# Vulnerabilities published in 2019


- [CVE-2019-11593](https://insights.sbomify.com/CVE-2019-11593/): Code injection in adblockplus:adblock plus (high 8.1)
- [CVE-2019-11592](https://insights.sbomify.com/CVE-2019-11592/): Cross-site scripting in webidsupport:webid (medium 6.1)
- [CVE-2019-11591](https://insights.sbomify.com/CVE-2019-11591/): Cross-site request forgery in web-dorado:contact form (high 8.8)
- [CVE-2019-11590](https://insights.sbomify.com/CVE-2019-11590/): Cross-site request forgery in 10web:form maker (high 8.8)
- [CVE-2019-1159](https://insights.sbomify.com/CVE-2019-1159/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2019-11589](https://insights.sbomify.com/CVE-2019-11589/): Open redirect in Jira (medium 6.1)
- [CVE-2019-11588](https://insights.sbomify.com/CVE-2019-11588/): Cross-site request forgery in Jira (medium 4.3)
- [CVE-2019-11587](https://insights.sbomify.com/CVE-2019-11587/): Cross-site request forgery in Jira (medium 6.5)
- [CVE-2019-11586](https://insights.sbomify.com/CVE-2019-11586/): Cross-site request forgery in Jira (medium 4.3)
- [CVE-2019-11585](https://insights.sbomify.com/CVE-2019-11585/): Open redirect in Jira (medium 6.1)
- [CVE-2019-11584](https://insights.sbomify.com/CVE-2019-11584/): Cross-site scripting in Jira (medium 6.1)
- [CVE-2019-11583](https://insights.sbomify.com/CVE-2019-11583/): Denial of service in Jira (medium 6.5)
- [CVE-2019-11582](https://insights.sbomify.com/CVE-2019-11582/): Command injection in Sourcetree for Windows (high 8.8)
- [CVE-2019-11581](https://insights.sbomify.com/CVE-2019-11581/): Atlassian Jira Server and Data Center Server-Side Template Injection (critical 9.8, exploited in the wild)
- [CVE-2019-11580](https://insights.sbomify.com/CVE-2019-11580/): Atlassian Crowd and Crowd Data Center Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2019-1158](https://insights.sbomify.com/CVE-2019-1158/): Windows Graphics Component Information Disclosure Vulnerability (medium 5.5)
- [CVE-2019-11579](https://insights.sbomify.com/CVE-2019-11579/): Memory corruption in debian:debian linux (medium 5.3)
- [CVE-2019-11578](https://insights.sbomify.com/CVE-2019-11578/): Information disclosure in dhcpcd project:dhcpcd (medium 5.9)
- [CVE-2019-11577](https://insights.sbomify.com/CVE-2019-11577/): Memory corruption in dhcpcd project:dhcpcd (critical 9.8)
- [CVE-2019-11576](https://insights.sbomify.com/CVE-2019-11576/): Gitea Allows 1FA Even for 2FA-Enrolled Accounts (critical 9.8)
- [CVE-2019-11574](https://insights.sbomify.com/CVE-2019-11574/): Server-side request forgery in simplemachines:simple machine forum (critical 9.8)
- [CVE-2019-1157](https://insights.sbomify.com/CVE-2019-1157/): Jet Database Engine Remote Code Execution Vulnerability (high 7.8)
- [CVE-2019-11569](https://insights.sbomify.com/CVE-2019-11569/): Cross-site request forgery in veeam:one reporter (high 8.8)
- [CVE-2019-11568](https://insights.sbomify.com/CVE-2019-11568/): File upload in aikcms:aikcms (high 8.8)
- [CVE-2019-11567](https://insights.sbomify.com/CVE-2019-11567/): SQL injection in aikcms:aikcms (high 7.2)
- [CVE-2019-11565](https://insights.sbomify.com/CVE-2019-11565/): Server-side request forgery in print my blog project:print my blog (critical 9.8)
- [CVE-2019-11564](https://insights.sbomify.com/CVE-2019-11564/): Cross-site scripting in humhub:humhub (medium 6.1)
- [CVE-2019-11561](https://insights.sbomify.com/CVE-2019-11561/): Denial of service in chuango:a11 firmware (medium 5.9)
- [CVE-2019-11560](https://insights.sbomify.com/CVE-2019-11560/): Memory corruption in hisilicon:hi3516 firmware (critical 9.8)
- [CVE-2019-1156](https://insights.sbomify.com/CVE-2019-1156/): Jet Database Engine Remote Code Execution Vulnerability (high 7.8)
- [CVE-2019-11559](https://insights.sbomify.com/CVE-2019-11559/): Cross-site scripting in hrworks:hrworks (medium 6.1)
- [CVE-2019-11557](https://insights.sbomify.com/CVE-2019-11557/): Cross-site request forgery in web-dorado:wp form builder (high 8.8)
- [CVE-2019-11556](https://insights.sbomify.com/CVE-2019-11556/): Cross-site scripting in opensuse:backports sle (medium 6.1)
