# Vulnerabilities published in 2019


- [CVE-2019-18190](https://insights.sbomify.com/CVE-2019-18190/): Null dereference in Trend Micro Security (Consumer) (critical 9.8)
- [CVE-2019-1819](https://insights.sbomify.com/CVE-2019-1819/): Cisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal Vulnerability (medium 6.5)
- [CVE-2019-18189](https://insights.sbomify.com/CVE-2019-18189/): Path traversal in Trend Micro Apex One, Trend Micro OfficeScan (OSCE), Trend Micro Worry-Free Business Security (WFBS) (critical 9.8)
- [CVE-2019-18188](https://insights.sbomify.com/CVE-2019-18188/): Command injection in Trend Micro Apex One (high 7.5)
- [CVE-2019-18187](https://insights.sbomify.com/CVE-2019-18187/): Trend Micro OfficeScan Directory Traversal (high 8.8, exploited in the wild)
- [CVE-2019-18184](https://insights.sbomify.com/CVE-2019-18184/): Command injection in crestron:dmc-stro firmware (critical 9.8)
- [CVE-2019-18183](https://insights.sbomify.com/CVE-2019-18183/): Command injection in fedoraproject:fedora (critical 9.8)
- [CVE-2019-18182](https://insights.sbomify.com/CVE-2019-18182/): Command injection in fedoraproject:fedora (critical 9.8)
- [CVE-2019-18181](https://insights.sbomify.com/CVE-2019-18181/): Missing authorization in arista:cloudvision portal (high 7.8)
- [CVE-2019-18180](https://insights.sbomify.com/CVE-2019-18180/): Denial of service (medium 5.3)
- [CVE-2019-1818](https://insights.sbomify.com/CVE-2019-1818/): Cisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal Vulnerability (medium 6.5)
- [CVE-2019-18179](https://insights.sbomify.com/CVE-2019-18179/): Missing authorization in debian:debian linux (low 3.5)
- [CVE-2019-18178](https://insights.sbomify.com/CVE-2019-18178/): Use after free in amazon:freertos\+fat (high 7.5)
- [CVE-2019-18177](https://insights.sbomify.com/CVE-2019-18177/): Information disclosure in citrix:application delivery controller firmware (medium 6.5)
- [CVE-2019-1817](https://insights.sbomify.com/CVE-2019-1817/): Cisco Web Security Appliance Malformed Request Denial of Service Vulnerability (high 8.6)
- [CVE-2019-1816](https://insights.sbomify.com/CVE-2019-1816/): Cisco Web Security Appliance Privilege Escalation Vulnerability (medium 5.3)
- [CVE-2019-1815](https://insights.sbomify.com/CVE-2019-1815/): Cisco Meraki MX67 and MX68 Sensitive Information Disclosure Vulnerability (high 7.5)
- [CVE-2019-1814](https://insights.sbomify.com/CVE-2019-1814/): Cisco Small Business 300 Series Managed Switches DHCP Denial of Service Vulnerability (medium 6.8)
- [CVE-2019-1813](https://insights.sbomify.com/CVE-2019-1813/): Cisco NX-OS CLI Command Software Image Signature Verification Vulnerability (medium 6.7)
- [CVE-2019-1812](https://insights.sbomify.com/CVE-2019-1812/): Cisco NX-OS CLI Command Software Image Signature Verification Vulnerabilities (medium 6.7)
- [CVE-2019-1811](https://insights.sbomify.com/CVE-2019-1811/): Cisco NX-OS CLI Command Software Image Signature Verification Vulnerabilities (medium 6.7)
- [CVE-2019-1810](https://insights.sbomify.com/CVE-2019-1810/): Security feature bypass in Cisco NX-OS Software (medium 6.7)
- [CVE-2019-1809](https://insights.sbomify.com/CVE-2019-1809/): Cisco NX-OS Software Patch Signature Verification Bypass Vulnerability (medium 6.4)
- [CVE-2019-1808](https://insights.sbomify.com/CVE-2019-1808/): Security feature bypass in Cisco NX-OS Software (medium 6.7)
