# Vulnerabilities published in 2019 - [CVE-2019-16510](https://insights.sbomify.com/CVE-2019-16510/): Use after free in mz-automation:libiec61850 (high 7.5) - [CVE-2019-1651](https://insights.sbomify.com/CVE-2019-1651/): Cisco SD-WAN Solution Buffer Overflow Vulnerability (critical 9.9) - [CVE-2019-16508](https://insights.sbomify.com/CVE-2019-16508/): Integer overflow in google:chrome os (high 7.8) - [CVE-2019-1650](https://insights.sbomify.com/CVE-2019-1650/): Cisco SD-WAN Solution Arbitrary File Overwrite Vulnerability (high 8.8) - [CVE-2019-1649](https://insights.sbomify.com/CVE-2019-1649/): Cisco Secure Boot Hardware Tampering Vulnerability (medium 6.7) - [CVE-2019-1648](https://insights.sbomify.com/CVE-2019-1648/): Cisco SD-WAN Solution Privilege Escalation Vulnerability (high 7.8) - [CVE-2019-16471](https://insights.sbomify.com/CVE-2019-16471/): Use-After-Free in app.measureDialog - Tianfu Cup (high 7.8) - [CVE-2019-16470](https://insights.sbomify.com/CVE-2019-16470/): CoolType.dll crash - Tianfu Cup (high 7.8) - [CVE-2019-1647](https://insights.sbomify.com/CVE-2019-1647/): Cisco SD-WAN Solution Unauthorized Access Vulnerability (high 8.0) - [CVE-2019-16469](https://insights.sbomify.com/CVE-2019-16469/): Code injection in Adobe Experience Manager (high 7.5) - [CVE-2019-16468](https://insights.sbomify.com/CVE-2019-16468/): Cross-site scripting in Adobe Experience Manager (high 7.5) - [CVE-2019-16467](https://insights.sbomify.com/CVE-2019-16467/): Cross-site scripting in Adobe Experience Manager (medium 6.1) - [CVE-2019-16466](https://insights.sbomify.com/CVE-2019-16466/): Cross-site scripting in Adobe Experience Manager (medium 6.1) - [CVE-2019-16465](https://insights.sbomify.com/CVE-2019-16465/): Memory corruption in Adobe Acrobat and Reader (high 7.5) - [CVE-2019-16464](https://insights.sbomify.com/CVE-2019-16464/): Use after free in Adobe Acrobat and Reader (critical 9.8) - [CVE-2019-16463](https://insights.sbomify.com/CVE-2019-16463/): Memory corruption in Adobe Acrobat and Reader (critical 9.8) - [CVE-2019-16462](https://insights.sbomify.com/CVE-2019-16462/): Memory corruption in Adobe Acrobat and Reader (critical 9.8) - [CVE-2019-16461](https://insights.sbomify.com/CVE-2019-16461/): Memory corruption in Adobe Acrobat and Reader (high 7.5) - [CVE-2019-16460](https://insights.sbomify.com/CVE-2019-16460/): Memory corruption in Adobe Acrobat and Reader (critical 9.8) - [CVE-2019-1646](https://insights.sbomify.com/CVE-2019-1646/): Privilege Escalation Vulnerability in Cisco SD-WAN Solution (high 7.8) - [CVE-2019-16459](https://insights.sbomify.com/CVE-2019-16459/): Use after free in Adobe Acrobat and Reader (critical 9.8) - [CVE-2019-16458](https://insights.sbomify.com/CVE-2019-16458/): Memory corruption in Adobe Acrobat and Reader (high 7.5) - [CVE-2019-16457](https://insights.sbomify.com/CVE-2019-16457/): Memory corruption in Adobe Acrobat and Reader (high 7.5) - [CVE-2019-16456](https://insights.sbomify.com/CVE-2019-16456/): Memory corruption in Adobe Acrobat and Reader (high 7.5) - [CVE-2019-16455](https://insights.sbomify.com/CVE-2019-16455/): Memory corruption in Adobe Acrobat and Reader (critical 9.8) - [CVE-2019-16454](https://insights.sbomify.com/CVE-2019-16454/): Memory