# Vulnerabilities published in 2019 - [CVE-2019-7712](https://insights.sbomify.com/CVE-2019-7712/): Information disclosure in n/a (high 7.5) - [CVE-2019-7711](https://insights.sbomify.com/CVE-2019-7711/): Information disclosure in n/a (high 7.5) - [CVE-2019-7704](https://insights.sbomify.com/CVE-2019-7704/): Denial of service in n/a (medium 6.5) - [CVE-2019-7703](https://insights.sbomify.com/CVE-2019-7703/): Use after free in n/a (medium 6.5) - [CVE-2019-7702](https://insights.sbomify.com/CVE-2019-7702/): Null dereference in n/a (medium 6.5) - [CVE-2019-7701](https://insights.sbomify.com/CVE-2019-7701/): Memory corruption in n/a (medium 6.5) - [CVE-2019-7700](https://insights.sbomify.com/CVE-2019-7700/): Memory corruption in n/a (medium 6.5) - [CVE-2019-7699](https://insights.sbomify.com/CVE-2019-7699/): Memory corruption in n/a (medium 6.5) - [CVE-2019-7698](https://insights.sbomify.com/CVE-2019-7698/): Denial of service in n/a (medium 6.5) - [CVE-2019-7697](https://insights.sbomify.com/CVE-2019-7697/): Denial of service in n/a (medium 6.5) - [CVE-2019-7693](https://insights.sbomify.com/CVE-2019-7693/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-7692](https://insights.sbomify.com/CVE-2019-7692/): Code injection in n/a (critical 9.8) - [CVE-2019-7690](https://insights.sbomify.com/CVE-2019-7690/): Information disclosure in n/a (critical 9.8) - [CVE-2019-7687](https://insights.sbomify.com/CVE-2019-7687/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-7684](https://insights.sbomify.com/CVE-2019-7684/): File upload in n/a (critical 9.8) - [CVE-2019-7678](https://insights.sbomify.com/CVE-2019-7678/): Path traversal in n/a (critical 9.8) - [CVE-2019-7677](https://insights.sbomify.com/CVE-2019-7677/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-7676](https://insights.sbomify.com/CVE-2019-7676/): Hardcoded credentials in n/a (high 7.2) - [CVE-2019-7675](https://insights.sbomify.com/CVE-2019-7675/): Information disclosure in n/a (high 7.5) - [CVE-2019-7674](https://insights.sbomify.com/CVE-2019-7674/): Weak cryptography in n/a (critical 9.8) - [CVE-2019-7673](https://insights.sbomify.com/CVE-2019-7673/): Weak cryptography in n/a (high 7.5) - [CVE-2019-7672](https://insights.sbomify.com/CVE-2019-7672/): Hardcoded credentials in n/a (high 8.8) - [CVE-2019-7671](https://insights.sbomify.com/CVE-2019-7671/): Cross-site scripting in n/a (critical 9.0) - [CVE-2019-7670](https://insights.sbomify.com/CVE-2019-7670/): Command injection in n/a (high 7.2) - [CVE-2019-7669](https://insights.sbomify.com/CVE-2019-7669/): File upload in n/a (high 8.8) - [CVE-2019-7668](https://insights.sbomify.com/CVE-2019-7668/): Hardcoded credentials in n/a (critical 9.8) - [CVE-2019-7667](https://insights.sbomify.com/CVE-2019-7667/): Information disclosure in n/a (critical 9.8) - [CVE-2019-7666](https://insights.sbomify.com/CVE-2019-7666/): Auth bypass in n/a (high 8.8) - [CVE-2019-7665](https://insights.sbomify.com/CVE-2019-7665/): Denial of service in n/a (medium 5.5) - [CVE-2019-7664](https://insights.sbomify.com/CVE-2019-7664/): Integer overflow in n/a (medium 5.5) - [CVE-2019-7663](https://insights.sbomify.com/CVE-2019-7663/): Null dereference in n/a (medium 6.5) - [CVE-2019-7662](https://insights.sbomify.com/CVE-2019-7662/): Denial of service in n/a (medium 6.5) - [CVE-2019-7661](https://insights.sbomify.com/CVE-2019-7661/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-7660](https://insights.sbomify.com/CVE-2019-7660/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-7659](https://insights.sbomify.com/CVE-2019-7659/): Memory corruption