- [CVE-2019-1807](https://insights.sbomify.com/CVE-2019-1807/): Cisco Umbrella Dashboard Session Management Vulnerability (high 7.6)
- [CVE-2019-1806](https://insights.sbomify.com/CVE-2019-1806/): Cisco Small Business Series Switches Simple Network Management Protocol Denial of Service Vulnerability (high 7.7)
- [CVE-2019-1805](https://insights.sbomify.com/CVE-2019-1805/): Cisco Wireless LAN Controller Secure Shell Unauthorized Access Vulnerability (medium 5.4)
- [CVE-2019-1804](https://insights.sbomify.com/CVE-2019-1804/): Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Default SSH Key Vulnerability (critical 9.8)
- [CVE-2019-1803](https://insights.sbomify.com/CVE-2019-1803/): Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Root Privilege Escalation Vulnerability (high 7.8)
- [CVE-2019-1802](https://insights.sbomify.com/CVE-2019-1802/): Cisco Firepower Management Center Persistent Cross-Site Scripting Vulnerability (medium 4.8)
- [CVE-2019-1800](https://insights.sbomify.com/CVE-2019-1800/): Cisco Wireless LAN Controller Software IAPP Message Handling Denial of Service Vulnerabilities (high 7.4)
- [CVE-2019-1799](https://insights.sbomify.com/CVE-2019-1799/): Cisco Wireless LAN Controller Software IAPP Message Handling Denial of Service Vulnerabilities (high 7.4)
- [CVE-2019-1798](https://insights.sbomify.com/CVE-2019-1798/): Clam AntiVirus PE File Out-of-Bounds Read Vulnerability (high 7.5)
- [CVE-2019-1797](https://insights.sbomify.com/CVE-2019-1797/): Cisco Wireless LAN Controller Software Cross-Site Request Forgery Vulnerability (high 8.1)
- [CVE-2019-1796](https://insights.sbomify.com/CVE-2019-1796/): Cisco Wireless LAN Controller Software IAPP Message Handling Denial of Service Vulnerabilities (high 7.4)
- [CVE-2019-1795](https://insights.sbomify.com/CVE-2019-1795/): Cisco FXOS and NX-OS Software Command Injection Vulnerability (medium 6.7)
- [CVE-2019-1794](https://insights.sbomify.com/CVE-2019-1794/): Cisco Directory Connector Search Order Hijacking Vulnerability (medium 5.1)
- [CVE-2019-1792](https://insights.sbomify.com/CVE-2019-1792/): Cisco Umbrella Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2019-1791](https://insights.sbomify.com/CVE-2019-1791/): Cisco NX-OS Software Command Injection Vulnerability (medium 6.7)
- [CVE-2019-1790](https://insights.sbomify.com/CVE-2019-1790/): Cisco NX-OS Software Command Injection Vulnerability (medium 6.7)
- [CVE-2019-1789](https://insights.sbomify.com/CVE-2019-1789/): ClamAV Denial of Service Vulnerability (high 7.5)
- [CVE-2019-1788](https://insights.sbomify.com/CVE-2019-1788/): ClamAV OLE2 File Out-Of-Bounds Write Vulnerability (high 7.5)
- [CVE-2019-1787](https://insights.sbomify.com/CVE-2019-1787/): Clam AntiVirus PDF Denial of Service Vulnerability (high 7.5)
- [CVE-2019-1786](https://insights.sbomify.com/CVE-2019-1786/): Clam AntiVirus PDF Out-of-Bounds Read Vulnerability (high 7.5)
- [CVE-2019-1785](https://insights.sbomify.com/CVE-2019-1785/): Clam AntiVirus RAR Directory Traversal Vulnerability (critical 9.8)
- [CVE-2019-1784](https://insights.sbomify.com/CVE-2019-1784/): Cisco NX-OS Software Command Injection Vulnerability (medium 6.7)
- [CVE-2019-1783](https://insights.sbomify.com/CVE-2019-1783/): Cisco NX-OS Software Command Injection Vulnerability (medium 6.7)
- [CVE-2019-1782](https://insights.sbomify.com/CVE-2019-1782/): Cisco FXOS and NX-OS Software Command Injection Vulnerability (medium 6.7)
