# Vulnerabilities published in 2019


- [CVE-2019-17053](https://insights.sbomify.com/CVE-2019-17053/): Missing authorization in linux:linux kernel (low 3.3)
- [CVE-2019-17052](https://insights.sbomify.com/CVE-2019-17052/): Missing authorization in canonical:ubuntu linux (low 3.3)
- [CVE-2019-17051](https://insights.sbomify.com/CVE-2019-17051/): Security feature bypass in evernote:evernote (high 7.8)
- [CVE-2019-17050](https://insights.sbomify.com/CVE-2019-17050/): Path traversal in thecontrolgroup:voyager (high 7.2)
- [CVE-2019-1705](https://insights.sbomify.com/CVE-2019-1705/): Cisco Adaptive Security Appliance Software VPN Denial of Service Vulnerability (medium 5.3)
- [CVE-2019-17049](https://insights.sbomify.com/CVE-2019-17049/): SQL injection in netgear:srx5308 firmware (high 7.5)
- [CVE-2019-17046](https://insights.sbomify.com/CVE-2019-17046/): File upload in ilch:ilch cms (high 7.2)
- [CVE-2019-17045](https://insights.sbomify.com/CVE-2019-17045/): Cross-site scripting in ilch:ilch cms (medium 4.8)
- [CVE-2019-17044](https://insights.sbomify.com/CVE-2019-17044/): Privilege escalation in bmc:patrol agent (high 7.8)
- [CVE-2019-17043](https://insights.sbomify.com/CVE-2019-17043/): Privilege escalation in bmc:patrol agent (high 7.8)
- [CVE-2019-17042](https://insights.sbomify.com/CVE-2019-17042/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2019-17041](https://insights.sbomify.com/CVE-2019-17041/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2019-17040](https://insights.sbomify.com/CVE-2019-17040/): Memory corruption in rsyslog:rsyslog (critical 9.8)
- [CVE-2019-1704](https://insights.sbomify.com/CVE-2019-1704/): Cisco Firepower Threat Defense Software SMB Protocol Preprocessor Detection Engine Denial of Service Vulnerabilities (high 7.5)
- [CVE-2019-1703](https://insights.sbomify.com/CVE-2019-1703/): Cisco Firepower Threat Defense Software Packet Processing Denial of Service Vulnerability (high 8.6)
- [CVE-2019-17026](https://insights.sbomify.com/CVE-2019-17026/): Mozilla Firefox And Thunderbird Type Confusion (high 8.8, exploited in the wild)
- [CVE-2019-17025](https://insights.sbomify.com/CVE-2019-17025/): Memory corruption in Firefox (high 8.8)
- [CVE-2019-17024](https://insights.sbomify.com/CVE-2019-17024/): Memory corruption in Firefox (high 8.8)
- [CVE-2019-17023](https://insights.sbomify.com/CVE-2019-17023/): Security feature bypass in Firefox (medium 6.5)
- [CVE-2019-17022](https://insights.sbomify.com/CVE-2019-17022/): Cross-site scripting in Firefox (medium 6.1)
- [CVE-2019-17021](https://insights.sbomify.com/CVE-2019-17021/): Race condition in Firefox (medium 5.3)
- [CVE-2019-17020](https://insights.sbomify.com/CVE-2019-17020/): Security feature bypass in Firefox (medium 6.5)
- [CVE-2019-1702](https://insights.sbomify.com/CVE-2019-1702/): Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2019-17019](https://insights.sbomify.com/CVE-2019-17019/): Code injection in Firefox (high 8.8)
- [CVE-2019-17018](https://insights.sbomify.com/CVE-2019-17018/): Information disclosure in Firefox (medium 5.3)