corruption in Adobe Acrobat and Reader (critical 9.8) - [CVE-2019-16453](https://insights.sbomify.com/CVE-2019-16453/): Security feature bypass in Adobe Acrobat and Reader (critical 9.8) - [CVE-2019-16452](https://insights.sbomify.com/CVE-2019-16452/): Use after free in Adobe Acrobat and Reader (critical 9.8) - [CVE-2019-16451](https://insights.sbomify.com/CVE-2019-16451/): Memory corruption in Adobe Acrobat and Reader (critical 9.8) - [CVE-2019-16450](https://insights.sbomify.com/CVE-2019-16450/): Memory corruption in Adobe Acrobat and Reader (critical 9.8) - [CVE-2019-1645](https://insights.sbomify.com/CVE-2019-1645/): Cisco Connected Mobile Experiences Information Disclosure Vulnerability (medium 4.3) - [CVE-2019-16449](https://insights.sbomify.com/CVE-2019-16449/): Memory corruption in Adobe Acrobat and Reader (high 7.5) - [CVE-2019-16448](https://insights.sbomify.com/CVE-2019-16448/): Use after free in Adobe Acrobat and Reader (critical 9.8) - [CVE-2019-16446](https://insights.sbomify.com/CVE-2019-16446/): Memory corruption in Adobe Acrobat and Reader (critical 9.8) - [CVE-2019-16445](https://insights.sbomify.com/CVE-2019-16445/): Use after free in Adobe Acrobat and Reader (critical 9.8) - [CVE-2019-16444](https://insights.sbomify.com/CVE-2019-16444/): Privilege escalation in Adobe Acrobat and Reader (critical 9.8) - [CVE-2019-1644](https://insights.sbomify.com/CVE-2019-1644/): Cisco IoT Field Network Director Resource Exhaustion Denial of Service Vulnerability (high 7.5) - [CVE-2019-1643](https://insights.sbomify.com/CVE-2019-1643/): Cisco Prime Infrastructure Cross-Site Scripting Vulnerability (medium 6.1) - [CVE-2019-1642](https://insights.sbomify.com/CVE-2019-1642/): Cisco Firepower Management Center Cross-Site Scripting Vulnerability (medium 6.1) - [CVE-2019-16417](https://insights.sbomify.com/CVE-2019-16417/): Cross-site scripting in hrworks:hrworks (medium 5.4) - [CVE-2019-16416](https://insights.sbomify.com/CVE-2019-16416/): Cross-site scripting in hrworks:hrworks (medium 5.4) - [CVE-2019-16414](https://insights.sbomify.com/CVE-2019-16414/): Cross-site scripting in gfi:kerio control (medium 6.1) - [CVE-2019-16413](https://insights.sbomify.com/CVE-2019-16413/): Denial of service in linux:linux kernel (high 7.5) - [CVE-2019-16412](https://insights.sbomify.com/CVE-2019-16412/): Denial of service in tendacn:n301 firmware (high 7.5) - [CVE-2019-16411](https://insights.sbomify.com/CVE-2019-16411/): Memory corruption in suricata-ids:suricata (critical 9.8) - [CVE-2019-16410](https://insights.sbomify.com/CVE-2019-16410/): Memory corruption in suricata-ids:suricata (critical 9.1) - [CVE-2019-1641](https://insights.sbomify.com/CVE-2019-1641/): Cisco Webex Network Recording Player Arbitrary Code Execution Vulnerabilities (high 7.8) - [CVE-2019-16409](https://insights.sbomify.com/CVE-2019-16409/): SilverStripe Versioned Files module Unpublished files are exposed publicly (medium 5.3) - [CVE-2019-16407](https://insights.sbomify.com/CVE-2019-16407/): Other in jetbrains:resharper (high 7.3) - [CVE-2019-16406](https://insights.sbomify.com/CVE-2019-16406/): Misconfiguration in centreon:centreon web (high 7.8) - [CVE-2019-16405](https://insights.sbomify.com/CVE-2019-16405/): Improper