# Vulnerabilities published in 2019


- [CVE-2019-17297](https://insights.sbomify.com/CVE-2019-17297/): SQL injection in sugarcrm:sugarcrm (high 8.8)
- [CVE-2019-17296](https://insights.sbomify.com/CVE-2019-17296/): SQL injection in sugarcrm:sugarcrm (high 8.8)
- [CVE-2019-17295](https://insights.sbomify.com/CVE-2019-17295/): SQL injection in sugarcrm:sugarcrm (high 8.8)
- [CVE-2019-17294](https://insights.sbomify.com/CVE-2019-17294/): SQL injection in sugarcrm:sugarcrm (high 8.8)
- [CVE-2019-17293](https://insights.sbomify.com/CVE-2019-17293/): SQL injection in sugarcrm:sugarcrm (high 8.8)
- [CVE-2019-17292](https://insights.sbomify.com/CVE-2019-17292/): SQL injection in sugarcrm:sugarcrm (high 7.2)
- [CVE-2019-1729](https://insights.sbomify.com/CVE-2019-1729/): Cisco NX-OS Software Arbitrary File Overwrite Vulnerability (medium 6.7)
- [CVE-2019-1728](https://insights.sbomify.com/CVE-2019-1728/): Cisco FXOS and NX-OS Software Secure Configuration Bypass Vulnerability (medium 6.7)
- [CVE-2019-17276](https://insights.sbomify.com/CVE-2019-17276/): Cross-site scripting in OnCommand System Manager 9.x (medium 5.4)
- [CVE-2019-17275](https://insights.sbomify.com/CVE-2019-17275/): Other in OnCommand Cloud Manager (critical 9.8)
- [CVE-2019-17274](https://insights.sbomify.com/CVE-2019-17274/): Hardcoded credentials in NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller (high 7.8)
- [CVE-2019-17273](https://insights.sbomify.com/CVE-2019-17273/): Denial of service in E-Series SANtricity OS Controller Software (medium 6.5)
- [CVE-2019-17272](https://insights.sbomify.com/CVE-2019-17272/): Privilege escalation in ONTAP Select Deploy administration utility (high 7.2)
- [CVE-2019-17271](https://insights.sbomify.com/CVE-2019-17271/): SQL injection in vbulletin:vbulletin (medium 4.9)
- [CVE-2019-17270](https://insights.sbomify.com/CVE-2019-17270/): Command injection in yachtcontrol:yachtcontrol (critical 9.8)
- [CVE-2019-1727](https://insights.sbomify.com/CVE-2019-1727/): Cisco NX-OS Software Python Parser Privilege Escalation Vulnerability (medium 4.2)
- [CVE-2019-17269](https://insights.sbomify.com/CVE-2019-17269/): Command injection in intelliantech:remote access (critical 9.8)
- [CVE-2019-17268](https://insights.sbomify.com/CVE-2019-17268/): omniauth-weibo-oauth2 included a code-execution backdoor inserted by a third party (critical 9.8)
- [CVE-2019-17267](https://insights.sbomify.com/CVE-2019-17267/): Improper Input Validation in jackson-databind (critical 9.8)
- [CVE-2019-17266](https://insights.sbomify.com/CVE-2019-17266/): Memory corruption in canonical:ubuntu linux (critical 9.8)
- [CVE-2019-17264](https://insights.sbomify.com/CVE-2019-17264/): Memory corruption in liblnk project:liblnk (low 3.3)
- [CVE-2019-17263](https://insights.sbomify.com/CVE-2019-17263/): Memory corruption in libfwsi project:libfwsi (low 3.3)
- [CVE-2019-17262](https://insights.sbomify.com/CVE-2019-17262/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2019-17261](https://insights.sbomify.com/CVE-2019-17261/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2019-17260](https://insights.sbomify.com/CVE-2019-17260/): Memory corruption in mpc-hc:mpc-hc (high 7.8)
- [CVE-2019-1726](https://insights.sbomify.com/CVE-2019-1726/): Cisco NX-OS Software CLI Bypass to Internal Service Vulnerability (medium 5.3)
- [CVE-2019-17259](https://insights.sbomify.com/CVE-2019-17259/): Memory corruption in kmplayer:kmplayer (high 7.8)
- [CVE-2019-17258](https://insights.sbomify.com/CVE-2019-17258/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2019-17257](https://insights.sbomify.com/CVE-2019-17257/): Memory corruption in irfanview:irfanview (medium 5.5)
- [CVE-2019-17256](https://insights.sbomify.com/CVE-2019-17256/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2019-17255](https://insights.sbomify.com/CVE-2019-17255/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2019-17254](https://insights.sbomify.com/CVE-2019-17254/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2019-17253](https://insights.sbomify.com/CVE-2019-17253/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2019-17252](https://insights.sbomify.com/CVE-2019-17252/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2019-17251](https://insights.sbomify.com/CVE-2019-17251/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2019-17250](https://insights.sbomify.com/CVE-2019-17250/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2019-1725](https://insights.sbomify.com/CVE-2019-1725/): Cisco UCS B-Series Blade Servers Local Management CLI Arbitrary File Creation or CLI Parameter Injection Vulnerability (medium 5.5)
