# Vulnerabilities published in 2019 - [CVE-2019-17530](https://insights.sbomify.com/CVE-2019-17530/): Memory corruption in axiosys:bento4 (high 7.8) - [CVE-2019-1753](https://insights.sbomify.com/CVE-2019-1753/): Cisco IOS XE Software Privilege Escalation Vulnerability (high 8.8) - [CVE-2019-17529](https://insights.sbomify.com/CVE-2019-17529/): Memory corruption in axiosys:bento4 (high 7.8) - [CVE-2019-17528](https://insights.sbomify.com/CVE-2019-17528/): Memory corruption in axiosys:bento4 (high 7.5) - [CVE-2019-17527](https://insights.sbomify.com/CVE-2019-17527/): SQL injection in joomsky:js jobs (critical 9.8) - [CVE-2019-17526](https://insights.sbomify.com/CVE-2019-17526/): Code injection in sagemath:sagemathcell (critical 9.8) - [CVE-2019-17525](https://insights.sbomify.com/CVE-2019-17525/): Security feature bypass in dlink:dir-615 firmware (high 8.8) - [CVE-2019-17524](https://insights.sbomify.com/CVE-2019-17524/): Cross-site scripting in technicolor:tc7300.b0 firmware (medium 5.4) - [CVE-2019-17523](https://insights.sbomify.com/CVE-2019-17523/): Cross-site scripting in technicolor:tc7300.b0 firmware (medium 5.4) - [CVE-2019-17522](https://insights.sbomify.com/CVE-2019-17522/): Cross-site scripting in hotarucms:hotarucms (medium 4.8) - [CVE-2019-17521](https://insights.sbomify.com/CVE-2019-17521/): Cross-site request forgery in landing-cms project:landing-cms (medium 6.5) - [CVE-2019-17520](https://insights.sbomify.com/CVE-2019-17520/): Memory corruption in ti:cc2640r2 software development kit (medium 6.5) - [CVE-2019-1752](https://insights.sbomify.com/CVE-2019-1752/): Cisco IOS and IOS XE Software ISDN Interface Denial of Service Vulnerability (high 8.6) - [CVE-2019-17519](https://insights.sbomify.com/CVE-2019-17519/): Memory corruption in nxp:mcuxpresso software development kit (high 8.8) - [CVE-2019-17518](https://insights.sbomify.com/CVE-2019-17518/): Memory corruption in dialog-semiconductor:software development kit (medium 6.5) - [CVE-2019-17517](https://insights.sbomify.com/CVE-2019-17517/): Memory corruption in dialog-semiconductor:software development kit (medium 5.7) - [CVE-2019-17515](https://insights.sbomify.com/CVE-2019-17515/): Cross-site scripting in cleantalk:spam protection\, antispam\, firewall (medium 6.1) - [CVE-2019-17514](https://insights.sbomify.com/CVE-2019-17514/): Other in python:python (high 7.5) - [CVE-2019-17513](https://insights.sbomify.com/CVE-2019-17513/): io.ratpack:ratpack-core vulnerable to Improper Neutralization of Special Elements in Output ('Injection') (high 7.5) - [CVE-2019-17512](https://insights.sbomify.com/CVE-2019-17512/): Missing authorization in dlink:dir-412 firmware (critical 9.1) - [CVE-2019-17511](https://insights.sbomify.com/CVE-2019-17511/): Missing authorization in dlink:dir-412 firmware (high 7.5) - [CVE-2019-17510](https://insights.sbomify.com/CVE-2019-17510/): Command injection in dlink:dir-846 firmware (critical 9.8) - [CVE-2019-1751](https://insights.sbomify.com/CVE-2019-1751/): Cisco IOS Software NAT64 Denial of Service Vulnerability (high 8.6) - [CVE-2019-17509](https://insights.sbomify.com/CVE-2019-17509/): Command injection in dlink:dir-846 firmware (critical 9.8) - [CVE-2019-17508](https://insights.sbomify.com/CVE-2019-17508/): Command injection