# Vulnerabilities published in 2019


- [CVE-2019-18292](https://insights.sbomify.com/CVE-2019-18292/): Memory corruption in SPPA-T3000 MS3000 Migration Server (high 7.5)
- [CVE-2019-18291](https://insights.sbomify.com/CVE-2019-18291/): Memory corruption in SPPA-T3000 MS3000 Migration Server (high 7.5)
- [CVE-2019-18290](https://insights.sbomify.com/CVE-2019-18290/): Memory corruption in SPPA-T3000 MS3000 Migration Server (high 7.5)
- [CVE-2019-1829](https://insights.sbomify.com/CVE-2019-1829/): Cisco Aironet Series Access Points Command Injection Vulnerability (medium 6.7)
- [CVE-2019-18289](https://insights.sbomify.com/CVE-2019-18289/): Memory corruption in SPPA-T3000 MS3000 Migration Server (critical 9.8)
- [CVE-2019-18288](https://insights.sbomify.com/CVE-2019-18288/): File upload in SPPA-T3000 Application Server (high 8.8)
- [CVE-2019-18287](https://insights.sbomify.com/CVE-2019-18287/): Information disclosure in SPPA-T3000 Application Server (medium 5.3)
- [CVE-2019-18286](https://insights.sbomify.com/CVE-2019-18286/): Information disclosure in SPPA-T3000 Application Server (medium 5.3)
- [CVE-2019-18285](https://insights.sbomify.com/CVE-2019-18285/): Information disclosure in SPPA-T3000 Application Server (medium 5.9)
- [CVE-2019-18284](https://insights.sbomify.com/CVE-2019-18284/): Missing authorization in SPPA-T3000 Application Server (critical 9.8)
- [CVE-2019-18283](https://insights.sbomify.com/CVE-2019-18283/): Deserialization in SPPA-T3000 Application Server (critical 9.8)
- [CVE-2019-18282](https://insights.sbomify.com/CVE-2019-18282/): Weak cryptography in debian:debian linux (medium 5.3)
- [CVE-2019-18281](https://insights.sbomify.com/CVE-2019-18281/): Memory corruption in debian:debian linux (medium 4.3)
- [CVE-2019-18280](https://insights.sbomify.com/CVE-2019-18280/): Cross-site request forgery in online grading system project:online grading system (high 8.8)
- [CVE-2019-1828](https://insights.sbomify.com/CVE-2019-1828/): Cisco Small Business RV320 and RV325 Routers Weak Credential Encryption Vulnerability (medium 5.9)
- [CVE-2019-18279](https://insights.sbomify.com/CVE-2019-18279/): Privilege escalation in phoenix:securecore technology (high 8.8)
- [CVE-2019-18278](https://insights.sbomify.com/CVE-2019-18278/): Memory corruption in videolan:vlc media player (high 7.8)
- [CVE-2019-18277](https://insights.sbomify.com/CVE-2019-18277/): Other in haproxy:haproxy (high 7.5)
- [CVE-2019-18276](https://insights.sbomify.com/CVE-2019-18276/): Privilege escalation in gnu:bash (high 7.8)
- [CVE-2019-18275](https://insights.sbomify.com/CVE-2019-18275/): Missing authorization in OSIsoft PI Vision (medium 6.5)
- [CVE-2019-18273](https://insights.sbomify.com/CVE-2019-18273/): Cross-site scripting in OSIsoft PI Vision (medium 4.8)
- [CVE-2019-18271](https://insights.sbomify.com/CVE-2019-18271/): Cross-site request forgery in OSIsoft PI Vision (high 8.8)
- [CVE-2019-1827](https://insights.sbomify.com/CVE-2019-1827/): Cisco Small Business RV320 and RV325 Routers Online Help Reflected Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2019-18269](https://insights.sbomify.com/CVE-2019-18269/): Denial of service in Omron PLC CJ Series (high 8.6)
- [CVE-2019-18267](https://insights.sbomify.com/CVE-2019-18267/): Cross-site scripting in GE S2020/S2020G Fast Switch 61850 (medium 5.4)