- [CVE-2019-17017](https://insights.sbomify.com/CVE-2019-17017/): Memory corruption in Firefox (high 8.8)
- [CVE-2019-17016](https://insights.sbomify.com/CVE-2019-17016/): Cross-site scripting in Firefox (medium 6.1)
- [CVE-2019-17015](https://insights.sbomify.com/CVE-2019-17015/): Memory corruption in Firefox (high 8.8)
- [CVE-2019-17014](https://insights.sbomify.com/CVE-2019-17014/): Information disclosure in Firefox (high 7.4)
- [CVE-2019-17013](https://insights.sbomify.com/CVE-2019-17013/): Memory corruption in Firefox (high 8.8)
- [CVE-2019-17012](https://insights.sbomify.com/CVE-2019-17012/): Memory corruption in Firefox (high 8.8)
- [CVE-2019-17011](https://insights.sbomify.com/CVE-2019-17011/): Use after free in Firefox (high 7.5)
- [CVE-2019-17010](https://insights.sbomify.com/CVE-2019-17010/): Use after free in Firefox (high 7.5)
- [CVE-2019-1701](https://insights.sbomify.com/CVE-2019-1701/): Cisco Adaptive Security Appliance and Firepower Threat Defense Software WebVPN Cross-Site Scripting Vulnerabilities (medium 4.8)
- [CVE-2019-17009](https://insights.sbomify.com/CVE-2019-17009/): Information disclosure in Firefox (high 7.8)
- [CVE-2019-17008](https://insights.sbomify.com/CVE-2019-17008/): Use after free in Firefox (high 8.8)
- [CVE-2019-17007](https://insights.sbomify.com/CVE-2019-17007/): Denial of service in NSS (high 7.5)
- [CVE-2019-17006](https://insights.sbomify.com/CVE-2019-17006/): Memory corruption in NSS (critical 9.8)
- [CVE-2019-17005](https://insights.sbomify.com/CVE-2019-17005/): Memory corruption in Firefox (high 8.8)
- [CVE-2019-17003](https://insights.sbomify.com/CVE-2019-17003/): Cross-site scripting in Firefox for iOS (medium 6.1)
- [CVE-2019-17002](https://insights.sbomify.com/CVE-2019-17002/): Security feature bypass in Firefox (medium 4.3)
- [CVE-2019-17001](https://insights.sbomify.com/CVE-2019-17001/): Cross-site scripting in Firefox (medium 6.1)
- [CVE-2019-17000](https://insights.sbomify.com/CVE-2019-17000/): Security feature bypass in Firefox (medium 6.1)
- [CVE-2019-1700](https://insights.sbomify.com/CVE-2019-1700/): Denial of service in Cisco Firepower Extensible Operating System (FXOS) (medium 6.1)
- [CVE-2019-16999](https://insights.sbomify.com/CVE-2019-16999/): SQL injection in idcos:cloudboot (critical 9.8)
- [CVE-2019-16997](https://insights.sbomify.com/CVE-2019-16997/): SQL injection in metinfo:metinfo (high 7.2)
- [CVE-2019-16996](https://insights.sbomify.com/CVE-2019-16996/): SQL injection in metinfo:metinfo (high 7.2)
- [CVE-2019-16995](https://insights.sbomify.com/CVE-2019-16995/): Denial of service in linux:linux kernel (high 7.5)
- [CVE-2019-16994](https://insights.sbomify.com/CVE-2019-16994/): Denial of service in linux:linux kernel (medium 4.7)
- [CVE-2019-16993](https://insights.sbomify.com/CVE-2019-16993/): phpBB Cross-Site Request Forgery (CSRF) (high 8.8)
- [CVE-2019-16992](https://insights.sbomify.com/CVE-2019-16992/): Security feature bypass in keybase:keybase (high 7.5)
- [CVE-2019-16991](https://insights.sbomify.com/CVE-2019-16991/): Cross-site scripting in fusionpbx:fusionpbx (medium 6.1)
