# Vulnerabilities published in 2019


- [CVE-2019-7236](https://insights.sbomify.com/CVE-2019-7236/): Path traversal in n/a (high 7.5)
- [CVE-2019-7235](https://insights.sbomify.com/CVE-2019-7235/): Path traversal in n/a (high 7.5)
- [CVE-2019-7234](https://insights.sbomify.com/CVE-2019-7234/): Path traversal in n/a (critical 9.1)
- [CVE-2019-7233](https://insights.sbomify.com/CVE-2019-7233/): Null dereference in n/a (high 8.8)
- [CVE-2019-7232](https://insights.sbomify.com/CVE-2019-7232/): Memory corruption in n/a (high 8.8)
- [CVE-2019-7231](https://insights.sbomify.com/CVE-2019-7231/): Memory corruption in n/a (medium 5.7)
- [CVE-2019-7230](https://insights.sbomify.com/CVE-2019-7230/): Other in n/a (high 8.8)
- [CVE-2019-7229](https://insights.sbomify.com/CVE-2019-7229/): Supply chain in n/a (high 8.3)
- [CVE-2019-7228](https://insights.sbomify.com/CVE-2019-7228/): Other in n/a (high 8.8)
- [CVE-2019-7227](https://insights.sbomify.com/CVE-2019-7227/): Path traversal in n/a (high 7.3)
- [CVE-2019-7226](https://insights.sbomify.com/CVE-2019-7226/): Auth bypass in n/a (high 8.8)
- [CVE-2019-7225](https://insights.sbomify.com/CVE-2019-7225/): Hardcoded credentials in n/a (high 8.8)
- [CVE-2019-7223](https://insights.sbomify.com/CVE-2019-7223/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2019-7222](https://insights.sbomify.com/CVE-2019-7222/): Information disclosure in n/a (medium 5.5)
- [CVE-2019-7221](https://insights.sbomify.com/CVE-2019-7221/): Use after free in n/a (high 7.8)
- [CVE-2019-7220](https://insights.sbomify.com/CVE-2019-7220/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7219](https://insights.sbomify.com/CVE-2019-7219/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7218](https://insights.sbomify.com/CVE-2019-7218/): Auth bypass in n/a (medium 5.9)
- [CVE-2019-7217](https://insights.sbomify.com/CVE-2019-7217/): Information disclosure in n/a (high 7.5)
- [CVE-2019-7216](https://insights.sbomify.com/CVE-2019-7216/): File upload in n/a (high 7.8)
- [CVE-2019-7215](https://insights.sbomify.com/CVE-2019-7215/): Security feature bypass in n/a (medium 6.5)
- [CVE-2019-7214](https://insights.sbomify.com/CVE-2019-7214/): Deserialization in n/a (critical 9.8)
- [CVE-2019-7213](https://insights.sbomify.com/CVE-2019-7213/): Path traversal in n/a (medium 6.5)
- [CVE-2019-7212](https://insights.sbomify.com/CVE-2019-7212/): Hardcoded credentials in n/a (high 8.2)
- [CVE-2019-7211](https://insights.sbomify.com/CVE-2019-7211/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7201](https://insights.sbomify.com/CVE-2019-7201/): Privilege escalation in QNAP NetBak Replicator (high 7.8)
- [CVE-2019-7198](https://insights.sbomify.com/CVE-2019-7198/): Command Injection Vulnerability in QTS and QuTS hero (critical 9.8)
- [CVE-2019-7197](https://insights.sbomify.com/CVE-2019-7197/): Cross-site scripting in QNAP NAS devices (medium 4.8)
- [CVE-2019-7195](https://insights.sbomify.com/CVE-2019-7195/): QNAP Photo Station Path Traversal (critical 9.8, exploited in the wild)
- [CVE-2019-7194](https://insights.sbomify.com/CVE-2019-7194/): QNAP Photo Station Path Traversal (critical 9.8, exploited in the wild)
- [CVE-2019-7193](https://insights.sbomify.com/CVE-2019-7193/): QNAP QTS Improper Input Validation (critical 9.8, exploited in the wild)
- [CVE-2019-7192](https://insights.sbomify.com/CVE-2019-7192/): QNAP Photo Station Improper Access Control (critical 9.8, exploited in the wild)
- [CVE-2019-7185](https://insights.sbomify.com/CVE-2019-7185/): Cross-site scripting in QNAP NAS devices running Music Station (medium 4.8)
- [CVE-2019-7184](https://insights.sbomify.com/CVE-2019-7184/): Cross-site scripting in QNAP NAS devices running Video Station (medium 4.8)
- [CVE-2019-7183](https://insights.sbomify.com/CVE-2019-7183/): Path traversal in QNAP NAS devices (critical 9.8)