- [CVE-2019-18265](https://insights.sbomify.com/CVE-2019-18265/): Cross-site scripting in DASDEC (medium 4.7)
- [CVE-2019-18263](https://insights.sbomify.com/CVE-2019-18263/): Weak cryptography in Philips Veradius Unity, Pulsera, and Endura Dual WAN Router (medium 6.5)
- [CVE-2019-18261](https://insights.sbomify.com/CVE-2019-18261/): Auth bypass in Omron PLC CJ, CS and NJ Series (critical 9.8)
- [CVE-2019-1826](https://insights.sbomify.com/CVE-2019-1826/): Cisco Aironet Series Access Points Quality of Service Denial of Service Vulnerability (medium 6.8)
- [CVE-2019-18259](https://insights.sbomify.com/CVE-2019-18259/): Auth bypass in Omron PLC CJ and CS Series (critical 9.8)
- [CVE-2019-18257](https://insights.sbomify.com/CVE-2019-18257/): Memory corruption in Advantech DiagAnywhere Server (critical 9.8)
- [CVE-2019-18256](https://insights.sbomify.com/CVE-2019-18256/): Weak cryptography in BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM (medium 4.6)
- [CVE-2019-18255](https://insights.sbomify.com/CVE-2019-18255/): Privilege escalation in HMI/SCADA iFIX (medium 5.5)
- [CVE-2019-18254](https://insights.sbomify.com/CVE-2019-18254/): Information disclosure in BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM (medium 4.6)
- [CVE-2019-18253](https://insights.sbomify.com/CVE-2019-18253/): Path traversal in Relion 670 Series (critical 10.0)
- [CVE-2019-18252](https://insights.sbomify.com/CVE-2019-18252/): Information disclosure in BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM (medium 4.3)
- [CVE-2019-18251](https://insights.sbomify.com/CVE-2019-18251/): Supply chain in Omron CX-Supervisor (high 8.8)
- [CVE-2019-18250](https://insights.sbomify.com/CVE-2019-18250/): Auth bypass in ABB Power Generation Information Manager (PGIM) and Plant Connect All Versions (critical 9.8)
- [CVE-2019-1825](https://insights.sbomify.com/CVE-2019-1825/): Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL Injection Vulnerabilities (high 8.1)
- [CVE-2019-18249](https://insights.sbomify.com/CVE-2019-18249/): Cross-site scripting in Reliable Controls MACH-ProWebCom/Sys (medium 6.1)
- [CVE-2019-18248](https://insights.sbomify.com/CVE-2019-18248/): Information disclosure in BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM (medium 4.3)
- [CVE-2019-18247](https://insights.sbomify.com/CVE-2019-18247/): Denial of service in Relion 650 and 670 Series (high 7.5)
- [CVE-2019-18246](https://insights.sbomify.com/CVE-2019-18246/): Auth bypass in BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM (medium 4.3)
- [CVE-2019-18245](https://insights.sbomify.com/CVE-2019-18245/): Privilege escalation in Reliable Controls LicenseManager (high 7.8)
- [CVE-2019-18244](https://insights.sbomify.com/CVE-2019-18244/): Information disclosure in OSIsoft PI System multiple products and versions (medium 4.7)
- [CVE-2019-18243](https://insights.sbomify.com/CVE-2019-18243/): Privilege escalation in HMI/SCADA iFIX (medium 5.5)
- [CVE-2019-18242](https://insights.sbomify.com/CVE-2019-18242/): Denial of service in Moxa ioLogik 2500 series firmware, Version 3.0 or lower, IOxpress configuration utility, Version 2.3.0 or lower (high 7.5)
- [CVE-2019-18241](https://insights.sbomify.com/CVE-2019-18241/): Weak cryptography in Philips IntelliBridge EC40 and EC80 (medium 6.5)
- [CVE-2019-18240](https://insights.sbomify.com/CVE-2019-18240/): Memory corruption in Fuji Electric V-Server 4.0.6 and prior (critical 9.8)
