# Vulnerabilities published in 2019


- [CVE-2019-12095](https://insights.sbomify.com/CVE-2019-12095/): Cross-site request forgery in horde:groupware (high 8.8)
- [CVE-2019-12094](https://insights.sbomify.com/CVE-2019-12094/): Cross-site scripting in horde:groupware (medium 6.1)
- [CVE-2019-12091](https://insights.sbomify.com/CVE-2019-12091/): Netskope client command injections vulnerability (high 7.8)
- [CVE-2019-1209](https://insights.sbomify.com/CVE-2019-1209/): Information disclosure in Microsoft Lync Server (medium 6.5)
- [CVE-2019-12087](https://insights.sbomify.com/CVE-2019-12087/): Denial of service in samsung:s10 firmware (medium 5.5)
- [CVE-2019-12086](https://insights.sbomify.com/CVE-2019-12086/): Information exposure in FasterXML jackson-databind (high 7.5)
- [CVE-2019-12083](https://insights.sbomify.com/CVE-2019-12083/): Memory corruption in fedoraproject:fedora (high 8.1)
- [CVE-2019-1208](https://insights.sbomify.com/CVE-2019-1208/): Use after free in Internet Explorer 10 (high 7.5)
- [CVE-2019-12068](https://insights.sbomify.com/CVE-2019-12068/): Denial of service in canonical:ubuntu linux (low 3.8)
- [CVE-2019-12067](https://insights.sbomify.com/CVE-2019-12067/): Null dereference in debian:debian linux (medium 6.5)
- [CVE-2019-1206](https://insights.sbomify.com/CVE-2019-1206/): Windows DHCP Server Denial of Service Vulnerability (high 7.5)
- [CVE-2019-1205](https://insights.sbomify.com/CVE-2019-1205/): Microsoft Word Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2019-12047](https://insights.sbomify.com/CVE-2019-12047/): Cross-site scripting in gridea:gridea (medium 6.1)
- [CVE-2019-12046](https://insights.sbomify.com/CVE-2019-12046/): Information disclosure in debian:debian linux (critical 9.8)
- [CVE-2019-12044](https://insights.sbomify.com/CVE-2019-12044/): Memory corruption in citrix:netscaler application delivery controller firmware (high 7.5)
- [CVE-2019-12043](https://insights.sbomify.com/CVE-2019-12043/): Cross-site Scripting in remarkable (medium 6.1)
- [CVE-2019-12042](https://insights.sbomify.com/CVE-2019-12042/): Privilege escalation in pandasecurity:panda antivirus (critical 9.8)
- [CVE-2019-12041](https://insights.sbomify.com/CVE-2019-12041/): Regular Expression Denial of Service in remarkable (high 7.5)
- [CVE-2019-1204](https://insights.sbomify.com/CVE-2019-1204/): Microsoft Outlook Elevation of Privilege Vulnerability (medium 4.3)
- [CVE-2019-1203](https://insights.sbomify.com/CVE-2019-1203/): Microsoft Office SharePoint XSS Vulnerability (medium 5.4)
- [CVE-2019-1202](https://insights.sbomify.com/CVE-2019-1202/): SharePoint Information Disclosure Vulnerability (medium 4.4)
- [CVE-2019-12017](https://insights.sbomify.com/CVE-2019-12017/): Deserialization in MapR-MFS/CLDB (critical 9.8)
- [CVE-2019-1201](https://insights.sbomify.com/CVE-2019-1201/): Microsoft Word Remote Code Execution Vulnerability (high 7.8)
- [CVE-2019-12002](https://insights.sbomify.com/CVE-2019-12002/): Auth bypass in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage (critical 9.8)
- [CVE-2019-12001](https://insights.sbomify.com/CVE-2019-12001/): Auth bypass in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage (medium 6.4)
- [CVE-2019-12000](https://insights.sbomify.com/CVE-2019-12000/): Weak cryptography in HPE MSE Msg Gw application E-LTU (medium 6.6)
- [CVE-2019-1200](https://insights.sbomify.com/CVE-2019-1200/): Microsoft Outlook Remote Code Execution Vulnerability (high 7.8)
- [CVE-2019-11999](https://insights.sbomify.com/CVE-2019-11999/): Cross-site scripting in HPE OC Media Platform (OCMP) (medium 6.9)
- [CVE-2019-11998](https://insights.sbomify.com/CVE-2019-11998/): Other in HPE Superdome Flex Server (medium 5.5)
- [CVE-2019-11997](https://insights.sbomify.com/CVE-2019-11997/): Cross-site scripting in HPE enhanced Internet Usage Manager (eIUM) (medium 6.1)
- [CVE-2019-11996](https://insights.sbomify.com/CVE-2019-11996/): Privilege escalation in HPE Nimble Storage Hybrid Flash Arrays; Nimble Storage All Flash Arrays; Nimble Storage Secondary Flash Arrays (critical 9.8)
- [CVE-2019-11995](https://insights.sbomify.com/CVE-2019-11995/): Other in HPE IOT + GCP (high 7.5)
