](https://insights.sbomify.com/CVE-2019-18368/): Privilege escalation in jetbrains:toolbox (high 7.3)
- [CVE-2019-18367](https://insights.sbomify.com/CVE-2019-18367/): Missing authorization in jetbrains:teamcity (medium 5.3)
- [CVE-2019-18366](https://insights.sbomify.com/CVE-2019-18366/): Information disclosure in jetbrains:teamcity (medium 5.3)
- [CVE-2019-18365](https://insights.sbomify.com/CVE-2019-18365/): Other in jetbrains:teamcity (medium 4.3)
- [CVE-2019-18364](https://insights.sbomify.com/CVE-2019-18364/): Deserialization in jetbrains:teamcity (critical 9.8)
- [CVE-2019-18363](https://insights.sbomify.com/CVE-2019-18363/): Missing authorization in jetbrains:teamcity (medium 5.3)
- [CVE-2019-18362](https://insights.sbomify.com/CVE-2019-18362/): Misconfiguration in jetbrains:mps (medium 5.3)
- [CVE-2019-18361](https://insights.sbomify.com/CVE-2019-18361/): Privilege escalation in jetbrains:intellij idea (medium 5.3)
- [CVE-2019-18360](https://insights.sbomify.com/CVE-2019-18360/): Information disclosure in jetbrains:hub (medium 5.3)
- [CVE-2019-1836](https://insights.sbomify.com/CVE-2019-1836/): Path traversal in Cisco NX-OS Software for Nexus 9000 Series Fabric Switches ACI Mode (medium 5.5)
- [CVE-2019-18359](https://insights.sbomify.com/CVE-2019-18359/): Memory corruption in glensawyer:mp3gain (medium 5.5)
- [CVE-2019-18357](https://insights.sbomify.com/CVE-2019-18357/): Cross-site scripting in thycotic:secret server (medium 6.1)
- [CVE-2019-18356](https://insights.sbomify.com/CVE-2019-18356/): Cross-site scripting in thycotic:secret server (medium 6.1)
- [CVE-2019-18355](https://insights.sbomify.com/CVE-2019-18355/): Server-side request forgery in thycotic:secret server (critical 9.8)
- [CVE-2019-18352](https://insights.sbomify.com/CVE-2019-18352/): Missing authorization in phoenixcontact:fl nat 2208 firmware (high 8.2)
- [CVE-2019-18350](https://insights.sbomify.com/CVE-2019-18350/): Cross-site scripting in ant.design:ant design pro (medium 6.1)
- [CVE-2019-1835](https://insights.sbomify.com/CVE-2019-1835/): Cisco Aironet Series Access Points Directory Traversal Vulnerability (medium 4.4)
- [CVE-2019-18349](https://insights.sbomify.com/CVE-2019-18349/): Privilege escalation in hotkeyp project:hotkeyp (critical 9.8)
- [CVE-2019-18348](https://insights.sbomify.com/CVE-2019-18348/): Other in python:python (medium 5.4)
- [CVE-2019-18347](https://insights.sbomify.com/CVE-2019-18347/): Cross-site scripting in davical:davical (medium 5.4)
- [CVE-2019-18346](https://insights.sbomify.com/CVE-2019-18346/): Cross-site request forgery in davical:davical (high 8.8)
- [CVE-2019-18345](https://insights.sbomify.com/CVE-2019-18345/): Cross-site scripting in davical:davical (critical 9.3)
- [CVE-2019-18344](https://insights.sbomify.com/CVE-2019-18344/): SQL injection in online grading system project:online grading system (critical 9.8)
- [CVE-2019-18342](https://insights.sbomify.com/CVE-2019-18342/): Other in Control Center Server (CCS) (critical 9.9)
- [CVE-2019-18341](https://insights.sbomify.com/CVE-2019-18341/): Auth bypass in Control Center Server (CCS) (medium 5.3)
- [CVE-2019-18340](https://insights.sbomify.com/CVE-2019-18340/): Weak cryptography in Control Center Server (CCS) (medium 5.5)
- [CVE-2019-1834](https://insights.sbomify.com/CVE-2019-1834/): Cisco Aironet Series Access Points Denial of Service Vulnerability (high 7.4)