- [CVE-2019-1824](https://insights.sbomify.com/CVE-2019-1824/): Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL Injection Vulnerabilities (high 8.1)
- [CVE-2019-18238](https://insights.sbomify.com/CVE-2019-18238/): Information disclosure in Moxa ioLogik 2500 series firmware, Version 3.0 or lower, IOxpress configuration utility, Version 2.3.0 or lower (high 7.5)
- [CVE-2019-18236](https://insights.sbomify.com/CVE-2019-18236/): Memory corruption in WECON PLC Editor (high 7.8)
- [CVE-2019-18235](https://insights.sbomify.com/CVE-2019-18235/): Auth bypass in Advantech Spectre RT ERT351 Versions 5.1.3 and prior (critical 9.8)
- [CVE-2019-18234](https://insights.sbomify.com/CVE-2019-18234/): SQL injection in Equinox Control Expert (critical 9.8)
- [CVE-2019-18233](https://insights.sbomify.com/CVE-2019-18233/): Cross-site scripting in Advantech Spectre RT Industrial Routers ERT351 (medium 6.1)
- [CVE-2019-18232](https://insights.sbomify.com/CVE-2019-18232/): Privilege escalation in SafeNet Sentinel LDK License Manager Runtime (high 7.8)
- [CVE-2019-18231](https://insights.sbomify.com/CVE-2019-18231/): Information disclosure in Advantech Spectre RT ERT351 (high 7.5)
- [CVE-2019-18230](https://insights.sbomify.com/CVE-2019-18230/): Missing authorization in Honeywell equIP & Performance series IP cameras (high 7.5)
- [CVE-2019-1823](https://insights.sbomify.com/CVE-2019-1823/): Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerabilities (high 8.8)
- [CVE-2019-18229](https://insights.sbomify.com/CVE-2019-18229/): SQL injection in Advantech WISE-PaaS/RMM (medium 6.5)
- [CVE-2019-18228](https://insights.sbomify.com/CVE-2019-18228/): Denial of service in Honeywell equIP series IP cameras (high 7.5)
- [CVE-2019-18227](https://insights.sbomify.com/CVE-2019-18227/): XML external entity in Advantech WISE-PaaS/RMM (high 7.5)
- [CVE-2019-18226](https://insights.sbomify.com/CVE-2019-18226/): Auth bypass in Honeywell equIP series cameras, Honeywell Performance series IP cameras, Honeywell recorders (critical 9.8)
- [CVE-2019-18225](https://insights.sbomify.com/CVE-2019-18225/): Auth bypass in citrix:application delivery controller firmware (critical 9.8)
- [CVE-2019-18224](https://insights.sbomify.com/CVE-2019-18224/): Memory corruption in gnu:libidn2 (critical 9.8)
- [CVE-2019-18223](https://insights.sbomify.com/CVE-2019-18223/): Cross-site scripting in eleveo:call recording (medium 5.4)
- [CVE-2019-18222](https://insights.sbomify.com/CVE-2019-18222/): Weak cryptography in arm:mbed crypto (medium 4.7)
- [CVE-2019-18221](https://insights.sbomify.com/CVE-2019-18221/): Cross-site scripting in corehr:core portal (medium 6.1)
- [CVE-2019-18220](https://insights.sbomify.com/CVE-2019-18220/): Cross-site request forgery in sitemagic:sitemagic (high 8.8)
- [CVE-2019-1822](https://insights.sbomify.com/CVE-2019-1822/): Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerabilities (high 8.8)
- [CVE-2019-18219](https://insights.sbomify.com/CVE-2019-18219/): Cross-site scripting in sitemagic:sitemagic (medium 6.1)
- [CVE-2019-18218](https://insights.sbomify.com/CVE-2019-18218/): Memory corruption in canonical:ubuntu linux (high 7.8)
- [CVE-2019-18217](https://insights.sbomify.com/CVE-2019-18217/): Denial of service in proftpd:proftpd (high 7.5)
- [CVE-2019-18216](https://insights.sbomify.com/CVE-2019-18216/): Security feature bypass in asus:rog zephyrus m gm501gs firmware (medium 6.8)
