# Vulnerabilities published in 2019 - [CVE-2019-9050](https://insights.sbomify.com/CVE-2019-9050/): File upload in n/a (high 7.2) - [CVE-2019-9049](https://insights.sbomify.com/CVE-2019-9049/): Cross-site request forgery in n/a (medium 6.5) - [CVE-2019-9048](https://insights.sbomify.com/CVE-2019-9048/): Cross-site request forgery in n/a (medium 6.5) - [CVE-2019-9047](https://insights.sbomify.com/CVE-2019-9047/): SQL injection in n/a (critical 9.8) - [CVE-2019-9042](https://insights.sbomify.com/CVE-2019-9042/): File upload in n/a (high 7.2) - [CVE-2019-9041](https://insights.sbomify.com/CVE-2019-9041/): Code injection in n/a (high 7.2) - [CVE-2019-9040](https://insights.sbomify.com/CVE-2019-9040/): Cross-site request forgery in n/a (high 8.8) - [CVE-2019-9039](https://insights.sbomify.com/CVE-2019-9039/): SQL Injection in Couchbase Sync Gateway (critical 9.8) - [CVE-2019-9038](https://insights.sbomify.com/CVE-2019-9038/): Memory corruption in n/a (high 7.5) - [CVE-2019-9037](https://insights.sbomify.com/CVE-2019-9037/): Memory corruption in n/a (critical 9.1) - [CVE-2019-9036](https://insights.sbomify.com/CVE-2019-9036/): Memory corruption in n/a (high 7.5) - [CVE-2019-9035](https://insights.sbomify.com/CVE-2019-9035/): Memory corruption in n/a (critical 9.1) - [CVE-2019-9034](https://insights.sbomify.com/CVE-2019-9034/): Memory corruption in n/a (critical 9.1) - [CVE-2019-9033](https://insights.sbomify.com/CVE-2019-9033/): Memory corruption in n/a (critical 9.1) - [CVE-2019-9032](https://insights.sbomify.com/CVE-2019-9032/): Memory corruption in n/a (high 7.5) - [CVE-2019-9031](https://insights.sbomify.com/CVE-2019-9031/): Null dereference in n/a (high 7.5) - [CVE-2019-9030](https://insights.sbomify.com/CVE-2019-9030/): Memory corruption in n/a (critical 9.1) - [CVE-2019-9029](https://insights.sbomify.com/CVE-2019-9029/): Memory corruption in n/a (high 7.5) - [CVE-2019-9028](https://insights.sbomify.com/CVE-2019-9028/): Memory corruption in n/a (critical 9.1) - [CVE-2019-9027](https://insights.sbomify.com/CVE-2019-9027/): Memory corruption in n/a (high 7.5) - [CVE-2019-9026](https://insights.sbomify.com/CVE-2019-9026/): Memory corruption in n/a (high 7.5) - [CVE-2019-9025](https://insights.sbomify.com/CVE-2019-9025/): Memory corruption in n/a (critical 9.8) - [CVE-2019-9024](https://insights.sbomify.com/CVE-2019-9024/): Memory corruption in n/a (high 7.5) - [CVE-2019-9023](https://insights.sbomify.com/CVE-2019-9023/): Memory corruption in n/a (critical 9.8) - [CVE-2019-9022](https://insights.sbomify.com/CVE-2019-9022/): Memory corruption in n/a (high 7.5) - [CVE-2019-9021](https://insights.sbomify.com/CVE-2019-9021/): Information disclosure in n/a (critical 9.8) - [CVE-2019-9020](https://insights.sbomify.com/CVE-2019-9020/): Use after free in n/a (critical 9.8) - [CVE-2019-9019](https://insights.sbomify.com/CVE-2019-9019/): Other in n/a (medium 6.8) - [CVE-2019-9017](https://insights.sbomify.com/CVE-2019-9017/): Memory corruption in n/a (high 7.5) - [CVE-2019-9016](https://insights.sbomify.com/CVE-2019-9016/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-9015](https://insights.sbomify.com/CVE-2019-9015/): Path traversal in n/a (critical 9.1) - [CVE-2019-9013](https://insights.sbomify.com/CVE-2019-9013/): Weak cryptography in n/a (high 8.8) - [CVE-2019-9012](https://insights.sbomify.com/CVE-2019-9012/): Denial of service in n/a (high 7.5) - [CVE-2019-9011](https://insights.sbomify.com/CVE-2019-9011/): Information disclosure in n/a (medium 5.3) - [CVE-2019-9010](https://insights.sbomify.com/CVE-2019-9010/): Missing authorization in n/a (critical 