# Vulnerabilities published in 2019


- [CVE-2019-17183](https://insights.sbomify.com/CVE-2019-17183/): Denial of service in foxitsoftware:reader (high 7.5)
- [CVE-2019-17181](https://insights.sbomify.com/CVE-2019-17181/): Memory corruption in intrasrv project:intrasrv (critical 9.8)
- [CVE-2019-17180](https://insights.sbomify.com/CVE-2019-17180/): Path traversal in valvesoftware:steam client (high 7.8)
- [CVE-2019-1718](https://insights.sbomify.com/CVE-2019-1718/): Cisco Identity Services Engine SSL Renegotiation Denial of Service Vulnerability (medium 5.3)
- [CVE-2019-17179](https://insights.sbomify.com/CVE-2019-17179/): Cross-site scripting in open-emr:openemr (medium 6.1)
- [CVE-2019-17178](https://insights.sbomify.com/CVE-2019-17178/): Denial of service in freerdp:freerdp (high 7.5)
- [CVE-2019-17177](https://insights.sbomify.com/CVE-2019-17177/): Denial of service in freerdp:freerdp (high 7.5)
- [CVE-2019-17176](https://insights.sbomify.com/CVE-2019-17176/): Cross-site scripting in genesys:eservices chat (medium 6.1)
- [CVE-2019-17175](https://insights.sbomify.com/CVE-2019-17175/): Path traversal in joyplus-cms project:joyplus-cms (high 7.5)
- [CVE-2019-1717](https://insights.sbomify.com/CVE-2019-1717/): Cisco Video Surveillance Manager Web-Based Management Interface Information Disclosure Vulnerability (high 7.5)
- [CVE-2019-1716](https://insights.sbomify.com/CVE-2019-1716/): Cisco IP Phone 7800 Series and 8800 Series Remote Code Execution Vulnerability (high 7.5)
- [CVE-2019-17151](https://insights.sbomify.com/CVE-2019-17151/): Open redirect in WeChat (medium 4.3)
- [CVE-2019-1715](https://insights.sbomify.com/CVE-2019-1715/): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Low-Entropy Keys Vulnerability (medium 5.3)
- [CVE-2019-17148](https://insights.sbomify.com/CVE-2019-17148/): Command injection in Desktop (high 7.8)
- [CVE-2019-17147](https://insights.sbomify.com/CVE-2019-17147/): Memory corruption in TL-WR841N (high 8.8)
- [CVE-2019-17146](https://insights.sbomify.com/CVE-2019-17146/): Memory corruption in DCS-960L (high 8.8)
- [CVE-2019-17145](https://insights.sbomify.com/CVE-2019-17145/): Memory corruption in PhantomPDF (high 7.8)
- [CVE-2019-17144](https://insights.sbomify.com/CVE-2019-17144/): Memory corruption in PhantomPDF (high 7.8)
- [CVE-2019-17143](https://insights.sbomify.com/CVE-2019-17143/): Use after free in PhantomPDF (low 3.3)
- [CVE-2019-17142](https://insights.sbomify.com/CVE-2019-17142/): Use after free in PhantomPDF (high 7.8)
- [CVE-2019-17141](https://insights.sbomify.com/CVE-2019-17141/): Use after free in PhantomPDF (high 7.8)
- [CVE-2019-17140](https://insights.sbomify.com/CVE-2019-17140/): Use after free in PhantomPDF (high 7.8)
- [CVE-2019-1714](https://insights.sbomify.com/CVE-2019-1714/): Auth bypass in Cisco Adaptive Security Appliance (ASA) Software (medium 5.8)
- [CVE-2019-17139](https://insights.sbomify.com/CVE-2019-17139/): Memory corruption in PhantomPDF (high 7.8)
- [CVE-2019-17138](https://insights.sbomify.com/CVE-2019-17138/): Memory corruption in Studio Photo (low 3.3)
- [CVE-2019-17137](https://insights.sbomify.com/CVE-2019-17137/): Auth bypass in AC1200 (critical 9.4)