- [CVE-2019-18215](https://insights.sbomify.com/CVE-2019-18215/): Security feature bypass in comodo:comodo internet security (high 7.8)
- [CVE-2019-18214](https://insights.sbomify.com/CVE-2019-18214/): Denial of service in video converter project:video converter (high 7.7)
- [CVE-2019-18213](https://insights.sbomify.com/CVE-2019-18213/): XML external entity in eclipse:wild web developer (high 8.8)
- [CVE-2019-18212](https://insights.sbomify.com/CVE-2019-18212/): Path traversal in eclipse:wild web developer (medium 6.5)
- [CVE-2019-18211](https://insights.sbomify.com/CVE-2019-18211/): Deserialization in orckestra:c1 cms (high 8.8)
- [CVE-2019-18210](https://insights.sbomify.com/CVE-2019-18210/): Moodle Persistent Cross-site Scripting (XSS) (medium 5.4)
- [CVE-2019-1821](https://insights.sbomify.com/CVE-2019-1821/): Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerabilities (high 8.8)
- [CVE-2019-18209](https://insights.sbomify.com/CVE-2019-18209/): Cross-site scripting in etherpad:etherpad (medium 6.1)
- [CVE-2019-18207](https://insights.sbomify.com/CVE-2019-18207/): Cross-site scripting in zucchetti:infobusiness (medium 5.4)
- [CVE-2019-18206](https://insights.sbomify.com/CVE-2019-18206/): Cross-site request forgery in zucchetti:infobusiness (high 8.8)
- [CVE-2019-18205](https://insights.sbomify.com/CVE-2019-18205/): Cross-site scripting in zucchetti:infobusiness (medium 6.1)
- [CVE-2019-18204](https://insights.sbomify.com/CVE-2019-18204/): File upload in zucchetti:infobusiness (high 8.8)
- [CVE-2019-18203](https://insights.sbomify.com/CVE-2019-18203/): Cross-site scripting in ricoh:mp 501 firmware (medium 6.1)
- [CVE-2019-18202](https://insights.sbomify.com/CVE-2019-18202/): Information disclosure in wago:pfc firmware (medium 5.8)
- [CVE-2019-18201](https://insights.sbomify.com/CVE-2019-18201/): Weak cryptography in fujitsu:lx390 firmware (high 7.5)
- [CVE-2019-18200](https://insights.sbomify.com/CVE-2019-18200/): Weak cryptography in fujitsu:lx390 firmware (critical 9.8)
- [CVE-2019-1820](https://insights.sbomify.com/CVE-2019-1820/): Cisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal Vulnerability (medium 6.5)
- [CVE-2019-18199](https://insights.sbomify.com/CVE-2019-18199/): Weak cryptography in fujitsu:lx390 firmware (medium 6.6)
- [CVE-2019-18198](https://insights.sbomify.com/CVE-2019-18198/): Memory corruption in canonical:ubuntu linux (high 7.8)
- [CVE-2019-18197](https://insights.sbomify.com/CVE-2019-18197/): Nokogiri affected by libxslt Use of Uninitialized Resource/Use After Free vulnerability (high 7.5)
- [CVE-2019-18196](https://insights.sbomify.com/CVE-2019-18196/): Privilege escalation in teamviewer:teamviewer (medium 6.7)
- [CVE-2019-18195](https://insights.sbomify.com/CVE-2019-18195/): Privilege escalation in terra-master:f2-210 firmware (high 8.8)
- [CVE-2019-18194](https://insights.sbomify.com/CVE-2019-18194/): Privilege escalation in totalav:totalav 2020 (high 7.8)
- [CVE-2019-18193](https://insights.sbomify.com/CVE-2019-18193/): TODO DODO (high 7.5)
- [CVE-2019-18192](https://insights.sbomify.com/CVE-2019-18192/): Misconfiguration in gnu:guix (high 7.8)
- [CVE-2019-18191](https://insights.sbomify.com/CVE-2019-18191/): Privilege escalation in Trend Micro Deep Security as a Service (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/87/