- [CVE-2019-7181](https://insights.sbomify.com/CVE-2019-7181/): Memory corruption in myQNAPcloud Connect (high 7.5)
- [CVE-2019-7178](https://insights.sbomify.com/CVE-2019-7178/): Privilege escalation in n/a (high 7.2)
- [CVE-2019-7177](https://insights.sbomify.com/CVE-2019-7177/): Code injection in n/a (high 7.2)
- [CVE-2019-7176](https://insights.sbomify.com/CVE-2019-7176/): Missing authorization in n/a (low 3.7)
- [CVE-2019-7175](https://insights.sbomify.com/CVE-2019-7175/): Denial of service in n/a (high 7.5)
- [CVE-2019-7174](https://insights.sbomify.com/CVE-2019-7174/): Missing authorization in n/a (critical 9.8)
- [CVE-2019-7173](https://insights.sbomify.com/CVE-2019-7173/): Croogo vulnerable to Cross-site Scripting in title field (medium 4.8)
- [CVE-2019-7172](https://insights.sbomify.com/CVE-2019-7172/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-7171](https://insights.sbomify.com/CVE-2019-7171/): Croogo vulnerable to XSS in title field (medium 4.8)
- [CVE-2019-7170](https://insights.sbomify.com/CVE-2019-7170/): Croogo vulnerable to XSS in title field (medium 4.8)
- [CVE-2019-7169](https://insights.sbomify.com/CVE-2019-7169/): Croogo vulnerable to XSS in title field (medium 4.8)
- [CVE-2019-7168](https://insights.sbomify.com/CVE-2019-7168/): Croogo vulnerable to XSS in Blog field (medium 4.8)
- [CVE-2019-7167](https://insights.sbomify.com/CVE-2019-7167/): Other in n/a (high 7.5)
- [CVE-2019-7165](https://insights.sbomify.com/CVE-2019-7165/): Memory corruption in n/a (critical 9.8)
- [CVE-2019-7164](https://insights.sbomify.com/CVE-2019-7164/): SQLAlchemy vulnerable to SQL Injection via order_by parameter (critical 9.8)
- [CVE-2019-7163](https://insights.sbomify.com/CVE-2019-7163/): Auth bypass in n/a (critical 9.8)
- [CVE-2019-7162](https://insights.sbomify.com/CVE-2019-7162/): Information disclosure in n/a (critical 9.1)
- [CVE-2019-7161](https://insights.sbomify.com/CVE-2019-7161/): Hardcoded credentials in n/a (high 7.5)
- [CVE-2019-7160](https://insights.sbomify.com/CVE-2019-7160/): Path traversal in n/a (critical 9.8)
- [CVE-2019-7159](https://insights.sbomify.com/CVE-2019-7159/): Information disclosure in n/a (high 7.5)
- [CVE-2019-7158](https://insights.sbomify.com/CVE-2019-7158/): Missing authorization in n/a (critical 9.8)
- [CVE-2019-7156](https://insights.sbomify.com/CVE-2019-7156/): Denial of service in n/a (medium 6.5)
- [CVE-2019-7155](https://insights.sbomify.com/CVE-2019-7155/): Missing authorization in n/a (medium 6.5)
- [CVE-2019-7154](https://insights.sbomify.com/CVE-2019-7154/): Memory corruption in n/a (medium 6.5)
- [CVE-2019-7153](https://insights.sbomify.com/CVE-2019-7153/): Null dereference in n/a (medium 6.5)
- [CVE-2019-7152](https://insights.sbomify.com/CVE-2019-7152/): Memory corruption in n/a (medium 6.5)
- [CVE-2019-7151](https://insights.sbomify.com/CVE-2019-7151/): Null dereference in n/a (medium 6.5)
- [CVE-2019-7150](https://insights.sbomify.com/CVE-2019-7150/): Denial of service in n/a (medium 5.5)
- [CVE-2019-7149](https://insights.sbomify.com/CVE-2019-7149/): Memory corruption in n/a (medium 6.5)
- [CVE-2019-7148](https://insights.sbomify.com/CVE-2019-7148/): Denial of service in n/a (medium 6.5)
- [CVE-2019-7147](https://insights.sbomify.com/CVE-2019-7147/): Memory corruption in n/a (medium 5.5)
- [CVE-2019-7146](https://insights.sbomify.com/CVE-2019-7146/): Memory corruption in n/a (medium 5.5)
- [CVE-2019-7145](https://insights.sbomify.com/CVE-2019-7145/): Information disclosure in Adobe Acrobat and Reader (medium 6.5)
- [CVE-2019-7144](https://insights.sbomify.com/CVE-2019-7144/): Information disclosure in Adobe Acrobat and Reader (medium 6.5)
- [CVE-2019-7143](https://insights.sbomify.com/CVE-2019-7143/): Information disclosure in Adobe Acrobat and Reader (high 8.8)