in dlink:dir-850l a firmware (critical 9.8) - [CVE-2019-17507](https://insights.sbomify.com/CVE-2019-17507/): Auth bypass in dlink:dir-816 a1 firmware (high 7.5) - [CVE-2019-17506](https://insights.sbomify.com/CVE-2019-17506/): Missing authorization in dlink:dir-817lw a1 firmware (critical 9.8) - [CVE-2019-17505](https://insights.sbomify.com/CVE-2019-17505/): Missing authorization in dlink:dap-1320 a2 firmware (high 7.5) - [CVE-2019-17504](https://insights.sbomify.com/CVE-2019-17504/): Cross-site scripting in kirona:dynamic resource scheduling (medium 6.1) - [CVE-2019-17503](https://insights.sbomify.com/CVE-2019-17503/): Information disclosure in kirona:dynamic resource scheduling (medium 5.3) - [CVE-2019-17502](https://insights.sbomify.com/CVE-2019-17502/): Null dereference in hydra project:hydra (high 7.5) - [CVE-2019-17501](https://insights.sbomify.com/CVE-2019-17501/): Command injection in centreon:centreon (high 8.8) - [CVE-2019-1750](https://insights.sbomify.com/CVE-2019-1750/): Cisco IOS XE Software Catalyst 4500 Cisco Discovery Protocol Denial of Service Vulnerability (high 7.4) - [CVE-2019-17499](https://insights.sbomify.com/CVE-2019-17499/): Command injection in compal:ch7465lg firmware (high 8.8) - [CVE-2019-17498](https://insights.sbomify.com/CVE-2019-17498/): Integer overflow in debian:debian linux (high 8.1) - [CVE-2019-17497](https://insights.sbomify.com/CVE-2019-17497/): Information disclosure in pdf-xchange:pdf-xchange editor (medium 6.5) - [CVE-2019-17496](https://insights.sbomify.com/CVE-2019-17496/): Craft CMS XSS Vulnerability (medium 6.1) - [CVE-2019-17495](https://insights.sbomify.com/CVE-2019-17495/): Cross-site scripting in Swagger-UI (critical 9.8) - [CVE-2019-17494](https://insights.sbomify.com/CVE-2019-17494/): Cross-site scripting in laravel-bjyblog project:laravel-bjyblog (medium 6.1) - [CVE-2019-17493](https://insights.sbomify.com/CVE-2019-17493/): Cross-site scripting in jnoj:jiangnan online judge (medium 6.1) - [CVE-2019-17491](https://insights.sbomify.com/CVE-2019-17491/): Cross-site scripting in jnoj:jiangnan online judge (medium 6.1) - [CVE-2019-17490](https://insights.sbomify.com/CVE-2019-17490/): File upload in jnoj:jiangnan online judge (high 8.8) - [CVE-2019-1749](https://insights.sbomify.com/CVE-2019-1749/): Cisco Aggregation Services Router 900 Route Switch Processor 3 OSPFv2 Denial of Service Vulnerability (high 7.4) - [CVE-2019-17489](https://insights.sbomify.com/CVE-2019-17489/): Cross-site scripting in jnoj:jiangnan online judge (medium 6.1) - [CVE-2019-17488](https://insights.sbomify.com/CVE-2019-17488/): Cross-site scripting in b3log:symphony (medium 6.1) - [CVE-2019-1748](https://insights.sbomify.com/CVE-2019-1748/): Cisco IOS and IOS XE Software Network Plug-and-Play Agent Certificate Validation Vulnerability (high 7.4) - [CVE-2019-1747](https://insights.sbomify.com/CVE-2019-1747/): Cisco IOS and IOS XE Software Short Message Service Denial of Service Vulnerability (high 8.6) - [CVE-2019-1746](https://insights.sbomify.com/CVE-2019-1746/): Cisco IOS and IOS XE Software Cluster Management Protocol Denial of Service Vulnerability (high 7.4) - [CVE-2019-17455](https://insights.sbomify.com/CVE-2019-17455/): Memory corruption in canonical:ubuntu linux (critical 