- [CVE-2019-1781](https://insights.sbomify.com/CVE-2019-1781/): Cisco FXOS and NX-OS Software Command Injection Vulnerability (medium 6.7)
- [CVE-2019-1780](https://insights.sbomify.com/CVE-2019-1780/): Cisco FXOS and NX-OS Software Command Injection Vulnerability (medium 4.2)
- [CVE-2019-1779](https://insights.sbomify.com/CVE-2019-1779/): Cisco FXOS and NX-OS Software Command Injection Vulnerability (medium 4.2)
- [CVE-2019-1778](https://insights.sbomify.com/CVE-2019-1778/): Cisco NX-OS Software Command Injection Vulnerability (medium 6.7)
- [CVE-2019-1777](https://insights.sbomify.com/CVE-2019-1777/): Cisco Registered Envelope Service Stored Cross-Site Scripting Vulnerability (medium 5.4)
- [CVE-2019-1776](https://insights.sbomify.com/CVE-2019-1776/): Cisco NX-OS Software Command Injection Vulnerability (medium 6.7)
- [CVE-2019-1775](https://insights.sbomify.com/CVE-2019-1775/): Cisco NX-OS Software Command Injection Vulnerability (medium 6.7)
- [CVE-2019-1774](https://insights.sbomify.com/CVE-2019-1774/): Cisco NX-OS Software Command Injection Vulnerability (medium 6.7)
- [CVE-2019-1773](https://insights.sbomify.com/CVE-2019-1773/): Cisco Webex Network Recording Player Arbitrary Code Execution Vulnerabilities (high 7.8)
- [CVE-2019-1772](https://insights.sbomify.com/CVE-2019-1772/): Cisco Webex Network Recording Player Arbitrary Code Execution Vulnerability (high 7.8)
- [CVE-2019-1771](https://insights.sbomify.com/CVE-2019-1771/): Cisco Webex Network Recording Player Arbitrary Code Execution Vulnerability (high 7.8)
- [CVE-2019-1770](https://insights.sbomify.com/CVE-2019-1770/): Cisco NX-OS Software Command Injection Vulnerability (medium 4.2)
- [CVE-2019-1769](https://insights.sbomify.com/CVE-2019-1769/): Cisco NX-OS Software Line Card Command Injection Vulnerability (medium 6.7)
- [CVE-2019-1768](https://insights.sbomify.com/CVE-2019-1768/): Cisco NX-OS Software Buffer Overflow and Command Injection Vulnerability (medium 6.7)
- [CVE-2019-17676](https://insights.sbomify.com/CVE-2019-17676/): Cross-site request forgery in metinfo:metinfo (high 8.8)
- [CVE-2019-17675](https://insights.sbomify.com/CVE-2019-17675/): Cross-site request forgery in debian:debian linux (high 8.8)
- [CVE-2019-17674](https://insights.sbomify.com/CVE-2019-17674/): Cross-site scripting in debian:debian linux (medium 5.4)
- [CVE-2019-17673](https://insights.sbomify.com/CVE-2019-17673/): Other in debian:debian linux (high 7.5)
- [CVE-2019-17672](https://insights.sbomify.com/CVE-2019-17672/): Cross-site scripting in debian:debian linux (medium 6.1)
- [CVE-2019-17671](https://insights.sbomify.com/CVE-2019-17671/): Information disclosure in debian:debian linux (medium 5.3)
- [CVE-2019-17670](https://insights.sbomify.com/CVE-2019-17670/): Server-side request forgery in debian:debian linux (critical 9.8)
- [CVE-2019-1767](https://insights.sbomify.com/CVE-2019-1767/): Cisco NX-OS Software Buffer Overflow and Command Injection Vulnerability (medium 6.7)
- [CVE-2019-17669](https://insights.sbomify.com/CVE-2019-17669/): Server-side request forgery in debian:debian linux (critical 9.8)
- [CVE-2019-17668](https://insights.sbomify.com/CVE-2019-17668/): Auth bypass in samsung:galaxy s10 firmware (medium 6.8)
- [CVE-2019-17667](https://insights.sbomify.com/CVE-2019-17667/): Cross-site scripting in comtech:h8 heights remote gateway firmware (medium 5.4)