- [CVE-2019-17136](https://insights.sbomify.com/CVE-2019-17136/): Memory corruption in PhantomPDF (high 7.8)
- [CVE-2019-17135](https://insights.sbomify.com/CVE-2019-17135/): Memory corruption in PhantomPDF (high 7.8)
- [CVE-2019-17134](https://insights.sbomify.com/CVE-2019-17134/): OpenStack Octavia Amphora-Agent not requiring Client-Certificate (critical 9.1)
- [CVE-2019-17133](https://insights.sbomify.com/CVE-2019-17133/): Memory corruption in canonical:ubuntu linux (critical 9.8)
- [CVE-2019-17132](https://insights.sbomify.com/CVE-2019-17132/): Code injection in vbulletin:vbulletin (critical 9.8)
- [CVE-2019-17131](https://insights.sbomify.com/CVE-2019-17131/): Other in vbulletin:vbulletin (medium 4.3)
- [CVE-2019-17130](https://insights.sbomify.com/CVE-2019-17130/): Server-side request forgery in vbulletin:vbulletin (medium 6.5)
- [CVE-2019-1713](https://insights.sbomify.com/CVE-2019-1713/): Cisco Adaptive Security Appliance Software Cross-Site Request Forgery Vulnerability (high 8.1)
- [CVE-2019-17128](https://insights.sbomify.com/CVE-2019-17128/): SQL injection in netreo:omnicenter (high 7.5)
- [CVE-2019-17127](https://insights.sbomify.com/CVE-2019-17127/): Cross-site scripting in solarwinds:orion platform (medium 6.1)
- [CVE-2019-17125](https://insights.sbomify.com/CVE-2019-17125/): Cross-site scripting in solarwinds:orion platform (medium 6.1)
- [CVE-2019-17124](https://insights.sbomify.com/CVE-2019-17124/): Misconfiguration in kramerav:viaware (critical 9.8)
- [CVE-2019-17123](https://insights.sbomify.com/CVE-2019-17123/): Other in egain:mail (high 7.5)
- [CVE-2019-17121](https://insights.sbomify.com/CVE-2019-17121/): Cross-site scripting in vanderbilt:redcap (medium 5.4)
- [CVE-2019-17120](https://insights.sbomify.com/CVE-2019-17120/): Cross-site scripting in wikidsystems:2fa enterprise server (medium 6.1)
- [CVE-2019-1712](https://insights.sbomify.com/CVE-2019-1712/): Cisco IOS XR Software Protocol Independent Multicast Denial of Service Vulnerability (medium 5.8)
- [CVE-2019-17119](https://insights.sbomify.com/CVE-2019-17119/): SQL injection in wikidsystems:two factor authentication enterprise server (high 8.8)
- [CVE-2019-17118](https://insights.sbomify.com/CVE-2019-17118/): Cross-site request forgery in wikidsystems:2fa enterprise server (high 8.8)
- [CVE-2019-17117](https://insights.sbomify.com/CVE-2019-17117/): SQL injection in wikidsystems:2fa enterprise server (high 8.8)
- [CVE-2019-17116](https://insights.sbomify.com/CVE-2019-17116/): Cross-site scripting in wikidsystems:two factor authentication enterprise server (medium 6.1)
- [CVE-2019-17115](https://insights.sbomify.com/CVE-2019-17115/): Cross-site scripting in wikidsystems:two factor authentication enterprise server (medium 6.1)
- [CVE-2019-17114](https://insights.sbomify.com/CVE-2019-17114/): Cross-site scripting in wikidsystems:two factor authentication enterprise server (medium 6.1)
- [CVE-2019-17113](https://insights.sbomify.com/CVE-2019-17113/): Memory corruption in openmpt:libopenmpt (critical 9.8)
- [CVE-2019-17112](https://insights.sbomify.com/CVE-2019-17112/): Missing authorization in zohocorp:manageengine datasecurity plus (medium 4.3)
- [CVE-2019-1711](https://insights.sbomify.com/CVE-2019-1711/): Cisco IOS XR gRPC Software Denial of Service Vulnerability (medium 5.3)