9.8) - [CVE-2019-17454](https://insights.sbomify.com/CVE-2019-17454/): Null dereference in axiosys:bento4 (medium 6.5) - [CVE-2019-17453](https://insights.sbomify.com/CVE-2019-17453/): Null dereference in axiosys:bento4 (medium 6.5) - [CVE-2019-17452](https://insights.sbomify.com/CVE-2019-17452/): Null dereference in axiosys:bento4 (medium 6.5) - [CVE-2019-17451](https://insights.sbomify.com/CVE-2019-17451/): Integer overflow in canonical:ubuntu linux (medium 6.5) - [CVE-2019-17450](https://insights.sbomify.com/CVE-2019-17450/): Denial of service in canonical:ubuntu linux (medium 6.5) - [CVE-2019-1745](https://insights.sbomify.com/CVE-2019-1745/): Cisco IOS XE Software Command Injection Vulnerability (high 8.8) - [CVE-2019-17449](https://insights.sbomify.com/CVE-2019-17449/): Privilege escalation in avira:software updater (medium 6.7) - [CVE-2019-17446](https://insights.sbomify.com/CVE-2019-17446/): Privilege escalation in eracent:epa agent (high 7.8) - [CVE-2019-17445](https://insights.sbomify.com/CVE-2019-17445/): Path traversal in eracent:eda agent (medium 5.5) - [CVE-2019-17444](https://insights.sbomify.com/CVE-2019-17444/): JFrog Artifactory does not enforce default admin password change (critical 9.8) - [CVE-2019-17440](https://insights.sbomify.com/CVE-2019-17440/): PAN-OS on PA-7000 Series: Improper restriction of communication to Log Forwarding Card (LFC) allows root access (critical 10.0) - [CVE-2019-17437](https://insights.sbomify.com/CVE-2019-17437/): PAN-OS: Custom-role users may escalate privileges (high 7.8) - [CVE-2019-17436](https://insights.sbomify.com/CVE-2019-17436/): Privilege escalation in GlobalProtect Agent for Linux and OSX (high 7.1) - [CVE-2019-17435](https://insights.sbomify.com/CVE-2019-17435/): Privilege escalation in GlobalProtect Agent for Windows (medium 5.5) - [CVE-2019-17434](https://insights.sbomify.com/CVE-2019-17434/): Cross-site scripting in lavalite:lavalite (medium 5.4) - [CVE-2019-17433](https://insights.sbomify.com/CVE-2019-17433/): z-song laravel-admin XSS via the Slug or Name on the Roles screen (medium 4.8) - [CVE-2019-17432](https://insights.sbomify.com/CVE-2019-17432/): Cross-site request forgery in fastadmin:fastadmin (medium 6.5) - [CVE-2019-17431](https://insights.sbomify.com/CVE-2019-17431/): Cross-site request forgery in fastadmin:fastadmin (high 8.8) - [CVE-2019-17430](https://insights.sbomify.com/CVE-2019-17430/): Cross-site scripting in eyoucms:eyoucms (medium 6.1) - [CVE-2019-1743](https://insights.sbomify.com/CVE-2019-1743/): Cisco IOS XE Software Arbitrary File Upload Vulnerability (high 8.8) - [CVE-2019-17429](https://insights.sbomify.com/CVE-2019-17429/): SQL injection in adhouma cms project:adhouma cms (critical 9.8) - [CVE-2019-17428](https://insights.sbomify.com/CVE-2019-17428/): Weak cryptography in intesync:solismed (medium 5.9) - [CVE-2019-17427](https://insights.sbomify.com/CVE-2019-17427/): Cross-site scripting in redmine:redmine (medium 6.1) - [CVE-2019-17426](https://insights.sbomify.com/CVE-2019-17426/): Improper Input Validation in Automattic Mongoose (critical 9.1) - [CVE-2019-17424](https://insights.sbomify.com/CVE-2019-17424/): Memory corruption in nipper-ng project:nipper-ng (high 7.8) - [CVE-2019-17421](https://insights.sbomify.com/CVE-2019-17421/): Misconfiguration