Input Validation in Centreon Web (high 7.2) - [CVE-2019-16404](https://insights.sbomify.com/CVE-2019-16404/): SQL injection in open-emr:openemr (high 8.8) - [CVE-2019-16403](https://insights.sbomify.com/CVE-2019-16403/): Authorization Bypass Through User-Controlled Key in Bagisto (high 8.8) - [CVE-2019-16401](https://insights.sbomify.com/CVE-2019-16401/): Information disclosure in samsung:galaxy note 2 firmware (medium 6.5) - [CVE-2019-16400](https://insights.sbomify.com/CVE-2019-16400/): Denial of service in samsung:galaxy note 2 firmware (medium 6.5) - [CVE-2019-1640](https://insights.sbomify.com/CVE-2019-1640/): Cisco Webex Network Recording Player Arbitrary Code Execution Vulnerabilities (high 7.8) - [CVE-2019-16399](https://insights.sbomify.com/CVE-2019-16399/): Hardcoded credentials in westerndigital:wd my book firmware (critical 9.8) - [CVE-2019-16398](https://insights.sbomify.com/CVE-2019-16398/): Code injection in keeper:k5 firmware (medium 6.8) - [CVE-2019-16396](https://insights.sbomify.com/CVE-2019-16396/): Use after free in gnucobol project:gnucobol (high 7.8) - [CVE-2019-16395](https://insights.sbomify.com/CVE-2019-16395/): Memory corruption in gnucobol project:gnucobol (high 7.8) - [CVE-2019-16394](https://insights.sbomify.com/CVE-2019-16394/): Information disclosure in canonical:ubuntu linux (medium 5.3) - [CVE-2019-16393](https://insights.sbomify.com/CVE-2019-16393/): Open redirect in canonical:ubuntu linux (medium 6.1) - [CVE-2019-16392](https://insights.sbomify.com/CVE-2019-16392/): Cross-site scripting in canonical:ubuntu linux (medium 6.1) - [CVE-2019-16391](https://insights.sbomify.com/CVE-2019-16391/): Missing authorization in canonical:ubuntu linux (medium 6.5) - [CVE-2019-1639](https://insights.sbomify.com/CVE-2019-1639/): Cisco Webex Network Recording Player Arbitrary Code Execution Vulnerabilities (high 7.8) - [CVE-2019-16388](https://insights.sbomify.com/CVE-2019-16388/): Information disclosure in pega:pega platform (medium 4.3) - [CVE-2019-16387](https://insights.sbomify.com/CVE-2019-16387/): Missing authorization in pega:pega platform (high 8.1) - [CVE-2019-16386](https://insights.sbomify.com/CVE-2019-16386/): Information disclosure in pega:pega platform (medium 4.3) - [CVE-2019-16385](https://insights.sbomify.com/CVE-2019-16385/): Cross-site scripting in cybelesoft:thinfinity virtualui (medium 6.1) - [CVE-2019-16384](https://insights.sbomify.com/CVE-2019-16384/): Path traversal in cybelesoft:thinfinity virtualui (medium 6.5) - [CVE-2019-16383](https://insights.sbomify.com/CVE-2019-16383/): SQL injection in ipswitch:moveit transfer (critical 9.4) - [CVE-2019-16382](https://insights.sbomify.com/CVE-2019-16382/): Security feature bypass in ivanti:workspace control (critical 9.8) - [CVE-2019-1638](https://insights.sbomify.com/CVE-2019-1638/): Cisco Webex Network Recording Player Arbitrary Code Execution Vulnerabilities (high 7.8) - [CVE-2019-16378](https://insights.sbomify.com/CVE-2019-16378/): Security feature bypass in canonical:ubuntu linux (critical 9.8) - [CVE-2019-16377](https://insights.sbomify.com/CVE-2019-16377/): Consul gem insufficient authentication check - Multiple powers in one controller are not always checked