- [CVE-2019-17666](https://insights.sbomify.com/CVE-2019-17666/): Memory corruption in canonical:ubuntu linux (high 8.8)
- [CVE-2019-17665](https://insights.sbomify.com/CVE-2019-17665/): Other in nsa:ghidra (high 7.8)
- [CVE-2019-17664](https://insights.sbomify.com/CVE-2019-17664/): Code injection in nsa:ghidra (high 7.8)
- [CVE-2019-17663](https://insights.sbomify.com/CVE-2019-17663/): Cross-site scripting in d-link:dir-866l firmware (medium 6.1)
- [CVE-2019-17662](https://insights.sbomify.com/CVE-2019-17662/): Path traversal in cybelsoft:thinvnc (critical 9.8)
- [CVE-2019-17661](https://insights.sbomify.com/CVE-2019-17661/): Code injection in admincolumns:admin columns (high 8.8)
- [CVE-2019-17660](https://insights.sbomify.com/CVE-2019-17660/): Cross-site scripting in limesurvey:limesurvey (medium 6.1)
- [CVE-2019-1766](https://insights.sbomify.com/CVE-2019-1766/): Cisco IP Phone 8800 Series File Upload Denial of Service Vulnerability (high 7.5)
- [CVE-2019-17659](https://insights.sbomify.com/CVE-2019-17659/): Hardcoded credentials in FortiSIEM (low 3.6)
- [CVE-2019-17658](https://insights.sbomify.com/CVE-2019-17658/): Privilege escalation in Fortinet FortiClientWindows (critical 9.8)
- [CVE-2019-17657](https://insights.sbomify.com/CVE-2019-17657/): Denial of service in FortiAP-S/W2 (high 7.5)
- [CVE-2019-17656](https://insights.sbomify.com/CVE-2019-17656/): Memory corruption in Fortinet FortiProxy, FortiOS (medium 5.4)
- [CVE-2019-17655](https://insights.sbomify.com/CVE-2019-17655/): Information disclosure in Fortinet FortiOS and FortiProxy (medium 5.3)
- [CVE-2019-17654](https://insights.sbomify.com/CVE-2019-17654/): Cross-site request forgery in Fortinet FortiManager (high 8.8)
- [CVE-2019-17653](https://insights.sbomify.com/CVE-2019-17653/): Cross-site request forgery in Fortinet FortiSIEM (high 8.8)
- [CVE-2019-17652](https://insights.sbomify.com/CVE-2019-17652/): Memory corruption in Fortinet FortiClientLinux (medium 6.5)
- [CVE-2019-17651](https://insights.sbomify.com/CVE-2019-17651/): Cross-site scripting in Fortinet FortiSIEM (medium 5.4)
- [CVE-2019-17650](https://insights.sbomify.com/CVE-2019-17650/): Command injection in FortiClient for Mac OS (high 7.8)
- [CVE-2019-1765](https://insights.sbomify.com/CVE-2019-1765/): Cisco IP Phone 8800 Series Path Traversal Vulnerability (high 8.1)
- [CVE-2019-17647](https://insights.sbomify.com/CVE-2019-17647/): SQL injection in centreon:centreon (critical 9.8)
- [CVE-2019-17646](https://insights.sbomify.com/CVE-2019-17646/): Information disclosure in centreon:centreon (high 7.5)
- [CVE-2019-17645](https://insights.sbomify.com/CVE-2019-17645/): Information disclosure in centreon:centreon (high 7.5)
- [CVE-2019-17644](https://insights.sbomify.com/CVE-2019-17644/): Information disclosure in centreon:centreon (high 7.5)
- [CVE-2019-17643](https://insights.sbomify.com/CVE-2019-17643/): Information disclosure in centreon:centreon (high 7.5)
- [CVE-2019-17642](https://insights.sbomify.com/CVE-2019-17642/): Cross-site request forgery in centreon:centreon (high 8.8)
- [CVE-2019-17640](https://insights.sbomify.com/CVE-2019-17640/): Path Traversal in Eclipse Vert (critical 9.8)
- [CVE-2019-1764](https://insights.sbomify.com/CVE-2019-1764/): Cisco IP Phone 8800 Series Cross-Site Request Forgery Vulnerability (high 8.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/88/