- [CVE-2019-18339](https://insights.sbomify.com/CVE-2019-18339/): Auth bypass in SiNVR/SiVMS Video Server (critical 9.8)
- [CVE-2019-18338](https://insights.sbomify.com/CVE-2019-18338/): Path traversal in Control Center Server (CCS) (high 7.7)
- [CVE-2019-18337](https://insights.sbomify.com/CVE-2019-18337/): Auth bypass in Control Center Server (CCS) (critical 9.8)
- [CVE-2019-18336](https://insights.sbomify.com/CVE-2019-18336/): Denial of service in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (high 7.5)
- [CVE-2019-18335](https://insights.sbomify.com/CVE-2019-18335/): Information disclosure in SPPA-T3000 Application Server (medium 5.3)
- [CVE-2019-18334](https://insights.sbomify.com/CVE-2019-18334/): Information disclosure in SPPA-T3000 Application Server (medium 5.3)
- [CVE-2019-18333](https://insights.sbomify.com/CVE-2019-18333/): Information disclosure in SPPA-T3000 Application Server (medium 5.3)
- [CVE-2019-18332](https://insights.sbomify.com/CVE-2019-18332/): Auth bypass in SPPA-T3000 Application Server (medium 5.3)
- [CVE-2019-18331](https://insights.sbomify.com/CVE-2019-18331/): Information disclosure in SPPA-T3000 Application Server (medium 5.3)
- [CVE-2019-18330](https://insights.sbomify.com/CVE-2019-18330/): Memory corruption in SPPA-T3000 MS3000 Migration Server (critical 9.8)
- [CVE-2019-1833](https://insights.sbomify.com/CVE-2019-1833/): Cisco Firepower Threat Defense Software SSL/TLS Policy Bypass Vulnerability (medium 5.8)
- [CVE-2019-18329](https://insights.sbomify.com/CVE-2019-18329/): Memory corruption in SPPA-T3000 MS3000 Migration Server (critical 9.8)
- [CVE-2019-18328](https://insights.sbomify.com/CVE-2019-18328/): Memory corruption in SPPA-T3000 MS3000 Migration Server (critical 9.8)
- [CVE-2019-18327](https://insights.sbomify.com/CVE-2019-18327/): Memory corruption in SPPA-T3000 MS3000 Migration Server (critical 9.8)
- [CVE-2019-18326](https://insights.sbomify.com/CVE-2019-18326/): Memory corruption in SPPA-T3000 MS3000 Migration Server (critical 9.8)
- [CVE-2019-18325](https://insights.sbomify.com/CVE-2019-18325/): Memory corruption in SPPA-T3000 MS3000 Migration Server (critical 9.8)
- [CVE-2019-18324](https://insights.sbomify.com/CVE-2019-18324/): Memory corruption in SPPA-T3000 MS3000 Migration Server (critical 9.8)
- [CVE-2019-18323](https://insights.sbomify.com/CVE-2019-18323/): Memory corruption in SPPA-T3000 MS3000 Migration Server (critical 9.8)
- [CVE-2019-18322](https://insights.sbomify.com/CVE-2019-18322/): Auth bypass in SPPA-T3000 MS3000 Migration Server (critical 9.1)
- [CVE-2019-18321](https://insights.sbomify.com/CVE-2019-18321/): Auth bypass in SPPA-T3000 MS3000 Migration Server (critical 9.1)
- [CVE-2019-18320](https://insights.sbomify.com/CVE-2019-18320/): File upload in SPPA-T3000 Application Server (high 7.5)
- [CVE-2019-1832](https://insights.sbomify.com/CVE-2019-1832/): Cisco Firepower Threat Defense Software Detection Engine Policy Bypass Vulnerability (medium 5.8)
- [CVE-2019-18319](https://insights.sbomify.com/CVE-2019-18319/): Denial of service in SPPA-T3000 Application Server (high 7.5)
- [CVE-2019-18318](https://insights.sbomify.com/CVE-2019-18318/): Denial of service in SPPA-T3000 Application Server (high 7.5)
- [CVE-2019-18317](https://insights.sbomify.com/CVE-2019-18317/): Denial of service in SPPA-T3000 Application Server (high 7.5)
- [CVE-2019-18316](https://insights.sbomify.com/CVE-2019-18316/): Deserialization in SPPA-T3000 Application Server (critical 9.8)