correctly (critical 9.8) - [CVE-2019-16375](https://insights.sbomify.com/CVE-2019-16375/): Cross-site scripting in otrs:otrs (medium 5.4) - [CVE-2019-16374](https://insights.sbomify.com/CVE-2019-16374/): Auth bypass in pega:platform (critical 9.8) - [CVE-2019-16371](https://insights.sbomify.com/CVE-2019-16371/): Security feature bypass in logmein:lastpass (high 8.2) - [CVE-2019-16370](https://insights.sbomify.com/CVE-2019-16370/): Use of a weak cryptographic algorithm in Gradle (medium 5.9) - [CVE-2019-1637](https://insights.sbomify.com/CVE-2019-1637/): Cisco Webex Network Recording Player Arbitrary Code Execution Vulnerabilities (high 7.8) - [CVE-2019-16366](https://insights.sbomify.com/CVE-2019-16366/): Memory corruption in moddable:moddable (critical 9.8) - [CVE-2019-1636](https://insights.sbomify.com/CVE-2019-1636/): Cisco Webex Teams URI Handler Insecure Library Loading Vulnerability (high 7.8) - [CVE-2019-16355](https://insights.sbomify.com/CVE-2019-16355/): Misconfiguration in beego:beego (medium 5.5) - [CVE-2019-16354](https://insights.sbomify.com/CVE-2019-16354/): Race condition in beego:beego (medium 4.7) - [CVE-2019-16353](https://insights.sbomify.com/CVE-2019-16353/): Denial of service in geautomation:proficy (high 7.5) - [CVE-2019-16352](https://insights.sbomify.com/CVE-2019-16352/): Memory corruption in rockcarry:ffjpeg (medium 6.5) - [CVE-2019-16351](https://insights.sbomify.com/CVE-2019-16351/): Null dereference in rockcarry:ffjpeg (medium 6.5) - [CVE-2019-16350](https://insights.sbomify.com/CVE-2019-16350/): Null dereference in rockcarry:ffjpeg (medium 6.5) - [CVE-2019-1635](https://insights.sbomify.com/CVE-2019-1635/): Cisco IP Phone 7800 Series and 8800 Series Session Initiation Protocol XML Denial of Service Vulnerability (high 7.5) - [CVE-2019-16349](https://insights.sbomify.com/CVE-2019-16349/): Null dereference in axiosys:bento4 (medium 5.5) - [CVE-2019-16348](https://insights.sbomify.com/CVE-2019-16348/): Null dereference in libwav project:libwav (medium 6.5) - [CVE-2019-16347](https://insights.sbomify.com/CVE-2019-16347/): Memory corruption in miniupnp project:ngiflib (high 8.8) - [CVE-2019-16346](https://insights.sbomify.com/CVE-2019-16346/): Memory corruption in miniupnp project:ngiflib (high 8.8) - [CVE-2019-16344](https://insights.sbomify.com/CVE-2019-16344/): Cross-site scripting in scadabr:scadabr (medium 6.1) - [CVE-2019-16340](https://insights.sbomify.com/CVE-2019-16340/): Information disclosure in linksys:velop whw0301 firmware (critical 9.8) - [CVE-2019-1634](https://insights.sbomify.com/CVE-2019-1634/): Cisco Integrated Management Controller Command Injection Vulnerability (high 7.2) - [CVE-2019-16338](https://insights.sbomify.com/CVE-2019-16338/): Use after free in hancom:hancom office neo (high 7.8) - [CVE-2019-16337](https://insights.sbomify.com/CVE-2019-16337/): Use after free in hancom:hancom office neo (high 7.8) - [CVE-2019-16336](https://insights.sbomify.com/CVE-2019-16336/): Memory corruption in cypress:cybl11573 (medium 6.5) - [CVE-2019-16335](https://insights.sbomify.com/CVE-2019-16335/): Polymorphic Typing issue in FasterXML jackson-databind (critical 9.8) --- From sbomify Insights: https://insights.sbomify.com/years/2019/page/98/