- [CVE-2019-17109](https://insights.sbomify.com/CVE-2019-17109/): koji hub allows arbitrary upload destinations (medium 6.5)
- [CVE-2019-17108](https://insights.sbomify.com/CVE-2019-17108/): Path traversal in centreon:centreon web (medium 6.1)
- [CVE-2019-17107](https://insights.sbomify.com/CVE-2019-17107/): Command injection in centreon:centreon web (high 8.8)
- [CVE-2019-17106](https://insights.sbomify.com/CVE-2019-17106/): Centreon Sensitive Data Exposure (medium 6.5)
- [CVE-2019-17105](https://insights.sbomify.com/CVE-2019-17105/): Weak cryptography in centreon:centreon web (medium 5.3)
- [CVE-2019-17104](https://insights.sbomify.com/CVE-2019-17104/): Centreon Does Not Set HTTPOnly Flag (high 7.5)
- [CVE-2019-17103](https://insights.sbomify.com/CVE-2019-17103/): Get-task-allow entitlement via BDLDaemon on macOS (medium 4.9)
- [CVE-2019-17102](https://insights.sbomify.com/CVE-2019-17102/): Bitdefender BOX v2 bootstrap update_setup command execution vulnerability (VA-2226) (high 8.3)
- [CVE-2019-17101](https://insights.sbomify.com/CVE-2019-17101/): Command execution due to unsanitized input in Netatmo Smart Indoor Security Camera (medium 5.7)
- [CVE-2019-17100](https://insights.sbomify.com/CVE-2019-17100/): Untrusted Search Path vulnerability in Bitdefender Total Security 2020 (VA-5895) (medium 5.2)
- [CVE-2019-1710](https://insights.sbomify.com/CVE-2019-1710/): Cisco IOS XR 64-Bit Software for Cisco ASR 9000 Series Aggregation Services Routers Network Isolation Vulnerability (critical 9.8)
- [CVE-2019-17099](https://insights.sbomify.com/CVE-2019-17099/): Untrusted Search Path vulnerability in EPSecurityService.exe (VA-3500) (medium 5.3)
- [CVE-2019-17098](https://insights.sbomify.com/CVE-2019-17098/): Use of Hard-coded Cryptographic Key vulnerability in August Connect Wi-Fi Bridge App (low 3.5)
- [CVE-2019-17096](https://insights.sbomify.com/CVE-2019-17096/): Bitdefender BOX 2 bootstrap get_image_size command injection vulnerability (critical 9.0)
- [CVE-2019-17095](https://insights.sbomify.com/CVE-2019-17095/): Bitdefender BOX 2 bootstrap download_image command injection vulnerability (high 8.1)
- [CVE-2019-17094](https://insights.sbomify.com/CVE-2019-17094/): Stack-Based Overflow vulnerability in Belkin WeMo Insights Switch (high 8.3)
- [CVE-2019-17093](https://insights.sbomify.com/CVE-2019-17093/): Other in avast:antivirus (high 7.8)
- [CVE-2019-17092](https://insights.sbomify.com/CVE-2019-17092/): Cross-site scripting in openproject:openproject (medium 6.1)
- [CVE-2019-17091](https://insights.sbomify.com/CVE-2019-17091/): Cross-site Scripting in Eclipse Mojarra (medium 6.1)
- [CVE-2019-1709](https://insights.sbomify.com/CVE-2019-1709/): Cisco Firepower Threat Defense Software Command Injection Vulnerability (medium 6.0)
- [CVE-2019-17087](https://insights.sbomify.com/CVE-2019-17087/): Path traversal in AcuToWeb (high 7.5)
- [CVE-2019-17085](https://insights.sbomify.com/CVE-2019-17085/): XML external entity in Operations Agent (medium 6.5)
- [CVE-2019-17082](https://insights.sbomify.com/CVE-2019-17082/): Auth bypass in AccuRev (critical 9.0)
- [CVE-2019-17080](https://insights.sbomify.com/CVE-2019-17080/): Deserialization in linuxmint:mintinstall (high 7.8)