- [CVE-2019-11994](https://insights.sbomify.com/CVE-2019-11994/): Path traversal in HPE SimpliVity 2600 Gen10; HPE SimpliVity 380 Gen10; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 380 Gen9; SimpliVity OmniCube; SimpliVity OmniStack for Cisco; SimpliVity OmniStack for Dell; SimpliVity OmniStack for Lenovo (critical 9.8)
- [CVE-2019-11993](https://insights.sbomify.com/CVE-2019-11993/): Missing authorization in SimpliVity OmniCube; HPE SimpliVity 380 Gen9; HPE SimpliVity 380 Gen9; HPE SimpliVity 380 Gen10; HPE SimpliVity 380 Gen10 G; SimpliVity OmniStack for Lenovo; SimpliVity OmniStack for Cisco; SimpliVity OmniStack for Dell; HPE SimpliVity 2600 Gen10 (high 7.5)
- [CVE-2019-11992](https://insights.sbomify.com/CVE-2019-11992/): Cross-site scripting in HPE OneView for VMware vCenter with Operations Manager and Log Insight (medium 6.1)
- [CVE-2019-11991](https://insights.sbomify.com/CVE-2019-11991/): Information disclosure in HPE 3PAR Service Processors (critical 9.8)
- [CVE-2019-11990](https://insights.sbomify.com/CVE-2019-11990/): Other in HPE IOT and GCP (high 8.8)
- [CVE-2019-1199](https://insights.sbomify.com/CVE-2019-1199/): Microsoft Outlook Memory Corruption Vulnerability (high 7.8)
- [CVE-2019-11989](https://insights.sbomify.com/CVE-2019-11989/): Denial of service in IceWall SSO Agent Option; HPE IceWall MFA 4.0EE MFA. Server LTU; HPE IceWall.MFA4.0SE MFA. Server LTU (medium 5.9)
- [CVE-2019-11988](https://insights.sbomify.com/CVE-2019-11988/): Auth bypass in HPE Smart Update Manager (critical 9.8)
- [CVE-2019-11987](https://insights.sbomify.com/CVE-2019-11987/): Privilege escalation in HPE Smart Update Manager (high 7.8)
- [CVE-2019-11986](https://insights.sbomify.com/CVE-2019-11986/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11985](https://insights.sbomify.com/CVE-2019-11985/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11984](https://insights.sbomify.com/CVE-2019-11984/): SQL injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11983](https://insights.sbomify.com/CVE-2019-11983/): Memory corruption in HPE iLO4 and HPE iLO5 (high 7.0)
- [CVE-2019-11982](https://insights.sbomify.com/CVE-2019-11982/): Cross-site scripting in HPE iLO4 and HPE iLO5 (high 8.3)
- [CVE-2019-11980](https://insights.sbomify.com/CVE-2019-11980/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-1198](https://insights.sbomify.com/CVE-2019-1198/): Microsoft Windows Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2019-11979](https://insights.sbomify.com/CVE-2019-11979/): SQL injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11978](https://insights.sbomify.com/CVE-2019-11978/): SQL injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11977](https://insights.sbomify.com/CVE-2019-11977/): SQL injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11976](https://insights.sbomify.com/CVE-2019-11976/): SQL injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11975](https://insights.sbomify.com/CVE-2019-11975/): SQL injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11974](https://insights.sbomify.com/CVE-2019-11974/): SQL injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11973](https://insights.sbomify.com/CVE-2019-11973/): SQL injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11972](https://insights.sbomify.com/CVE-2019-11972/): SQL injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11971](https://insights.sbomify.com/CVE-2019-11971/): SQL injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11970](https://insights.sbomify.com/CVE-2019-11970/): SQL injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-1197](https://insights.sbomify.com/CVE-2019-1197/): Chakra Scripting Engine Memory Corruption Vulnerability (medium 4.2)
