# Vulnerabilities published in 2019 - [CVE-2019-17392](https://insights.sbomify.com/CVE-2019-17392/): Auth bypass in progress:sitefinity (critical 9.8) - [CVE-2019-17391](https://insights.sbomify.com/CVE-2019-17391/): Security feature bypass in espressif:esp32-d0wd firmware (medium 4.6) - [CVE-2019-17390](https://insights.sbomify.com/CVE-2019-17390/): Privilege escalation in pronestor:planner (high 8.2) - [CVE-2019-1739](https://insights.sbomify.com/CVE-2019-1739/): Cisco IOS and IOS XE Software Network-Based Application Recognition Denial of Service Vulnerabilities (high 8.6) - [CVE-2019-17389](https://insights.sbomify.com/CVE-2019-17389/): Denial of service in riot-os:riot (high 7.5) - [CVE-2019-17388](https://insights.sbomify.com/CVE-2019-17388/): Misconfiguration in aviatrix:vpn client (high 7.8) - [CVE-2019-17387](https://insights.sbomify.com/CVE-2019-17387/): Auth bypass in aviatrix:vpn client (high 7.8) - [CVE-2019-17386](https://insights.sbomify.com/CVE-2019-17386/): Cross-site request forgery in eleopard:animate it\! (high 8.8) - [CVE-2019-17385](https://insights.sbomify.com/CVE-2019-17385/): Cross-site scripting in eleopard:animate it\! (medium 6.1) - [CVE-2019-17384](https://insights.sbomify.com/CVE-2019-17384/): Cross-site scripting in eleopard:animate it\! (medium 6.1) - [CVE-2019-17383](https://insights.sbomify.com/CVE-2019-17383/): netaddr before 1.5.3 and 2.0.4 has Incorrect Default Permissions (critical 9.8) - [CVE-2019-17382](https://insights.sbomify.com/CVE-2019-17382/): Auth bypass in zabbix:zabbix (critical 9.1) - [CVE-2019-17380](https://insights.sbomify.com/CVE-2019-17380/): Cross-site scripting in cpanel:cpanel (medium 6.1) - [CVE-2019-1738](https://insights.sbomify.com/CVE-2019-1738/): Cisco IOS and IOS XE Software Network-Based Application Recognition Denial of Service Vulnerability (high 8.6) - [CVE-2019-17379](https://insights.sbomify.com/CVE-2019-17379/): Cross-site scripting in cpanel:cpanel (medium 6.1) - [CVE-2019-17378](https://insights.sbomify.com/CVE-2019-17378/): Cross-site scripting in cpanel:cpanel (medium 6.1) - [CVE-2019-17377](https://insights.sbomify.com/CVE-2019-17377/): Cross-site scripting in cpanel:cpanel (medium 6.1) - [CVE-2019-17376](https://insights.sbomify.com/CVE-2019-17376/): Cross-site scripting in cpanel:cpanel (medium 6.1) - [CVE-2019-17375](https://insights.sbomify.com/CVE-2019-17375/): Other in cpanel:cpanel (high 8.8) - [CVE-2019-17373](https://insights.sbomify.com/CVE-2019-17373/): Auth bypass in netgear:dgn2200 firmware (critical 9.8) - [CVE-2019-17372](https://insights.sbomify.com/CVE-2019-17372/): Auth bypass in netgear:ac1450 firmware (high 8.1) - [CVE-2019-17371](https://insights.sbomify.com/CVE-2019-17371/): Denial of service in gif2png project:gif2png (medium 6.5) - [CVE-2019-17370](https://insights.sbomify.com/CVE-2019-17370/): SQL injection in otcms:otcms (high 7.2) - [CVE-2019-1737](https://insights.sbomify.com/CVE-2019-1737/): Cisco IOS and IOS XE Software IP Service Level Agreement Denial of Service Vulnerability (high 8.6) - [CVE-2019-17369](https://insights.sbomify.com/CVE-2019-17369/): Cross-site