in zohocorp:manageengine firewall analyzer (high 7.8) - [CVE-2019-17420](https://insights.sbomify.com/CVE-2019-17420/): Security feature bypass in oisf:libhtp (medium 5.3) - [CVE-2019-1742](https://insights.sbomify.com/CVE-2019-1742/): Cisco IOS XE Software Information Disclosure Vulnerability (high 7.5) - [CVE-2019-17419](https://insights.sbomify.com/CVE-2019-17419/): SQL injection in metinfo:metinfo (high 7.2) - [CVE-2019-17418](https://insights.sbomify.com/CVE-2019-17418/): SQL injection in metinfo:metinfo (high 7.2) - [CVE-2019-17417](https://insights.sbomify.com/CVE-2019-17417/): Cross-site scripting in pbootcms:pbootcms (medium 4.8) - [CVE-2019-17415](https://insights.sbomify.com/CVE-2019-17415/): Memory corruption in upredsun:file sharing wizard (critical 9.8) - [CVE-2019-17414](https://insights.sbomify.com/CVE-2019-17414/): Denial of service in vino project:vino (high 7.5) - [CVE-2019-1741](https://insights.sbomify.com/CVE-2019-1741/): Cisco IOS XE Software Encrypted Traffic Analytics Denial of Service Vulnerability (high 8.6) - [CVE-2019-17409](https://insights.sbomify.com/CVE-2019-17409/): Cross-site scripting in open-emr:openemr (medium 6.1) - [CVE-2019-17408](https://insights.sbomify.com/CVE-2019-17408/): Code injection in zzzcms:zzzphp (critical 9.8) - [CVE-2019-17406](https://insights.sbomify.com/CVE-2019-17406/): Path traversal in nokia:impact (medium 5.3) - [CVE-2019-17405](https://insights.sbomify.com/CVE-2019-17405/): Cross-site scripting in nokia:impact (medium 6.1) - [CVE-2019-17404](https://insights.sbomify.com/CVE-2019-17404/): Information disclosure in nokia:impact (medium 4.3) - [CVE-2019-17403](https://insights.sbomify.com/CVE-2019-17403/): File upload in nokia:impact (high 8.8) - [CVE-2019-17402](https://insights.sbomify.com/CVE-2019-17402/): Memory corruption in canonical:ubuntu linux (medium 6.5) - [CVE-2019-17401](https://insights.sbomify.com/CVE-2019-17401/): Memory corruption in liblnk project:liblnk (low 3.3) - [CVE-2019-17400](https://insights.sbomify.com/CVE-2019-17400/): Server-Side Request Forgery in unoconv (high 7.5) - [CVE-2019-1740](https://insights.sbomify.com/CVE-2019-1740/): Cisco IOS and IOS XE Software Network-Based Application Recognition Denial of Service Vulnerabilities (high 8.6) - [CVE-2019-17399](https://insights.sbomify.com/CVE-2019-17399/): Path traversal in joomlashack:shack forms pro (critical 9.8) - [CVE-2019-17398](https://insights.sbomify.com/CVE-2019-17398/): Information disclosure in darkhorse:dark horse comics (critical 9.8) - [CVE-2019-17397](https://insights.sbomify.com/CVE-2019-17397/): Information disclosure in doordash:doordash (critical 9.8) - [CVE-2019-17396](https://insights.sbomify.com/CVE-2019-17396/): Information disclosure in powerschool:powerschool mobile (critical 9.8) - [CVE-2019-17395](https://insights.sbomify.com/CVE-2019-17395/): Information disclosure in rapidgator:rapidgator (critical 9.8) - [CVE-2019-17394](https://insights.sbomify.com/CVE-2019-17394/): Information disclosure in seesaw:parent and family (critical 9.8) - [CVE-2019-17393](https://insights.sbomify.com/CVE-2019-17393/): Information disclosure in tomedo:server (critical 9.8) --- From sbomify Insights: https://insights.sbomify.com/years/2019/page/90/