- [CVE-2019-11969](https://insights.sbomify.com/CVE-2019-11969/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11968](https://insights.sbomify.com/CVE-2019-11968/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11967](https://insights.sbomify.com/CVE-2019-11967/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11966](https://insights.sbomify.com/CVE-2019-11966/): Privilege escalation in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11965](https://insights.sbomify.com/CVE-2019-11965/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11964](https://insights.sbomify.com/CVE-2019-11964/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11963](https://insights.sbomify.com/CVE-2019-11963/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11962](https://insights.sbomify.com/CVE-2019-11962/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11961](https://insights.sbomify.com/CVE-2019-11961/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11960](https://insights.sbomify.com/CVE-2019-11960/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-1196](https://insights.sbomify.com/CVE-2019-1196/): Chakra Scripting Engine Memory Corruption Vulnerability (medium 4.2)
- [CVE-2019-11959](https://insights.sbomify.com/CVE-2019-11959/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11958](https://insights.sbomify.com/CVE-2019-11958/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11957](https://insights.sbomify.com/CVE-2019-11957/): Memory corruption in HPE Intelligent Management Center (IMC) PLAT (high 8.1)
- [CVE-2019-11956](https://insights.sbomify.com/CVE-2019-11956/): Deserialization in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11955](https://insights.sbomify.com/CVE-2019-11955/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11954](https://insights.sbomify.com/CVE-2019-11954/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11953](https://insights.sbomify.com/CVE-2019-11953/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11952](https://insights.sbomify.com/CVE-2019-11952/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11951](https://insights.sbomify.com/CVE-2019-11951/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11950](https://insights.sbomify.com/CVE-2019-11950/): Deserialization in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-1195](https://insights.sbomify.com/CVE-2019-1195/): Chakra Scripting Engine Memory Corruption Vulnerability (medium 4.2)
- [CVE-2019-11949](https://insights.sbomify.com/CVE-2019-11949/): Code injection in HPE Intelligent Management Center (IMC) PLAT (critical 9.8)
- [CVE-2019-11948](https://insights.sbomify.com/CVE-2019-11948/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11947](https://insights.sbomify.com/CVE-2019-11947/): Hardcoded credentials in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11946](https://insights.sbomify.com/CVE-2019-11946/): Hardcoded credentials in HPE Intelligent Management Center (IMC) PLAT (medium 6.5)
- [CVE-2019-11945](https://insights.sbomify.com/CVE-2019-11945/): Deserialization in HPE Intelligent Management Center (IMC) PLAT (critical 9.8)
- [CVE-2019-11944](https://insights.sbomify.com/CVE-2019-11944/): Deserialization in HPE Intelligent Management Center (IMC) PLAT (critical 9.8)
- [CVE-2019-11943](https://insights.sbomify.com/CVE-2019-11943/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11942](https://insights.sbomify.com/CVE-2019-11942/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11941](https://insights.sbomify.com/CVE-2019-11941/): Other in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-11940](https://insights.sbomify.com/CVE-2019-11940/): Use after free in Proxygen (critical 9.8)
- [CVE-2019-1194](https://insights.sbomify.com/CVE-2019-1194/): Scripting Engine Memory Corruption Vulnerability (high 7.5)
- [CVE-2019-11939](https://insights.sbomify.com/CVE-2019-11939/): Golang Facebook Thrift servers vulnerable to denial of service (high 7.5)
- [CVE-2019-11938](https://insights.sbomify.com/CVE-2019-11938/): Denial of service in Facebook Thrift (high 7.5)
- [CVE-2019-11937](https://insights.sbomify.com/CVE-2019-11937/): Denial of service in Mcrouter (high 7.5)
- [CVE-2019-11936](https://insights.sbomify.com/CVE-2019-11936/): Other in HHVM (critical 9.8)
- [CVE-2019-11935](https://insights.sbomify.com/CVE-2019-11935/): Memory corruption in HHVM (critical 9.8)
- [CVE-2019-11934](https://insights.sbomify.com/CVE-2019-11934/): Memory corruption in folly (critical 9.8)
- [CVE-2019-11933](https://insights.sbomify.com/CVE-2019-11933/): Memory corruption in WhatsApp for Android (critical 9.8)
- [CVE-2019-11932](https://insights.sbomify.com/CVE-2019-11932/): android-gif-drawable Double Free vulnerability (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/135/