# Vulnerabilities published in 2019


- [CVE-2019-11697](https://insights.sbomify.com/CVE-2019-11697/): Security feature bypass in Firefox (medium 6.5)
- [CVE-2019-11696](https://insights.sbomify.com/CVE-2019-11696/): Security feature bypass in Firefox (high 7.8)
- [CVE-2019-11695](https://insights.sbomify.com/CVE-2019-11695/): Security feature bypass in Firefox (medium 4.3)
- [CVE-2019-11694](https://insights.sbomify.com/CVE-2019-11694/): Information disclosure in Firefox (high 7.5)
- [CVE-2019-11693](https://insights.sbomify.com/CVE-2019-11693/): Memory corruption in Firefox (critical 9.8)
- [CVE-2019-11692](https://insights.sbomify.com/CVE-2019-11692/): Use after free in Firefox (critical 9.8)
- [CVE-2019-11691](https://insights.sbomify.com/CVE-2019-11691/): Use after free in Firefox (critical 9.8)
- [CVE-2019-11690](https://insights.sbomify.com/CVE-2019-11690/): Weak cryptography in denx:u-boot (medium 5.9)
- [CVE-2019-1169](https://insights.sbomify.com/CVE-2019-1169/): Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2019-11689](https://insights.sbomify.com/CVE-2019-11689/): Command injection in asustor:exfat driver (high 8.1)
- [CVE-2019-11688](https://insights.sbomify.com/CVE-2019-11688/): Security feature bypass in asustor:exfat driver (high 7.4)
- [CVE-2019-11687](https://insights.sbomify.com/CVE-2019-11687/): Other in nema:dicom standard (high 7.8)
- [CVE-2019-11686](https://insights.sbomify.com/CVE-2019-11686/): Information disclosure in westerndigital:sandisk x300 sd7sb6s-128g firmware (medium 5.5)
- [CVE-2019-11684](https://insights.sbomify.com/CVE-2019-11684/): Improper Access Control in Bosch Video Recording Manager (critical 9.9)
- [CVE-2019-11683](https://insights.sbomify.com/CVE-2019-11683/): Memory corruption in canonical:ubuntu linux (critical 9.8)
- [CVE-2019-11682](https://insights.sbomify.com/CVE-2019-11682/): Memory corruption in tabslab:mailcarrier (critical 9.8)
- [CVE-2019-11680](https://insights.sbomify.com/CVE-2019-11680/): File upload in konakart:konakart (critical 9.8)
- [CVE-2019-1168](https://insights.sbomify.com/CVE-2019-1168/): Microsoft Windows p2pimsvc Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2019-11678](https://insights.sbomify.com/CVE-2019-11678/): SQL injection in zohocorp:manageengine firewall analyzer (critical 9.8)
- [CVE-2019-11677](https://insights.sbomify.com/CVE-2019-11677/): XML external entity in zohocorp:manageengine firewall analyzer (critical 9.8)
- [CVE-2019-11676](https://insights.sbomify.com/CVE-2019-11676/): Cross-site scripting in zohocorp:manageengine firewall analyzer (medium 6.1)
- [CVE-2019-11675](https://insights.sbomify.com/CVE-2019-11675/): Race condition in groonga:groonga-httpd (high 7.0)
- [CVE-2019-11674](https://insights.sbomify.com/CVE-2019-11674/): Security feature bypass in Self Service Password Reset (SSPR) versions prior to 4.4.0.4 (medium 5.9)
- [CVE-2019-1167](https://insights.sbomify.com/CVE-2019-1167/): System.Management.Automation subject to bypass via script debugging (medium 4.1)
- [CVE-2019-11669](https://insights.sbomify.com/CVE-2019-11669/): Business logic in Service Manager (high 7.5)
- [CVE-2019-11668](https://insights.sbomify.com/CVE-2019-11668/): Other in Service Manager, Service Manager – Chat Service. Server Manager – Chat Service. (high 7.5)
- [CVE-2019-11667](https://insights.sbomify.com/CVE-2019-11667/): Missing authorization in Service Manager (high 7.5)
- [CVE-2019-11666](https://insights.sbomify.com/CVE-2019-11666/): Deserialization in Service Manager (high 8.8)
- [CVE-2019-11665](https://insights.sbomify.com/CVE-2019-11665/): Information disclosure in Service Manager (high 7.5)
- [CVE-2019-11664](https://insights.sbomify.com/CVE-2019-11664/): Information disclosure in Service Manager (medium 6.5)
- [CVE-2019-11663](https://insights.sbomify.com/CVE-2019-11663/): Information disclosure in Service Manager (medium 6.5)
- [CVE-2019-11662](https://insights.sbomify.com/CVE-2019-11662/): Information disclosure in Service Manager (medium 4.3)
- [CVE-2019-11661](https://insights.sbomify.com/CVE-2019-11661/): Missing authorization in Service Manager (high 8.3)
- [CVE-2019-11660](https://insights.sbomify.com/CVE-2019-11660/): Privilege escalation in Data Protector (high 7.8)