9.8) - [CVE-2019-9009](https://insights.sbomify.com/CVE-2019-9009/): Denial of service in n/a (high 7.5) - [CVE-2019-9008](https://insights.sbomify.com/CVE-2019-9008/): Privilege escalation in n/a (high 8.8) - [CVE-2019-9005](https://insights.sbomify.com/CVE-2019-9005/): Path traversal in n/a (medium 6.5) - [CVE-2019-9004](https://insights.sbomify.com/CVE-2019-9004/): Denial of service in n/a (high 7.5) - [CVE-2019-9003](https://insights.sbomify.com/CVE-2019-9003/): Use after free in n/a (high 7.5) - [CVE-2019-9002](https://insights.sbomify.com/CVE-2019-9002/): Code injection in n/a (critical 9.8) - [CVE-2019-8999](https://insights.sbomify.com/CVE-2019-8999/): XML external entity in BlackBerry UEM (high 7.5) - [CVE-2019-8998](https://insights.sbomify.com/CVE-2019-8998/): Information disclosure in QNX Software Development Platform (QNX SDP) (high 7.8) - [CVE-2019-8997](https://insights.sbomify.com/CVE-2019-8997/): An XML External Entity Injection (XXE) vulnerability in the Management System (console) of BlackBerry AtHoc versions earlier than 7.6 HF-567 (medium 5.9) - [CVE-2019-8996](https://insights.sbomify.com/CVE-2019-8996/): Memory corruption in n/a (critical 9.8) - [CVE-2019-8995](https://insights.sbomify.com/CVE-2019-8995/): TIBCO ActiveMatrix BPM Open Redirect Vulnerability (medium 4.7) - [CVE-2019-8994](https://insights.sbomify.com/CVE-2019-8994/): TIBCO ActiveMatrix BPM Escalation of Privileges Vulnerability (medium 5.4) - [CVE-2019-8993](https://insights.sbomify.com/CVE-2019-8993/): TIBCO Active Matrix Service Grid Administrator Unauthenticated Download of Sensitive File (high 8.6) - [CVE-2019-8992](https://insights.sbomify.com/CVE-2019-8992/): TIBCO Active Matrix Service Grid Administrator Remote Code Execution (critical 9.9) - [CVE-2019-8991](https://insights.sbomify.com/CVE-2019-8991/): Cross-site scripting in TIBCO ActiveMatrix BPM (high 8.8) - [CVE-2019-8990](https://insights.sbomify.com/CVE-2019-8990/): TIBCO ActiveMatrix BusinessWorks Fails To Properly Enforce Authentication (critical 9.1) - [CVE-2019-8989](https://insights.sbomify.com/CVE-2019-8989/): TIBCO Spotfire Data Science Spoofing Vulnerability (medium 5.0) - [CVE-2019-8988](https://insights.sbomify.com/CVE-2019-8988/): TIBCO Spotfire Data Science Privilege Escalation Vulnerability (medium 6.5) - [CVE-2019-8987](https://insights.sbomify.com/CVE-2019-8987/): TIBCO Spotfire Data Science Vulnerable to Persistent Cross-Site Scripting (high 7.6) - [CVE-2019-8986](https://insights.sbomify.com/CVE-2019-8986/): TIBCO JasperReports Server XML Entity Expansion Vulnerability (high 7.7) - [CVE-2019-8985](https://insights.sbomify.com/CVE-2019-8985/): Memory corruption in n/a (critical 9.8) - [CVE-2019-8984](https://insights.sbomify.com/CVE-2019-8984/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-8983](https://insights.sbomify.com/CVE-2019-8983/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-8982](https://insights.sbomify.com/CVE-2019-8982/): Server-side request forgery in n/a (critical 9.6) - [CVE-2019-8981](https://insights.sbomify.com/CVE-2019-8981/): Memory corruption in n/a (critical 9.8) - [CVE-2019-8980](https://insights.sbomify.com/CVE-2019-8980/): Denial of service in n/a (high 7.5) - [CVE-2019-8979](https://insights.sbomify.com/CVE-2019-8979/): SQL injection in n/a (critical 9.8) - [CVE-2019-8978](https://insights.sbomify.com/CVE-2019-8978/): Race condition in n/a (high 8.1) - [CVE-2019-8963](https://insights.sbomify.com/CVE-2019-8963/): Denial of service in n/a (high 7.5) - [CVE-2019-8961](https://insights.sbomify.com/CVE-2019-8961/): Denial of service in n/a (high 