- [CVE-2019-17249](https://insights.sbomify.com/CVE-2019-17249/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2019-17248](https://insights.sbomify.com/CVE-2019-17248/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2019-17247](https://insights.sbomify.com/CVE-2019-17247/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2019-17246](https://insights.sbomify.com/CVE-2019-17246/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2019-17245](https://insights.sbomify.com/CVE-2019-17245/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2019-17244](https://insights.sbomify.com/CVE-2019-17244/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2019-17243](https://insights.sbomify.com/CVE-2019-17243/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2019-17242](https://insights.sbomify.com/CVE-2019-17242/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2019-17241](https://insights.sbomify.com/CVE-2019-17241/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2019-17240](https://insights.sbomify.com/CVE-2019-17240/): Security feature bypass in bludit:bludit (low 3.7)
- [CVE-2019-1724](https://insights.sbomify.com/CVE-2019-1724/): Cisco Small Business RV320 and RV325 Routers Session Hijacking Vulnerability (high 8.8)
- [CVE-2019-17239](https://insights.sbomify.com/CVE-2019-17239/): Cross-site scripting in wpfactory:download plugins and themes from dashboard (medium 6.1)
- [CVE-2019-17237](https://insights.sbomify.com/CVE-2019-17237/): Cross-site request forgery in getigniteup:igniteup (high 8.8)
- [CVE-2019-17236](https://insights.sbomify.com/CVE-2019-17236/): Cross-site scripting in getigniteup:igniteup (medium 6.1)
- [CVE-2019-17235](https://insights.sbomify.com/CVE-2019-17235/): Information disclosure in getigniteup:igniteup (medium 5.3)
- [CVE-2019-17234](https://insights.sbomify.com/CVE-2019-17234/): Missing authorization in getigniteup:igniteup (high 7.5)
- [CVE-2019-17233](https://insights.sbomify.com/CVE-2019-17233/): Cross-site scripting in etoilewebdesign:ultimate faq (medium 6.1)
- [CVE-2019-17232](https://insights.sbomify.com/CVE-2019-17232/): Missing authorization in etoilewebdesign:ultimate faq (high 7.5)
- [CVE-2019-17231](https://insights.sbomify.com/CVE-2019-17231/): Cross-site scripting in mageewp:onetone (medium 6.1)
- [CVE-2019-17230](https://insights.sbomify.com/CVE-2019-17230/): Missing authorization in mageewp:onetone (medium 5.3)
- [CVE-2019-1723](https://insights.sbomify.com/CVE-2019-1723/): Cisco Common Services Platform Collector Static Credential Vulnerability (critical 9.8)
- [CVE-2019-17229](https://insights.sbomify.com/CVE-2019-17229/): Cross-site scripting in stylemixthemes:motors - car dealer\, classifieds \& listing (medium 6.1)
- [CVE-2019-17228](https://insights.sbomify.com/CVE-2019-17228/): Missing authorization in stylemixthemes:motors - car dealer\, classifieds \& listing (medium 6.5)
- [CVE-2019-17226](https://insights.sbomify.com/CVE-2019-17226/): Cross-site scripting in cmsmadesimple:cms made simple (medium 4.8)
- [CVE-2019-17225](https://insights.sbomify.com/CVE-2019-17225/): Cross-site scripting in intelliants:subrion (medium 5.4)
- [CVE-2019-17224](https://insights.sbomify.com/CVE-2019-17224/): Path traversal in compal:ch7465lg firmware (medium 5.3)
- [CVE-2019-17223](https://insights.sbomify.com/CVE-2019-17223/): Dolibarr ERP and CRM HTML Injection (medium 6.1)
- [CVE-2019-17222](https://insights.sbomify.com/CVE-2019-17222/): Cross-site scripting in intelbras:wrn 150 firmware (medium 6.1)
- [CVE-2019-17221](https://insights.sbomify.com/CVE-2019-17221/): PhantomJS Arbitrary File Read (high 7.5)
- [CVE-2019-17220](https://insights.sbomify.com/CVE-2019-17220/): Cross-site scripting in rocket.chat:rocket.chat (medium 6.1)
- [CVE-2019-1722](https://insights.sbomify.com/CVE-2019-1722/): Cisco Expressway Series and Cisco TelePresence Video Communication Server Cross-Site Request Forgery Vulnerability (medium 6.5)