- [CVE-2019-1166](https://insights.sbomify.com/CVE-2019-1166/): Security feature bypass in Windows (medium 5.9)
- [CVE-2019-11658](https://insights.sbomify.com/CVE-2019-11658/): Information disclosure in Content Manager (medium 4.3)
- [CVE-2019-11657](https://insights.sbomify.com/CVE-2019-11657/): Cross-site request forgery in ArcSight Logger (high 8.8)
- [CVE-2019-11656](https://insights.sbomify.com/CVE-2019-11656/): Cross-site scripting in ArcSight Logger. (medium 5.4)
- [CVE-2019-11655](https://insights.sbomify.com/CVE-2019-11655/): File upload in ArcSight Logger. (high 8.8)
- [CVE-2019-11654](https://insights.sbomify.com/CVE-2019-11654/): A path traversal vulnerability has been identified in Verastream Host Integrator (high 8.6)
- [CVE-2019-11653](https://insights.sbomify.com/CVE-2019-11653/): Auth bypass in Content Manager (medium 5.4)
- [CVE-2019-11652](https://insights.sbomify.com/CVE-2019-11652/): Auth bypass in Self Service Password Reset (SSPR) (critical 9.8)
- [CVE-2019-11651](https://insights.sbomify.com/CVE-2019-11651/): Cross-site scripting in Micro Focus Enterprise Developer and Enterprise Server (medium 6.1)
- [CVE-2019-11650](https://insights.sbomify.com/CVE-2019-11650/): Other in NetIQ Advanced Authentication Framework (medium 5.9)
- [CVE-2019-11649](https://insights.sbomify.com/CVE-2019-11649/): KM03461174 Micro Focus Fortify Software Security Center Server, CVE-2019-11649 (medium 5.4)
- [CVE-2019-11648](https://insights.sbomify.com/CVE-2019-11648/): Information disclosure in Micro Focus NetIQ Self Service Password Reset. (high 7.5)
- [CVE-2019-11647](https://insights.sbomify.com/CVE-2019-11647/): Cross-site scripting in Micro Focus NetIQ Self Service Password Reset. (medium 6.1)
- [CVE-2019-11646](https://insights.sbomify.com/CVE-2019-11646/): Other in Micro Focus Service Manager (high 8.8)
- [CVE-2019-11644](https://insights.sbomify.com/CVE-2019-11644/): Privilege escalation in f-secure:client security (high 7.8)
- [CVE-2019-11643](https://insights.sbomify.com/CVE-2019-11643/): Cross-site scripting in oneshield:oneshield policy (medium 6.1)
- [CVE-2019-11642](https://insights.sbomify.com/CVE-2019-11642/): Code injection in oneshield:oneshield policy (high 8.8)
- [CVE-2019-11641](https://insights.sbomify.com/CVE-2019-11641/): Information disclosure in anomali:agave (high 7.5)
- [CVE-2019-11640](https://insights.sbomify.com/CVE-2019-11640/): Memory corruption in gnu:recutils (high 8.8)
- [CVE-2019-1164](https://insights.sbomify.com/CVE-2019-1164/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2019-11639](https://insights.sbomify.com/CVE-2019-11639/): Memory corruption in gnu:recutils (high 8.8)
- [CVE-2019-11638](https://insights.sbomify.com/CVE-2019-11638/): Null dereference in gnu:recutils (medium 6.5)
- [CVE-2019-11637](https://insights.sbomify.com/CVE-2019-11637/): Null dereference in gnu:recutils (medium 6.5)
- [CVE-2019-11636](https://insights.sbomify.com/CVE-2019-11636/): Business logic in z.cash:zcash (high 7.5)
- [CVE-2019-11634](https://insights.sbomify.com/CVE-2019-11634/): Citrix Workspace Application and Receiver for Windows Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2019-11633](https://insights.sbomify.com/CVE-2019-11633/): Information disclosure in honeypress project:honeypress (high 7.5)
- [CVE-2019-11632](https://insights.sbomify.com/CVE-2019-11632/): Missing authorization in octopus:octopus deploy (high 8.1)
- [CVE-2019-1163](https://insights.sbomify.com/CVE-2019-1163/): Windows File Signature Security Feature Bypass Vulnerability (medium 5.5)
- [CVE-2019-11629](https://insights.sbomify.com/CVE-2019-11629/): Cross-site scripting in sonatype:nexus repository manager (medium 6.1)
- [CVE-2019-11628](https://insights.sbomify.com/CVE-2019-11628/): Server-side request forgery in qlik:qlik analytics (high 8.2)
- [CVE-2019-11627](https://insights.sbomify.com/CVE-2019-11627/): Command injection in debian:debian linux (critical 9.8)
- [CVE-2019-11626](https://insights.sbomify.com/CVE-2019-11626/): Information disclosure in doorgets:doorgets cms (medium 5.3)
- [CVE-2019-11625](https://insights.sbomify.com/CVE-2019-11625/): SQL injection in doorgets:doorgets cms (medium 4.9)