- [CVE-2019-16990](https://insights.sbomify.com/CVE-2019-16990/): Path traversal in fusionpbx:fusionpbx (medium 6.5)
- [CVE-2019-1699](https://insights.sbomify.com/CVE-2019-1699/): Cisco Firepower Threat Defense Software Command Injection Vulnerability (medium 6.7)
- [CVE-2019-16989](https://insights.sbomify.com/CVE-2019-16989/): Cross-site scripting in fusionpbx:fusionpbx (medium 6.1)
- [CVE-2019-16988](https://insights.sbomify.com/CVE-2019-16988/): Cross-site scripting in fusionpbx:fusionpbx (medium 6.1)
- [CVE-2019-16987](https://insights.sbomify.com/CVE-2019-16987/): Cross-site scripting in fusionpbx:fusionpbx (medium 6.1)
- [CVE-2019-16986](https://insights.sbomify.com/CVE-2019-16986/): Path traversal in fusionpbx:fusionpbx (medium 6.5)
- [CVE-2019-16985](https://insights.sbomify.com/CVE-2019-16985/): Path traversal in fusionpbx:fusionpbx (medium 6.5)
- [CVE-2019-16984](https://insights.sbomify.com/CVE-2019-16984/): Cross-site scripting in fusionpbx:fusionpbx (medium 6.1)
- [CVE-2019-16983](https://insights.sbomify.com/CVE-2019-16983/): Cross-site scripting in fusionpbx:fusionpbx (medium 6.1)
- [CVE-2019-16982](https://insights.sbomify.com/CVE-2019-16982/): Cross-site scripting in fusionpbx:fusionpbx (medium 6.1)
- [CVE-2019-16981](https://insights.sbomify.com/CVE-2019-16981/): Cross-site scripting in fusionpbx:fusionpbx (medium 6.1)
- [CVE-2019-16980](https://insights.sbomify.com/CVE-2019-16980/): SQL injection in fusionpbx:fusionpbx (high 8.8)
- [CVE-2019-1698](https://insights.sbomify.com/CVE-2019-1698/): Cisco IoT Field Network Director XML External Entity Vulnerability (medium 4.9)
- [CVE-2019-16979](https://insights.sbomify.com/CVE-2019-16979/): Cross-site scripting in fusionpbx:fusionpbx (medium 6.1)
- [CVE-2019-16978](https://insights.sbomify.com/CVE-2019-16978/): Cross-site scripting in fusionpbx:fusionpbx (medium 6.1)
- [CVE-2019-16977](https://insights.sbomify.com/CVE-2019-16977/): Cross-site scripting in fusionpbx:fusionpbx (medium 6.1)
- [CVE-2019-16976](https://insights.sbomify.com/CVE-2019-16976/): Cross-site scripting in fusionpbx:fusionpbx (medium 6.1)
- [CVE-2019-16975](https://insights.sbomify.com/CVE-2019-16975/): Cross-site scripting in fusionpbx:fusionpbx (medium 6.1)
- [CVE-2019-16974](https://insights.sbomify.com/CVE-2019-16974/): Cross-site scripting in fusionpbx:fusionpbx (medium 6.1)
- [CVE-2019-16973](https://insights.sbomify.com/CVE-2019-16973/): Cross-site scripting in fusionpbx:fusionpbx (medium 6.1)
- [CVE-2019-16972](https://insights.sbomify.com/CVE-2019-16972/): Cross-site scripting in fusionpbx:fusionpbx (medium 6.1)
- [CVE-2019-16971](https://insights.sbomify.com/CVE-2019-16971/): Cross-site scripting in fusionpbx:fusionpbx (medium 6.1)
- [CVE-2019-16970](https://insights.sbomify.com/CVE-2019-16970/): Cross-site scripting in fusionpbx:fusionpbx (medium 6.1)
- [CVE-2019-1697](https://insights.sbomify.com/CVE-2019-1697/): Denial of service in Cisco Adaptive Security Appliance (ASA) Software (medium 6.8)
- [CVE-2019-16969](https://insights.sbomify.com/CVE-2019-16969/): Cross-site scripting in fusionpbx:fusionpbx (medium 6.1)