- [CVE-2019-17219](https://insights.sbomify.com/CVE-2019-17219/): Auth bypass in vzug:combi-stream mslq firmware (high 8.8)
- [CVE-2019-17218](https://insights.sbomify.com/CVE-2019-17218/): Information disclosure in vzug:combi-stream mslq firmware (critical 9.1)
- [CVE-2019-17217](https://insights.sbomify.com/CVE-2019-17217/): Cross-site request forgery in vzug:combi-stream mslq firmware (high 8.8)
- [CVE-2019-17216](https://insights.sbomify.com/CVE-2019-17216/): Weak cryptography in vzug:combi-stream mslq firmware (critical 9.8)
- [CVE-2019-17215](https://insights.sbomify.com/CVE-2019-17215/): Auth bypass in vzug:combi-stream mslq firmware (critical 9.8)
- [CVE-2019-17214](https://insights.sbomify.com/CVE-2019-17214/): Security feature bypass in webarxsecurity:webarx (high 7.5)
- [CVE-2019-17213](https://insights.sbomify.com/CVE-2019-17213/): Cross-site scripting in webarxsecurity:webarx (medium 6.1)
- [CVE-2019-17212](https://insights.sbomify.com/CVE-2019-17212/): Memory corruption in mbed:mbed (critical 9.8)
- [CVE-2019-17211](https://insights.sbomify.com/CVE-2019-17211/): Integer overflow in mbed:mbed (critical 9.8)
- [CVE-2019-17210](https://insights.sbomify.com/CVE-2019-17210/): Memory corruption in arm:mbed-mqtt (high 7.5)
- [CVE-2019-1721](https://insights.sbomify.com/CVE-2019-1721/): Cisco Expressway Series and Cisco TelePresence Video Communication Server Denial of Service Vulnerability (high 7.7)
- [CVE-2019-17207](https://insights.sbomify.com/CVE-2019-17207/): Cross-site scripting in managewp:broken link checker (medium 5.4)
- [CVE-2019-17206](https://insights.sbomify.com/CVE-2019-17206/): Uncontrolled deserialization of a pickled object in rediswrapper allows attackers to execute arbitrary scripts (critical 9.8)
- [CVE-2019-17205](https://insights.sbomify.com/CVE-2019-17205/): TeamPass Stored Cross-site Scripting (medium 6.1)
- [CVE-2019-17204](https://insights.sbomify.com/CVE-2019-17204/): TeamPass Stored Cross-site Scripting (medium 5.4)
- [CVE-2019-17203](https://insights.sbomify.com/CVE-2019-17203/): TeamPass Stored Cross-site Scripting (medium 5.4)
- [CVE-2019-17202](https://insights.sbomify.com/CVE-2019-17202/): Auth bypass in fasttracksoftware:admin by request (high 8.2)
- [CVE-2019-17201](https://insights.sbomify.com/CVE-2019-17201/): Privilege escalation in fasttracksoftware:admin by request (critical 9.0)
- [CVE-2019-1720](https://insights.sbomify.com/CVE-2019-1720/): Cisco Expressway Series and Cisco TelePresence Video Communication Server Denial of Service Vulnerability (medium 6.8)
- [CVE-2019-17199](https://insights.sbomify.com/CVE-2019-17199/): Path traversal in webpagetest:webpagetest (high 7.5)
- [CVE-2019-17197](https://insights.sbomify.com/CVE-2019-17197/): SQL injection in open-emr:openemr (critical 9.8)
- [CVE-2019-17195](https://insights.sbomify.com/CVE-2019-17195/): Improper Check for Unusual or Exceptional Conditions in Connect2id Nimbus JOSE+JWT (critical 9.8)
- [CVE-2019-17192](https://insights.sbomify.com/CVE-2019-17192/): Denial of service in signal:private messenger (critical 9.8)
- [CVE-2019-17191](https://insights.sbomify.com/CVE-2019-17191/): Security feature bypass in signal:private messenger (high 7.5)
- [CVE-2019-17190](https://insights.sbomify.com/CVE-2019-17190/): Privilege escalation in avast:secure browser (high 7.8)
- [CVE-2019-1719](https://insights.sbomify.com/CVE-2019-1719/): Cisco Identity Services Engine Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2019-17189](https://insights.sbomify.com/CVE-2019-17189/): Cross-site scripting in totemo:totemodata (medium 5.4)
- [CVE-2019-17188](https://insights.sbomify.com/CVE-2019-17188/): File upload in fecmall:fecmall (high 7.2)
- [CVE-2019-17187](https://insights.sbomify.com/CVE-2019-17187/): Path traversal in fiberhome:hg2201t firmware (high 7.5)
- [CVE-2019-17186](https://insights.sbomify.com/CVE-2019-17186/): Auth bypass in fiberhome:hg2201t firmware (high 8.8)
- [CVE-2019-17185](https://insights.sbomify.com/CVE-2019-17185/): Race condition in freeradius:freeradius (high 7.5)
- [CVE-2019-17184](https://insights.sbomify.com/CVE-2019-17184/): Privilege escalation in xerox:atlalink firmware (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/92/