- [CVE-2019-18315](https://insights.sbomify.com/CVE-2019-18315/): Auth bypass in SPPA-T3000 Application Server (critical 9.8)
- [CVE-2019-18314](https://insights.sbomify.com/CVE-2019-18314/): Auth bypass in SPPA-T3000 Application Server (critical 9.8)
- [CVE-2019-18313](https://insights.sbomify.com/CVE-2019-18313/): File upload in SPPA-T3000 MS3000 Migration Server (critical 9.8)
- [CVE-2019-18312](https://insights.sbomify.com/CVE-2019-18312/): Auth bypass in SPPA-T3000 MS3000 Migration Server (medium 5.3)
- [CVE-2019-18311](https://insights.sbomify.com/CVE-2019-18311/): Denial of service in SPPA-T3000 MS3000 Migration Server (high 7.5)
- [CVE-2019-18310](https://insights.sbomify.com/CVE-2019-18310/): Memory corruption in SPPA-T3000 MS3000 Migration Server (high 7.5)
- [CVE-2019-1831](https://insights.sbomify.com/CVE-2019-1831/): Cisco Email Security Appliance Content Filter Bypass Vulnerability (medium 5.8)
- [CVE-2019-18309](https://insights.sbomify.com/CVE-2019-18309/): Privilege escalation in SPPA-T3000 MS3000 Migration Server (high 7.8)
- [CVE-2019-18308](https://insights.sbomify.com/CVE-2019-18308/): Privilege escalation in SPPA-T3000 MS3000 Migration Server (high 7.8)
- [CVE-2019-18307](https://insights.sbomify.com/CVE-2019-18307/): Memory corruption in SPPA-T3000 MS3000 Migration Server (high 7.5)
- [CVE-2019-18306](https://insights.sbomify.com/CVE-2019-18306/): Memory corruption in SPPA-T3000 MS3000 Migration Server (high 7.5)
- [CVE-2019-18305](https://insights.sbomify.com/CVE-2019-18305/): Integer overflow in SPPA-T3000 MS3000 Migration Server (high 7.5)
- [CVE-2019-18304](https://insights.sbomify.com/CVE-2019-18304/): Integer overflow in SPPA-T3000 MS3000 Migration Server (high 7.5)
- [CVE-2019-18303](https://insights.sbomify.com/CVE-2019-18303/): Integer overflow in SPPA-T3000 MS3000 Migration Server (high 7.5)
- [CVE-2019-18302](https://insights.sbomify.com/CVE-2019-18302/): Integer overflow in SPPA-T3000 MS3000 Migration Server (high 7.5)
- [CVE-2019-18301](https://insights.sbomify.com/CVE-2019-18301/): Integer overflow in SPPA-T3000 MS3000 Migration Server (high 7.5)
- [CVE-2019-18300](https://insights.sbomify.com/CVE-2019-18300/): Integer overflow in SPPA-T3000 MS3000 Migration Server (high 7.5)
- [CVE-2019-1830](https://insights.sbomify.com/CVE-2019-1830/): Cisco Wireless LAN Controller Locally Significant Certificate Denial of Service Vulnerability (medium 4.9)
- [CVE-2019-18299](https://insights.sbomify.com/CVE-2019-18299/): Memory corruption in SPPA-T3000 MS3000 Migration Server (high 7.5)
- [CVE-2019-18298](https://insights.sbomify.com/CVE-2019-18298/): Memory corruption in SPPA-T3000 MS3000 Migration Server (high 7.5)
- [CVE-2019-18297](https://insights.sbomify.com/CVE-2019-18297/): Memory corruption in SPPA-T3000 MS3000 Migration Server (high 7.8)
- [CVE-2019-18296](https://insights.sbomify.com/CVE-2019-18296/): Memory corruption in SPPA-T3000 MS3000 Migration Server (critical 9.8)
- [CVE-2019-18295](https://insights.sbomify.com/CVE-2019-18295/): Memory corruption in SPPA-T3000 MS3000 Migration Server (critical 9.8)
- [CVE-2019-18294](https://insights.sbomify.com/CVE-2019-18294/): Memory corruption in SPPA-T3000 MS3000 Migration Server (high 7.5)
- [CVE-2019-18293](https://insights.sbomify.com/CVE-2019-18293/): Memory corruption in SPPA-T3000 MS3000 Migration Server (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/86/