request forgery in otcms:otcms (medium 6.5) - [CVE-2019-17368](https://insights.sbomify.com/CVE-2019-17368/): Cross-site scripting in s-cms:s-cms (medium 6.1) - [CVE-2019-17367](https://insights.sbomify.com/CVE-2019-17367/): Cross-site request forgery in openwrt:openwrt (high 8.8) - [CVE-2019-17366](https://insights.sbomify.com/CVE-2019-17366/): Missing authorization in citrix:application delivery management (high 8.8) - [CVE-2019-17365](https://insights.sbomify.com/CVE-2019-17365/): Misconfiguration in nixos:nix (high 7.8) - [CVE-2019-17364](https://insights.sbomify.com/CVE-2019-17364/): Command injection in petwant:pf-103 firmware (critical 9.8) - [CVE-2019-17362](https://insights.sbomify.com/CVE-2019-17362/): Memory corruption in debian:debian linux (critical 9.1) - [CVE-2019-17361](https://insights.sbomify.com/CVE-2019-17361/): SaltStack Salt is vulnerable to command injection (critical 9.8) - [CVE-2019-17360](https://insights.sbomify.com/CVE-2019-17360/): Denial of service in hitachi:device manager (high 7.5) - [CVE-2019-1736](https://insights.sbomify.com/CVE-2019-1736/): Multiple Cisco UCS-Based Products UEFI Secure Boot Bypass Vulnerability (medium 6.2) - [CVE-2019-17359](https://insights.sbomify.com/CVE-2019-17359/): Out-of-Memory Error in Bouncy Castle Crypto (high 7.5) - [CVE-2019-17358](https://insights.sbomify.com/CVE-2019-17358/): Deserialization in cacti:cacti (high 8.1) - [CVE-2019-17357](https://insights.sbomify.com/CVE-2019-17357/): SQL injection in cacti:cacti (medium 6.5) - [CVE-2019-17356](https://insights.sbomify.com/CVE-2019-17356/): Information disclosure in infinitestudio:infinite design (medium 6.5) - [CVE-2019-17355](https://insights.sbomify.com/CVE-2019-17355/): Information disclosure in orbitz:orbitz (critical 9.8) - [CVE-2019-17354](https://insights.sbomify.com/CVE-2019-17354/): Missing authorization in zyxel:nbg-418n v2 firmware (critical 9.4) - [CVE-2019-17353](https://insights.sbomify.com/CVE-2019-17353/): Missing authorization in dlink:dir-615 firmware (high 8.2) - [CVE-2019-17352](https://insights.sbomify.com/CVE-2019-17352/): JFinal file validation vulnerability (high 7.5) - [CVE-2019-17351](https://insights.sbomify.com/CVE-2019-17351/): Denial of service in linux:linux kernel (medium 6.5) - [CVE-2019-17350](https://insights.sbomify.com/CVE-2019-17350/): Denial of service in debian:debian linux (medium 5.5) - [CVE-2019-1735](https://insights.sbomify.com/CVE-2019-1735/): Cisco NX-OS Software Command Injection Vulnerability (CVE-2019-1735) (medium 4.4) - [CVE-2019-17349](https://insights.sbomify.com/CVE-2019-17349/): Denial of service in debian:debian linux (medium 5.5) - [CVE-2019-17348](https://insights.sbomify.com/CVE-2019-17348/): Denial of service in debian:debian linux (medium 6.5) - [CVE-2019-17347](https://insights.sbomify.com/CVE-2019-17347/): Privilege escalation in debian:debian linux (high 7.8) - [CVE-2019-17346](https://insights.sbomify.com/CVE-2019-17346/): Privilege escalation in debian:debian linux (high 8.8) - [CVE-2019-17345](https://insights.sbomify.com/CVE-2019-17345/): Denial of service