- [CVE-2019-1708](https://insights.sbomify.com/CVE-2019-1708/): Denial of service in Cisco Adaptive Security Appliance (ASA) Software (high 8.6)
- [CVE-2019-17076](https://insights.sbomify.com/CVE-2019-17076/): Deserialization in jamf:jamf (critical 9.8)
- [CVE-2019-17075](https://insights.sbomify.com/CVE-2019-17075/): Memory corruption in linux:linux kernel (high 7.5)
- [CVE-2019-17074](https://insights.sbomify.com/CVE-2019-17074/): Cross-site scripting in xunruicms:xunruicms (medium 5.4)
- [CVE-2019-17073](https://insights.sbomify.com/CVE-2019-17073/): Path traversal in emlog:emlog (medium 6.5)
- [CVE-2019-17072](https://insights.sbomify.com/CVE-2019-17072/): SQL injection in awplife:contact form widget (critical 9.8)
- [CVE-2019-17071](https://insights.sbomify.com/CVE-2019-17071/): Cross-site scripting in realbigplugins:client dash (medium 6.1)
- [CVE-2019-17070](https://insights.sbomify.com/CVE-2019-17070/): Cross-site scripting in lqd:liquid speech balloon (medium 6.1)
- [CVE-2019-1707](https://insights.sbomify.com/CVE-2019-1707/): Cisco DNA Center Access Contract Stored Cross-Site Scripting Vulnerability (medium 5.4)
- [CVE-2019-17069](https://insights.sbomify.com/CVE-2019-17069/): Use after free in netapp:oncommand unified manager core package (high 7.5)
- [CVE-2019-17068](https://insights.sbomify.com/CVE-2019-17068/): Security feature bypass in opensuse:leap (high 7.5)
- [CVE-2019-17067](https://insights.sbomify.com/CVE-2019-17067/): Other in putty:putty (critical 9.8)
- [CVE-2019-17066](https://insights.sbomify.com/CVE-2019-17066/): Privilege escalation in ivanti:workspace control (high 7.8)
- [CVE-2019-17064](https://insights.sbomify.com/CVE-2019-17064/): Null dereference in glyphandcog:xpdfreader (medium 5.5)
- [CVE-2019-17063](https://insights.sbomify.com/CVE-2019-17063/): Denial of service in snowtide:pdfxstream (medium 5.5)
- [CVE-2019-17062](https://insights.sbomify.com/CVE-2019-17062/): Auth bypass in oxid-esales:eshop (high 8.8)
- [CVE-2019-17061](https://insights.sbomify.com/CVE-2019-17061/): Memory corruption in cypress:psoc 4 ble (medium 6.5)
- [CVE-2019-17060](https://insights.sbomify.com/CVE-2019-17060/): Memory corruption in nxp:mcuxpresso software development kit (medium 6.5)
- [CVE-2019-1706](https://insights.sbomify.com/CVE-2019-1706/): Cisco Adaptive Security Appliance Software IPsec Denial of Service Vulnerability (high 8.6)
- [CVE-2019-17059](https://insights.sbomify.com/CVE-2019-17059/): Command injection in sophos:cyberoamos (critical 9.8)
- [CVE-2019-17058](https://insights.sbomify.com/CVE-2019-17058/): File upload in footy:tipping software (critical 9.1)
- [CVE-2019-17057](https://insights.sbomify.com/CVE-2019-17057/): Cross-site scripting in footy:tipping software (medium 6.1)
- [CVE-2019-17056](https://insights.sbomify.com/CVE-2019-17056/): Missing authorization in linux:linux kernel (low 3.3)
- [CVE-2019-17055](https://insights.sbomify.com/CVE-2019-17055/): Missing authorization in canonical:ubuntu linux (low 3.3)
- [CVE-2019-17054](https://insights.sbomify.com/CVE-2019-17054/): Missing authorization in linux:linux kernel (low 3.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/93/