7.5) - [CVE-2019-8960](https://insights.sbomify.com/CVE-2019-8960/): Denial of service in n/a (high 7.5) - [CVE-2019-8956](https://insights.sbomify.com/CVE-2019-8956/): Use after free in Linux Kernel (high 7.8) - [CVE-2019-8955](https://insights.sbomify.com/CVE-2019-8955/): Denial of service in n/a (high 7.5) - [CVE-2019-8954](https://insights.sbomify.com/CVE-2019-8954/): Code injection in n/a (high 8.8) - [CVE-2019-8953](https://insights.sbomify.com/CVE-2019-8953/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-8952](https://insights.sbomify.com/CVE-2019-8952/): Path traversal in n/a (medium 6.5) - [CVE-2019-8951](https://insights.sbomify.com/CVE-2019-8951/): Open redirect in n/a (medium 6.1) - [CVE-2019-8950](https://insights.sbomify.com/CVE-2019-8950/): Hardcoded credentials in n/a (critical 9.8) - [CVE-2019-8948](https://insights.sbomify.com/CVE-2019-8948/): Cross-site scripting in n/a (critical 9.8) - [CVE-2019-8947](https://insights.sbomify.com/CVE-2019-8947/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-8946](https://insights.sbomify.com/CVE-2019-8946/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-8945](https://insights.sbomify.com/CVE-2019-8945/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-8944](https://insights.sbomify.com/CVE-2019-8944/): Information disclosure in n/a (medium 6.5) - [CVE-2019-8943](https://insights.sbomify.com/CVE-2019-8943/): Path traversal in n/a (medium 6.5) - [CVE-2019-8942](https://insights.sbomify.com/CVE-2019-8942/): File upload in n/a (high 8.8) - [CVE-2019-8939](https://insights.sbomify.com/CVE-2019-8939/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-8938](https://insights.sbomify.com/CVE-2019-8938/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-8937](https://insights.sbomify.com/CVE-2019-8937/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-8936](https://insights.sbomify.com/CVE-2019-8936/): Null dereference in n/a (high 7.5) - [CVE-2019-8935](https://insights.sbomify.com/CVE-2019-8935/): Cross-site scripting in n/a (medium 5.4) - [CVE-2019-8934](https://insights.sbomify.com/CVE-2019-8934/): Information disclosure in n/a (low 3.3) - [CVE-2019-8933](https://insights.sbomify.com/CVE-2019-8933/): File upload in n/a (high 8.8) - [CVE-2019-8932](https://insights.sbomify.com/CVE-2019-8932/): Information disclosure in n/a (high 7.5) - [CVE-2019-8931](https://insights.sbomify.com/CVE-2019-8931/): Information disclosure in n/a (high 7.5) - [CVE-2019-8929](https://insights.sbomify.com/CVE-2019-8929/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-8928](https://insights.sbomify.com/CVE-2019-8928/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-8927](https://insights.sbomify.com/CVE-2019-8927/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-8926](https://insights.sbomify.com/CVE-2019-8926/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-8925](https://insights.sbomify.com/CVE-2019-8925/): Path traversal in n/a (medium 4.3) - [CVE-2019-8924](https://insights.sbomify.com/CVE-2019-8924/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-8923](https://insights.sbomify.com/CVE-2019-8923/): SQL injection in n/a (critical 9.8) - [CVE-2019-8922](https://insights.sbomify.com/CVE-2019-8922/): Memory corruption in n/a (high 8.8) - [CVE-2019-8921](https://insights.sbomify.com/CVE-2019-8921/): Information disclosure in n/a (medium 6.5) - [CVE-2019-8920](https://insights.sbomify.com/CVE-2019-8920/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-8919](https://insights.sbomify.com/CVE-2019-8919/): Weak cryptography in n/a (high 7.5) --- From sbomify Insights: https://insights.sbomify.com/years/2019/page/11/