- [CVE-2019-7142](https://insights.sbomify.com/CVE-2019-7142/): Information disclosure in Adobe Acrobat and Reader (high 7.5)
- [CVE-2019-7141](https://insights.sbomify.com/CVE-2019-7141/): Information disclosure in Adobe Acrobat and Reader (medium 6.5)
- [CVE-2019-7140](https://insights.sbomify.com/CVE-2019-7140/): Information disclosure in Adobe Acrobat and Reader (medium 6.5)
- [CVE-2019-7139](https://insights.sbomify.com/CVE-2019-7139/): Magento 2 Community Edition SQLi Vulnerability (critical 9.8)
- [CVE-2019-7138](https://insights.sbomify.com/CVE-2019-7138/): Information disclosure in Adobe Bridge CC (medium 6.5)
- [CVE-2019-7137](https://insights.sbomify.com/CVE-2019-7137/): Memory corruption in Adobe Bridge CC (medium 6.5)
- [CVE-2019-7136](https://insights.sbomify.com/CVE-2019-7136/): Use after free in Adobe Bridge CC (medium 6.5)
- [CVE-2019-7135](https://insights.sbomify.com/CVE-2019-7135/): Information disclosure in Adobe Bridge CC (medium 6.5)
- [CVE-2019-7134](https://insights.sbomify.com/CVE-2019-7134/): Information disclosure in Adobe Bridge CC (medium 6.5)
- [CVE-2019-7133](https://insights.sbomify.com/CVE-2019-7133/): Information disclosure in Adobe Bridge CC (medium 6.5)
- [CVE-2019-7132](https://insights.sbomify.com/CVE-2019-7132/): Memory corruption in Adobe Bridge CC (high 8.8)
- [CVE-2019-7131](https://insights.sbomify.com/CVE-2019-7131/): Memory corruption in Adobe Acrobat and Reader (critical 9.8)
- [CVE-2019-7130](https://insights.sbomify.com/CVE-2019-7130/): Memory corruption in Adobe Bridge CC (critical 9.8)
- [CVE-2019-7129](https://insights.sbomify.com/CVE-2019-7129/): Cross-site scripting in Adobe Experience Manager Forms (medium 6.1)
- [CVE-2019-7128](https://insights.sbomify.com/CVE-2019-7128/): Memory corruption in Adobe Acrobat and Reader (critical 9.8)
- [CVE-2019-7127](https://insights.sbomify.com/CVE-2019-7127/): Information disclosure in Adobe Acrobat and Reader (medium 6.5)
- [CVE-2019-7125](https://insights.sbomify.com/CVE-2019-7125/): Memory corruption in Adobe Acrobat and Reader (high 8.8)
- [CVE-2019-7124](https://insights.sbomify.com/CVE-2019-7124/): Memory corruption in Adobe Acrobat and Reader (critical 9.8)
- [CVE-2019-7123](https://insights.sbomify.com/CVE-2019-7123/): Information disclosure in Adobe Acrobat and Reader (high 7.5)
- [CVE-2019-7122](https://insights.sbomify.com/CVE-2019-7122/): Information disclosure in Adobe Acrobat and Reader (high 7.5)
- [CVE-2019-7121](https://insights.sbomify.com/CVE-2019-7121/): Information disclosure in Adobe Acrobat and Reader (high 7.5)
- [CVE-2019-7120](https://insights.sbomify.com/CVE-2019-7120/): Memory corruption in Adobe Acrobat and Reader (critical 9.8)
- [CVE-2019-7119](https://insights.sbomify.com/CVE-2019-7119/): Memory corruption in Adobe Acrobat and Reader (critical 9.8)
- [CVE-2019-7118](https://insights.sbomify.com/CVE-2019-7118/): Memory corruption in Adobe Acrobat and Reader (critical 9.8)
- [CVE-2019-7117](https://insights.sbomify.com/CVE-2019-7117/): Memory corruption in Adobe Acrobat and Reader (critical 9.8)
- [CVE-2019-7116](https://insights.sbomify.com/CVE-2019-7116/): Information disclosure in Adobe Acrobat and Reader (high 7.5)
- [CVE-2019-7115](https://insights.sbomify.com/CVE-2019-7115/): Information disclosure in Adobe Acrobat and Reader (high 7.5)
- [CVE-2019-7114](https://insights.sbomify.com/CVE-2019-7114/): Information disclosure in Adobe Acrobat and Reader (high 7.5)
- [CVE-2019-7113](https://insights.sbomify.com/CVE-2019-7113/): Memory corruption in Adobe Acrobat and Reader (critical 9.8)
- [CVE-2019-7112](https://insights.sbomify.com/CVE-2019-7112/): Use after free in Adobe Acrobat and Reader (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/25/