in n/a (high 8.1) - [CVE-2019-7656](https://insights.sbomify.com/CVE-2019-7656/): Privilege escalation in n/a (high 7.8) - [CVE-2019-7655](https://insights.sbomify.com/CVE-2019-7655/): Cross-site scripting in n/a (medium 5.4) - [CVE-2019-7654](https://insights.sbomify.com/CVE-2019-7654/): Cross-site request forgery in n/a (medium 6.5) - [CVE-2019-7653](https://insights.sbomify.com/CVE-2019-7653/): Code injection in n/a (critical 9.8) - [CVE-2019-7652](https://insights.sbomify.com/CVE-2019-7652/): Server-side request forgery in n/a (high 7.7) - [CVE-2019-7651](https://insights.sbomify.com/CVE-2019-7651/): Security feature bypass in n/a (high 7.5) - [CVE-2019-7649](https://insights.sbomify.com/CVE-2019-7649/): Weak cryptography in n/a (high 7.5) - [CVE-2019-7648](https://insights.sbomify.com/CVE-2019-7648/): Weak cryptography in n/a (high 7.5) - [CVE-2019-7646](https://insights.sbomify.com/CVE-2019-7646/): Cross-site scripting in n/a (medium 4.8) - [CVE-2019-7644](https://insights.sbomify.com/CVE-2019-7644/): Critical severity vulnerability that affects Auth0-WCF-Service-JWT (critical 9.8) - [CVE-2019-7642](https://insights.sbomify.com/CVE-2019-7642/): Missing authorization in n/a (high 7.5) - [CVE-2019-7639](https://insights.sbomify.com/CVE-2019-7639/): Auth bypass in n/a (high 8.1) - [CVE-2019-7638](https://insights.sbomify.com/CVE-2019-7638/): Memory corruption in n/a (high 8.8) - [CVE-2019-7637](https://insights.sbomify.com/CVE-2019-7637/): Memory corruption in n/a (high 8.8) - [CVE-2019-7636](https://insights.sbomify.com/CVE-2019-7636/): Memory corruption in n/a (high 8.1) - [CVE-2019-7635](https://insights.sbomify.com/CVE-2019-7635/): Memory corruption in n/a (high 8.1) - [CVE-2019-7634](https://insights.sbomify.com/CVE-2019-7634/): Cross-site scripting in n/a (medium 5.4) - [CVE-2019-7632](https://insights.sbomify.com/CVE-2019-7632/): Command injection in n/a (high 8.8) - [CVE-2019-7630](https://insights.sbomify.com/CVE-2019-7630/): Privilege escalation in n/a (high 7.2) - [CVE-2019-7629](https://insights.sbomify.com/CVE-2019-7629/): Memory corruption in n/a (critical 9.8) - [CVE-2019-7628](https://insights.sbomify.com/CVE-2019-7628/): Information disclosure in n/a (medium 5.9) - [CVE-2019-7621](https://insights.sbomify.com/CVE-2019-7621/): Cross-site scripting in Kibana (medium 5.4) - [CVE-2019-7620](https://insights.sbomify.com/CVE-2019-7620/): Denial of service in Logstash (high 7.5) - [CVE-2019-7619](https://insights.sbomify.com/CVE-2019-7619/): Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch (medium 5.3) - [CVE-2019-7618](https://insights.sbomify.com/CVE-2019-7618/): Path traversal in Elastic Code (medium 6.5) - [CVE-2019-7617](https://insights.sbomify.com/CVE-2019-7617/): Elastic APM agent for Python client CGI proxy redirection flaw (high 7.2) - [CVE-2019-7616](https://insights.sbomify.com/CVE-2019-7616/): Server-side request forgery in Kibana (medium 4.9) - [CVE-2019-7615](https://insights.sbomify.com/CVE-2019-7615/): Elastic APM agent for Ruby vulnerable to Improper Certificate Validation (high 7.4) - [CVE-2019-7614](https://insights.sbomify.com/CVE-2019-7614/): Concurrent Execution using Shared Resource with Improper Synchronization in Elasticsearch (medium 5.9) - [CVE-2019-7613](https://insights.sbomify.com/CVE-2019-7613/): Winlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw. (high 7.5) - [CVE-2019-7612](https://insights.sbomify.com/CVE-2019-7612/): Information disclosure in Logstash (critical 9.8) - [CVE-2019-7611](https://insights.sbomify.com/CVE-2019-7611/): Improper Access Control in Elasticsearch (high 