- [CVE-2019-11555](https://insights.sbomify.com/CVE-2019-11555/): Null dereference in w1.fi:hostapd (medium 5.9)
- [CVE-2019-11554](https://insights.sbomify.com/CVE-2019-11554/): Security feature bypass in amazon:audible (medium 5.9)
- [CVE-2019-11553](https://insights.sbomify.com/CVE-2019-11553/): Privilege escalation in code42:code42 (high 8.8)
- [CVE-2019-11552](https://insights.sbomify.com/CVE-2019-11552/): Code injection in code42:code42 for enterprise (high 7.0)
- [CVE-2019-11551](https://insights.sbomify.com/CVE-2019-11551/): Privilege escalation in code42:code42 for enterprise (medium 5.5)
- [CVE-2019-11550](https://insights.sbomify.com/CVE-2019-11550/): Security feature bypass in citrix:netscaler sd-wan (medium 5.9)
- [CVE-2019-1155](https://insights.sbomify.com/CVE-2019-1155/): Jet Database Engine Remote Code Execution Vulnerability (high 7.8)
- [CVE-2019-11549](https://insights.sbomify.com/CVE-2019-11549/): Information disclosure in gitlab:gitlab (medium 6.5)
- [CVE-2019-11548](https://insights.sbomify.com/CVE-2019-11548/): Missing authorization in gitlab:gitlab (medium 5.4)
- [CVE-2019-11547](https://insights.sbomify.com/CVE-2019-11547/): Cross-site scripting in gitlab:gitlab (medium 6.1)
- [CVE-2019-11546](https://insights.sbomify.com/CVE-2019-11546/): Race condition in gitlab:gitlab (medium 5.3)
- [CVE-2019-11545](https://insights.sbomify.com/CVE-2019-11545/): Information disclosure in gitlab:gitlab (medium 4.3)
- [CVE-2019-11544](https://insights.sbomify.com/CVE-2019-11544/): Information disclosure in gitlab:gitlab (medium 4.3)
- [CVE-2019-11543](https://insights.sbomify.com/CVE-2019-11543/): Cross-site scripting in ivanti:connect secure (high 8.3)
- [CVE-2019-11542](https://insights.sbomify.com/CVE-2019-11542/): Memory corruption in ivanti:connect secure (high 8.0)
- [CVE-2019-11541](https://insights.sbomify.com/CVE-2019-11541/): Information disclosure in ivanti:connect secure (high 8.3)
- [CVE-2019-11540](https://insights.sbomify.com/CVE-2019-11540/): Auth bypass in ivanti:connect secure (high 8.3)
- [CVE-2019-1154](https://insights.sbomify.com/CVE-2019-1154/): Windows Graphics Component Information Disclosure Vulnerability (medium 5.5)
- [CVE-2019-11539](https://insights.sbomify.com/CVE-2019-11539/): Ivanti Pulse Connect Secure and Policy Secure Command Injection (high 8.0, exploited in the wild)
- [CVE-2019-11538](https://insights.sbomify.com/CVE-2019-11538/): Path traversal in ivanti:connect secure (high 7.7)
- [CVE-2019-11537](https://insights.sbomify.com/CVE-2019-11537/): Cross-site scripting in enhancesoft:osticket (medium 6.1)
- [CVE-2019-11536](https://insights.sbomify.com/CVE-2019-11536/): Cross-site scripting in kalkitech:sync3000 firmware (critical 9.8)
- [CVE-2019-11535](https://insights.sbomify.com/CVE-2019-11535/): Command injection in linksys:re6300 firmware (critical 9.8)
- [CVE-2019-11533](https://insights.sbomify.com/CVE-2019-11533/): Cross-site scripting in projectsend:projectsend (medium 6.1)
- [CVE-2019-1153](https://insights.sbomify.com/CVE-2019-1153/): Microsoft Graphics Component Information Disclosure Vulnerability (medium 5.5)
- [CVE-2019-11528](https://insights.sbomify.com/CVE-2019-11528/): Misconfiguration in softing:uagate si firmware (high 7.5)
- [CVE-2019-11527](https://insights.sbomify.com/CVE-2019-11527/): Command injection in softing:uagate si firmware (high 8.8)
- [CVE-2019-11526](https://insights.sbomify.com/CVE-2019-11526/): Path traversal in softing:uagate si firmware (critical 9.8)
- [CVE-2019-11523](https://insights.sbomify.com/CVE-2019-11523/): Auth bypass in anviz:m3 firmware (critical 9.8)
- [CVE-2019-11522](https://insights.sbomify.com/CVE-2019-11522/): Cross-site scripting in open-xchange:open-xchange appsuite (medium 5.4)
- [CVE-2019-11521](https://insights.sbomify.com/CVE-2019-11521/): Other in open-xchange:open-xchange appsuite (high 8.1)
- [CVE-2019-1152](https://insights.sbomify.com/CVE-2019-1152/): Microsoft Graphics Remote Code Execution Vulnerability (high 8.8)
- [CVE-2019-11519](https://insights.sbomify.com/CVE-2019-11519/): XML external entity in nopcommerce:nopcommerce (medium 4.9)