- [CVE-2019-16968](https://insights.sbomify.com/CVE-2019-16968/): Cross-site scripting in fusionpbx:fusionpbx (medium 6.1)
- [CVE-2019-16967](https://insights.sbomify.com/CVE-2019-16967/): Cross-site scripting in freepbx:manager (medium 6.1)
- [CVE-2019-16966](https://insights.sbomify.com/CVE-2019-16966/): Cross-site scripting in freepbx:contactmanager (medium 6.1)
- [CVE-2019-16965](https://insights.sbomify.com/CVE-2019-16965/): Command injection in fusionpbx:fusionpbx (high 7.2)
- [CVE-2019-16964](https://insights.sbomify.com/CVE-2019-16964/): Command injection in fusionpbx:fusionpbx (high 8.8)
- [CVE-2019-16962](https://insights.sbomify.com/CVE-2019-16962/): Cross-site scripting in zohocorp:manageengine desktop central (medium 5.4)
- [CVE-2019-16961](https://insights.sbomify.com/CVE-2019-16961/): Cross-site scripting in solarwinds:web help desk (medium 5.4)
- [CVE-2019-16960](https://insights.sbomify.com/CVE-2019-16960/): Cross-site scripting in solarwinds:web help desk (medium 5.4)
- [CVE-2019-1696](https://insights.sbomify.com/CVE-2019-1696/): Cisco Firepower Threat Defense Software SMB Protocol Preprocessor Detection Engine Denial of Service Vulnerabilities (high 7.5)
- [CVE-2019-16959](https://insights.sbomify.com/CVE-2019-16959/): Code injection in solarwinds:webhelpdesk (medium 6.5)
- [CVE-2019-16958](https://insights.sbomify.com/CVE-2019-16958/): Cross-site scripting in solarwinds:help desk (medium 5.4)
- [CVE-2019-16957](https://insights.sbomify.com/CVE-2019-16957/): Cross-site scripting in solarwinds:webhelpdesk (medium 5.4)
- [CVE-2019-16956](https://insights.sbomify.com/CVE-2019-16956/): Cross-site scripting in solarwinds:web help desk (medium 5.4)
- [CVE-2019-16955](https://insights.sbomify.com/CVE-2019-16955/): Cross-site scripting in solarwinds:webhelpdesk (medium 5.4)
- [CVE-2019-16954](https://insights.sbomify.com/CVE-2019-16954/): Cross-site scripting in solarwinds:web help desk (medium 5.4)
- [CVE-2019-16951](https://insights.sbomify.com/CVE-2019-16951/): Server-side request forgery in enghouse:web chat (medium 5.3)
- [CVE-2019-16950](https://insights.sbomify.com/CVE-2019-16950/): Cross-site scripting in enghouse:web chat (medium 6.1)
- [CVE-2019-1695](https://insights.sbomify.com/CVE-2019-1695/): Cisco Adaptive Security Appliance and Firepower Threat Defense Software Layer 2 Filtering Bypass Vulnerability (medium 4.3)
- [CVE-2019-16949](https://insights.sbomify.com/CVE-2019-16949/): Business logic in enghouse:web chat (medium 6.5)
- [CVE-2019-16948](https://insights.sbomify.com/CVE-2019-16948/): Server-side request forgery in enghouse:web chat (critical 9.8)
- [CVE-2019-16943](https://insights.sbomify.com/CVE-2019-16943/): jackson-databind polymorphic typing issue (critical 9.8)
- [CVE-2019-16942](https://insights.sbomify.com/CVE-2019-16942/): Polymorphic Typing in FasterXML jackson-databind (critical 9.8)
- [CVE-2019-16941](https://insights.sbomify.com/CVE-2019-16941/): Code injection in nsa:ghidra (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/94/