8.1) - [CVE-2019-7610](https://insights.sbomify.com/CVE-2019-7610/): Code injection in Kibana (critical 9.0) - [CVE-2019-7609](https://insights.sbomify.com/CVE-2019-7609/): Kibana Arbitrary Code Execution (critical 9.8, exploited in the wild) - [CVE-2019-7608](https://insights.sbomify.com/CVE-2019-7608/): Cross-site scripting in Kibana (medium 6.1) - [CVE-2019-7594](https://insights.sbomify.com/CVE-2019-7594/): Metasys use of hardcoded RC2 key (medium 6.8) - [CVE-2019-7593](https://insights.sbomify.com/CVE-2019-7593/): Metasys use of shared RSA key pairs (medium 6.8) - [CVE-2019-7590](https://insights.sbomify.com/CVE-2019-7590/): exacqVision Server Unquoted Service Path (medium 6.7) - [CVE-2019-7589](https://insights.sbomify.com/CVE-2019-7589/): Kantech EntraPass Improper Input Validation (critical 9.8) - [CVE-2019-7588](https://insights.sbomify.com/CVE-2019-7588/): exacqVision Enterprise System Manager (ESM) privilege escalation (medium 6.7) - [CVE-2019-7587](https://insights.sbomify.com/CVE-2019-7587/): SQL injection in n/a (critical 9.8) - [CVE-2019-7585](https://insights.sbomify.com/CVE-2019-7585/): SQL injection in n/a (critical 9.8) - [CVE-2019-7582](https://insights.sbomify.com/CVE-2019-7582/): Denial of service in n/a (high 8.8) - [CVE-2019-7581](https://insights.sbomify.com/CVE-2019-7581/): Denial of service in n/a (high 8.8) - [CVE-2019-7580](https://insights.sbomify.com/CVE-2019-7580/): Code injection in n/a (high 8.8) - [CVE-2019-7579](https://insights.sbomify.com/CVE-2019-7579/): Information disclosure in n/a (high 7.5) - [CVE-2019-7578](https://insights.sbomify.com/CVE-2019-7578/): Memory corruption in n/a (high 8.1) - [CVE-2019-7577](https://insights.sbomify.com/CVE-2019-7577/): Memory corruption in n/a (high 8.8) - [CVE-2019-7576](https://insights.sbomify.com/CVE-2019-7576/): Memory corruption in n/a (high 8.8) - [CVE-2019-7575](https://insights.sbomify.com/CVE-2019-7575/): Memory corruption in n/a (high 8.8) - [CVE-2019-7574](https://insights.sbomify.com/CVE-2019-7574/): Memory corruption in n/a (high 8.8) - [CVE-2019-7573](https://insights.sbomify.com/CVE-2019-7573/): Memory corruption in n/a (high 8.8) - [CVE-2019-7572](https://insights.sbomify.com/CVE-2019-7572/): Memory corruption in n/a (high 8.8) - [CVE-2019-7570](https://insights.sbomify.com/CVE-2019-7570/): Cross-site request forgery in n/a (medium 6.5) - [CVE-2019-7569](https://insights.sbomify.com/CVE-2019-7569/): Cross-site request forgery in n/a (high 8.8) - [CVE-2019-7568](https://insights.sbomify.com/CVE-2019-7568/): SQL injection in n/a (critical 9.8) - [CVE-2019-7567](https://insights.sbomify.com/CVE-2019-7567/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-7566](https://insights.sbomify.com/CVE-2019-7566/): Cross-site request forgery in n/a (high 8.8) - [CVE-2019-7564](https://insights.sbomify.com/CVE-2019-7564/): Missing authorization in n/a (critical 9.8) - [CVE-2019-7560](https://insights.sbomify.com/CVE-2019-7560/): Boolector use after free (medium 5.5) - [CVE-2019-7559](https://insights.sbomify.com/CVE-2019-7559/): Memory corruption in n/a (medium 5.5) - [CVE-2019-7554](https://insights.sbomify.com/CVE-2019-7554/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-7553](https://insights.sbomify.com/CVE-2019-7553/): Cross-site scripting in n/a (medium 5.4) - [CVE-2019-7552](https://insights.sbomify.com/CVE-2019-7552/): Cross-site scripting in n/a (medium 5.4) - [CVE-2019-7551](https://insights.sbomify.com/CVE-2019-7551/): Cross-site scripting in n/a (critical 9.0) --- From sbomify Insights: https://insights.sbomify.com/years/2019/page/22/