- [CVE-2019-11518](https://insights.sbomify.com/CVE-2019-11518/): TODOtest (high 7.2)
- [CVE-2019-11517](https://insights.sbomify.com/CVE-2019-11517/): Cross-site request forgery in wampserver:wampserver (medium 6.5)
- [CVE-2019-11516](https://insights.sbomify.com/CVE-2019-11516/): Memory corruption in google:android (high 8.1)
- [CVE-2019-11515](https://insights.sbomify.com/CVE-2019-11515/): Path traversal in gilacms:gila cms (medium 4.9)
- [CVE-2019-11514](https://insights.sbomify.com/CVE-2019-11514/): Flarum mishandles invalidation of user email tokens (high 7.5)
- [CVE-2019-11513](https://insights.sbomify.com/CVE-2019-11513/): Cross-site scripting in cmsmadesimple:cms made simple (medium 4.8)
- [CVE-2019-11512](https://insights.sbomify.com/CVE-2019-11512/): Contao SQL injection in the file manager (critical 9.8)
- [CVE-2019-11511](https://insights.sbomify.com/CVE-2019-11511/): Cross-site scripting in zohocorp:manageengine adselfservice plus (medium 6.1)
- [CVE-2019-11510](https://insights.sbomify.com/CVE-2019-11510/): Ivanti Pulse Connect Secure Arbitrary File Read (critical 9.9, exploited in the wild)
- [CVE-2019-1151](https://insights.sbomify.com/CVE-2019-1151/): Microsoft Graphics Remote Code Execution Vulnerability (high 8.8)
- [CVE-2019-11509](https://insights.sbomify.com/CVE-2019-11509/): Missing authorization in ivanti:connect secure (high 8.8)
- [CVE-2019-11508](https://insights.sbomify.com/CVE-2019-11508/): Path traversal in ivanti:connect secure (high 8.6)
- [CVE-2019-11507](https://insights.sbomify.com/CVE-2019-11507/): Cross-site scripting in ivanti:connect secure (medium 5.8)
- [CVE-2019-11506](https://insights.sbomify.com/CVE-2019-11506/): Memory corruption in canonical:ubuntu linux (high 8.8)
- [CVE-2019-11505](https://insights.sbomify.com/CVE-2019-11505/): Memory corruption in canonical:ubuntu linux (high 8.8)
- [CVE-2019-11504](https://insights.sbomify.com/CVE-2019-11504/): Cross-site scripting in zotonic:zotonic (medium 4.8)
- [CVE-2019-11503](https://insights.sbomify.com/CVE-2019-11503/): Race condition in canonical:snapd (high 7.5)
- [CVE-2019-11502](https://insights.sbomify.com/CVE-2019-11502/): Misconfiguration in canonical:snapd (high 7.5)
- [CVE-2019-11500](https://insights.sbomify.com/CVE-2019-11500/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2019-1150](https://insights.sbomify.com/CVE-2019-1150/): Microsoft Graphics Remote Code Execution Vulnerability (high 8.8)
- [CVE-2019-11499](https://insights.sbomify.com/CVE-2019-11499/): Denial of service in dovecot:dovecot (high 7.5)
- [CVE-2019-11498](https://insights.sbomify.com/CVE-2019-11498/): Memory corruption in canonical:ubuntu linux (medium 6.5)
- [CVE-2019-11497](https://insights.sbomify.com/CVE-2019-11497/): Security feature bypass in couchbase:couchbase server (high 7.5)
- [CVE-2019-11496](https://insights.sbomify.com/CVE-2019-11496/): Missing authorization in couchbase:couchbase server (critical 9.1)
- [CVE-2019-11495](https://insights.sbomify.com/CVE-2019-11495/): Weak cryptography in couchbase:couchbase server (critical 9.8)
- [CVE-2019-11494](https://insights.sbomify.com/CVE-2019-11494/): Null dereference in dovecot:dovecot (high 7.5)
- [CVE-2019-11493](https://insights.sbomify.com/CVE-2019-11493/): Memory corruption in verypdf:verypdf (high 7.8)
- [CVE-2019-11492](https://insights.sbomify.com/CVE-2019-11492/): Information disclosure in projectsend:projectsend (high 7.5)
- [CVE-2019-11490](https://insights.sbomify.com/CVE-2019-11490/): Memory corruption in nmap:npcap (high 7.8)
- [CVE-2019-1149](https://insights.sbomify.com/CVE-2019-1149/): Microsoft Graphics Remote Code Execution Vulnerability (high 8.8)
- [CVE-2019-11489](https://insights.sbomify.com/CVE-2019-11489/): Privilege escalation in simplybook:simplybook (high 8.8)
- [CVE-2019-11488](https://insights.sbomify.com/CVE-2019-11488/): Auth bypass in simplybook:simplybook (high 8.1)
- [CVE-2019-11487](https://insights.sbomify.com/CVE-2019-11487/): Use after free in canonical:ubuntu linux (high 7.8)
- [CVE-2019-11486](https://insights.sbomify.com/CVE-2019-11486/): Race condition in debian:debian linux (high 7.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/139/