- [CVE-2019-11624](https://insights.sbomify.com/CVE-2019-11624/): Path traversal in doorgets:doorgets cms (medium 4.9)
- [CVE-2019-11623](https://insights.sbomify.com/CVE-2019-11623/): SQL injection in doorgets:doorgets cms (medium 4.9)
- [CVE-2019-11622](https://insights.sbomify.com/CVE-2019-11622/): SQL injection in doorgets:doorgets cms (medium 4.9)
- [CVE-2019-11621](https://insights.sbomify.com/CVE-2019-11621/): SQL injection in doorgets:doorgets cms (medium 4.9)
- [CVE-2019-11620](https://insights.sbomify.com/CVE-2019-11620/): SQL injection in doorgets:doorgets cms (medium 4.9)
- [CVE-2019-1162](https://insights.sbomify.com/CVE-2019-1162/): Windows ALPC Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2019-11619](https://insights.sbomify.com/CVE-2019-11619/): SQL injection in doorgets:doorgets cms (medium 4.9)
- [CVE-2019-11618](https://insights.sbomify.com/CVE-2019-11618/): Hardcoded credentials in doorgets:doorgets cms (critical 9.8)
- [CVE-2019-11617](https://insights.sbomify.com/CVE-2019-11617/): Cross-site request forgery in doorgets:doorgets cms (high 8.8)
- [CVE-2019-11616](https://insights.sbomify.com/CVE-2019-11616/): Information disclosure in doorgets:doorgets cms (critical 9.8)
- [CVE-2019-11615](https://insights.sbomify.com/CVE-2019-11615/): File upload in doorgets:doorgets cms (high 8.8)
- [CVE-2019-11614](https://insights.sbomify.com/CVE-2019-11614/): SQL injection in doorgets:doorgets cms (high 7.5)
- [CVE-2019-11613](https://insights.sbomify.com/CVE-2019-11613/): SQL injection in doorgets:doorgets cms (medium 6.5)
- [CVE-2019-11612](https://insights.sbomify.com/CVE-2019-11612/): Path traversal in doorgets:doorgets cms (high 7.5)
- [CVE-2019-11611](https://insights.sbomify.com/CVE-2019-11611/): Information disclosure in doorgets:doorgets cms (high 7.5)
- [CVE-2019-11610](https://insights.sbomify.com/CVE-2019-11610/): Information disclosure in doorgets:doorgets cms (high 7.5)
- [CVE-2019-1161](https://insights.sbomify.com/CVE-2019-1161/): Microsoft Defender Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2019-11609](https://insights.sbomify.com/CVE-2019-11609/): Path traversal in doorgets:doorgets cms (high 8.2)
- [CVE-2019-11608](https://insights.sbomify.com/CVE-2019-11608/): Path traversal in doorgets:doorgets cms (high 8.2)
- [CVE-2019-11607](https://insights.sbomify.com/CVE-2019-11607/): Information disclosure in doorgets:doorgets cms (high 7.5)
- [CVE-2019-11606](https://insights.sbomify.com/CVE-2019-11606/): Information disclosure in doorgets:doorgets cms (high 7.5)
- [CVE-2019-11605](https://insights.sbomify.com/CVE-2019-11605/): Information disclosure in gitlab:gitlab (high 7.5)
- [CVE-2019-11604](https://insights.sbomify.com/CVE-2019-11604/): Cross-site scripting in quest:kace systems management appliance (medium 6.1)
- [CVE-2019-11603](https://insights.sbomify.com/CVE-2019-11603/): Path traversal in ProSyst mBS SDK and Bosch IoT Gateway Software (high 7.5)
- [CVE-2019-11602](https://insights.sbomify.com/CVE-2019-11602/): Leakage of stack traces in the backup & restore functionality of ProSyst mBS SDK and Bosch IoT Gateway Software (medium 5.3)
- [CVE-2019-11601](https://insights.sbomify.com/CVE-2019-11601/): Path traversal in the backup & restore functionality of ProSyst mBS SDK and Bosch IoT Gateway Software (critical 9.1)
- [CVE-2019-11600](https://insights.sbomify.com/CVE-2019-11600/): SQL injection in openproject:openproject (high 8.1)
- [CVE-2019-11599](https://insights.sbomify.com/CVE-2019-11599/): Race condition in linux:linux kernel (high 7.0)
- [CVE-2019-11598](https://insights.sbomify.com/CVE-2019-11598/): Memory corruption in imagemagick:imagemagick (high 8.1)
- [CVE-2019-11597](https://insights.sbomify.com/CVE-2019-11597/): Memory corruption in imagemagick:imagemagick (high 8.1)
- [CVE-2019-11596](https://insights.sbomify.com/CVE-2019-11596/): Null dereference in canonical:ubuntu linux (high 7.5)
- [CVE-2019-11595](https://insights.sbomify.com/CVE-2019-11595/): Code injection in ublockorigin:ublock origin (critical 9.0)
- [CVE-2019-11594](https://insights.sbomify.com/CVE-2019-11594/): Code injection in getadblock:adblock (high 8.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/138/