in debian:debian linux (medium 6.5) - [CVE-2019-17344](https://insights.sbomify.com/CVE-2019-17344/): Denial of service in debian:debian linux (medium 6.5) - [CVE-2019-17343](https://insights.sbomify.com/CVE-2019-17343/): Privilege escalation in debian:debian linux (medium 6.8) - [CVE-2019-17342](https://insights.sbomify.com/CVE-2019-17342/): Race condition in debian:debian linux (high 7.0) - [CVE-2019-17341](https://insights.sbomify.com/CVE-2019-17341/): Race condition in debian:debian linux (high 7.8) - [CVE-2019-17340](https://insights.sbomify.com/CVE-2019-17340/): Privilege escalation in debian:debian linux (high 8.8) - [CVE-2019-1734](https://insights.sbomify.com/CVE-2019-1734/): Cisco FXOS and NX-OS Software Sensitive File Read Information Disclosure Vulnerability (medium 5.5) - [CVE-2019-17339](https://insights.sbomify.com/CVE-2019-17339/): TIBCO Silver Fabric XSS vulerability (medium 6.8) - [CVE-2019-17338](https://insights.sbomify.com/CVE-2019-17338/): TIBCO Patterns - Search Exposes Cross Site Scripting Vulnerabilities (high 7.3) - [CVE-2019-17337](https://insights.sbomify.com/CVE-2019-17337/): TIBCO Spotfire Server Library Vulnerable to Reflected Cross-Site Scripting (high 8.1) - [CVE-2019-17336](https://insights.sbomify.com/CVE-2019-17336/): TIBCO Spotfire Web Player Potentially Exposes Credentials For Shared Data Sources (high 7.7) - [CVE-2019-17335](https://insights.sbomify.com/CVE-2019-17335/): TIBCO Spotfire Server Exposes User-Specific Cached Data To Others Users (medium 5.3) - [CVE-2019-17334](https://insights.sbomify.com/CVE-2019-17334/): TIBCO Spotfire Analyst and Desktop Remote Code Execution Via Shared Files (high 7.6) - [CVE-2019-17333](https://insights.sbomify.com/CVE-2019-17333/): TIBCO EBX Exposes Cross-Site Scripting Vulnerability (high 8.0) - [CVE-2019-17332](https://insights.sbomify.com/CVE-2019-17332/): TIBCO EBX Add-on For Digital Asset Manager Cross-Site Scripting Vulnerabilities (high 7.3) - [CVE-2019-17331](https://insights.sbomify.com/CVE-2019-17331/): TIBCO EBX Add-on For Data Exchange Cross-Site Scripting Vulnerabilities (high 7.3) - [CVE-2019-17330](https://insights.sbomify.com/CVE-2019-17330/): TIBCO EBX Exposes Multiple Cross-Site Scripting Vulnerabilities (high 8.8) - [CVE-2019-1733](https://insights.sbomify.com/CVE-2019-1733/): Cisco NX-OS Software NX-API Sandbox Cross-Site Scripting Vulnerability (medium 5.4) - [CVE-2019-17327](https://insights.sbomify.com/CVE-2019-17327/): Path traversal in JEUS (high 7.2) - [CVE-2019-17326](https://insights.sbomify.com/CVE-2019-17326/): Other in REXPERT (medium 6.5) - [CVE-2019-17325](https://insights.sbomify.com/CVE-2019-17325/): File upload in REXPERT (medium 6.5) - [CVE-2019-17324](https://insights.sbomify.com/CVE-2019-17324/): Path traversal in REXPERT (medium 6.5) - [CVE-2019-17323](https://insights.sbomify.com/CVE-2019-17323/): Code injection in REXPERT (high 8.8) - [CVE-2019-17322](https://insights.sbomify.com/CVE-2019-17322/): Path traversal in REXPERT (medium 6.5) - [CVE-2019-17321](https://insights.sbomify.com/CVE-2019-17321/): Information disclosure in REXPERT (medium 5.3) - [CVE-2019-17320](https://insights.sbomify.com/CVE-2019-17320/): Memory corruption in XFTP (critical 9.8) - [CVE-2019-1732](https://insights.sbomify.com/CVE-2019-1732/): Cisco NX-OS Software Remote Package Manager Command Injection Vulnerability (medium 6.4) - [CVE-2019-17319](https://insights.sbomify.com/CVE-2019-17319/): SQL injection in sugarcrm:sugarcrm (high 8.8) - [CVE-2019-17318](https://insights.sbomify.com/CVE-2019-17318/): SQL injection in sugarcrm:sugarcrm (high 8.8) - [CVE-2019-17317](https://insights.sbomify.com/CVE-2019-17317/): Deserialization in sugarcrm:sugarcrm (high 7.2) - [CVE-2019-17316](https://insights.sbomify.com/CVE-2019-17316/): Deserialization in sugarcrm:sugarcrm (high 8.8) - [CVE-2019-17315](https://insights.sbomify.com/CVE-2019-17315/): Deserialization in sugarcrm:sugarcrm (high 7.2) - [CVE-2019-17314](https://insights.sbomify.com/CVE-2019-17314/): Path traversal in sugarcrm:sugarcrm (high 7.2) - [CVE-2019-17313](https://insights.sbomify.com/CVE-2019-17313/): Path traversal in sugarcrm:sugarcrm (high 8.8) - [CVE-2019-17312](https://insights.sbomify.com/CVE-2019-17312/): Path traversal in sugarcrm:sugarcrm (high 8.8) - [CVE-2019-17311](https://insights.sbomify.com/CVE-2019-17311/): Path traversal in sugarcrm:sugarcrm (high 8.8) - [CVE-2019-17310](https://insights.sbomify.com/CVE-2019-17310/): Code injection in sugarcrm:sugarcrm (high 7.2) - [CVE-2019-1731](https://insights.sbomify.com/CVE-2019-1731/): Cisco NX-OS Software SSH Key Information Disclosure Vulnerability (medium 5.1) - [CVE-2019-17309](https://insights.sbomify.com/CVE-2019-17309/): Code injection in sugarcrm:sugarcrm (high 7.2) - [CVE-2019-17308](https://insights.sbomify.com/CVE-2019-17308/): Code injection in sugarcrm:sugarcrm (high 8.8) - [CVE-2019-17307](https://insights.sbomify.com/CVE-2019-17307/): Code injection in sugarcrm:sugarcrm (high 7.2) - [CVE-2019-17306](https://insights.sbomify.com/CVE-2019-17306/): Code injection in sugarcrm:sugarcrm (high 7.2) - [CVE-2019-17305](https://insights.sbomify.com/CVE-2019-17305/): Code injection in sugarcrm:sugarcrm (high 8.8) - [CVE-2019-17304](https://insights.sbomify.com/CVE-2019-17304/): Code injection in sugarcrm:sugarcrm (high 7.2) - [CVE-2019-17303](https://insights.sbomify.com/CVE-2019-17303/): Code injection in sugarcrm:sugarcrm (high 8.8) - [CVE-2019-17302](https://insights.sbomify.com/CVE-2019-17302/): Code injection in sugarcrm:sugarcrm (high 8.8) - [CVE-2019-17301](https://insights.sbomify.com/CVE-2019-17301/): Code injection in sugarcrm:sugarcrm (high 7.2) - [CVE-2019-17300](https://insights.sbomify.com/CVE-2019-17300/): Code injection in sugarcrm:sugarcrm (high 8.8) - [CVE-2019-1730](https://insights.sbomify.com/CVE-2019-1730/): Cisco NX-OS Software Bash Bypass Guest Shell Vulnerability (medium 6.0) - [CVE-2019-17299](https://insights.sbomify.com/CVE-2019-17299/): Code injection in sugarcrm:sugarcrm (high 7.2) - [CVE-2019-17298](https://insights.sbomify.com/CVE-2019-17298/): SQL injection in sugarcrm:sugarcrm (high 8.8) --- From sbomify Insights: https://insights.sbomify.com/years/2019/page/91/