# Vulnerabilities published in 2019 - [CVE-2019-9965](https://insights.sbomify.com/CVE-2019-9965/): Memory corruption in n/a (high 7.8) - [CVE-2019-9964](https://insights.sbomify.com/CVE-2019-9964/): Memory corruption in n/a (high 7.8) - [CVE-2019-9963](https://insights.sbomify.com/CVE-2019-9963/): Memory corruption in n/a (high 7.8) - [CVE-2019-9962](https://insights.sbomify.com/CVE-2019-9962/): Memory corruption in n/a (high 7.8) - [CVE-2019-9961](https://insights.sbomify.com/CVE-2019-9961/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-9960](https://insights.sbomify.com/CVE-2019-9960/): Path traversal in n/a (critical 9.8) - [CVE-2019-9959](https://insights.sbomify.com/CVE-2019-9959/): Integer overflow in n/a (medium 6.5) - [CVE-2019-9958](https://insights.sbomify.com/CVE-2019-9958/): Cross-site request forgery in n/a (high 8.8) - [CVE-2019-9957](https://insights.sbomify.com/CVE-2019-9957/): Cross-site scripting in n/a (medium 5.4) - [CVE-2019-9956](https://insights.sbomify.com/CVE-2019-9956/): Memory corruption in n/a (high 8.8) - [CVE-2019-9955](https://insights.sbomify.com/CVE-2019-9955/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-9951](https://insights.sbomify.com/CVE-2019-9951/): File upload in n/a (critical 9.8) - [CVE-2019-9950](https://insights.sbomify.com/CVE-2019-9950/): Auth bypass in n/a (critical 9.8) - [CVE-2019-9949](https://insights.sbomify.com/CVE-2019-9949/): Path traversal in n/a (high 8.8) - [CVE-2019-9948](https://insights.sbomify.com/CVE-2019-9948/): Path traversal in n/a (critical 9.1) - [CVE-2019-9947](https://insights.sbomify.com/CVE-2019-9947/): Other in n/a (medium 5.4) - [CVE-2019-9946](https://insights.sbomify.com/CVE-2019-9946/): Misconfiguration in n/a (high 7.5) - [CVE-2019-9945](https://insights.sbomify.com/CVE-2019-9945/): Auth bypass in n/a (critical 9.8) - [CVE-2019-9944](https://insights.sbomify.com/CVE-2019-9944/): Path traversal in n/a (high 7.5) - [CVE-2019-9943](https://insights.sbomify.com/CVE-2019-9943/): Missing authorization in n/a (high 7.5) - [CVE-2019-9942](https://insights.sbomify.com/CVE-2019-9942/): Twig Sandbox Information Disclosure (low 3.7) - [CVE-2019-9939](https://insights.sbomify.com/CVE-2019-9939/): Auth bypass in n/a (high 8.8) - [CVE-2019-9938](https://insights.sbomify.com/CVE-2019-9938/): Missing authorization in n/a (medium 5.3) - [CVE-2019-9937](https://insights.sbomify.com/CVE-2019-9937/): Null dereference in n/a (high 7.5) - [CVE-2019-9936](https://insights.sbomify.com/CVE-2019-9936/): Information disclosure in n/a (high 7.5) - [CVE-2019-9935](https://insights.sbomify.com/CVE-2019-9935/): Missing authorization in n/a (medium 5.3) - [CVE-2019-9934](https://insights.sbomify.com/CVE-2019-9934/): Missing authorization in n/a (medium 5.3) - [CVE-2019-9933](https://insights.sbomify.com/CVE-2019-9933/): Memory corruption in n/a (critical 9.8) - [CVE-2019-9932](https://insights.sbomify.com/CVE-2019-9932/): Memory corruption in n/a (critical 9.8) - [CVE-2019-9931](https://insights.sbomify.com/CVE-2019-9931/): Denial of service in n/a (high 7.5) - [CVE-2019-9930](https://insights.sbomify.com/CVE-2019-9930/): Integer overflow in n/a (critical 9.8) - [CVE-2019-9929](https://insights.sbomify.com/CVE-2019-9929/): Information disclosure in n/a (high 8.8) - [CVE-2019-9928](https://insights.sbomify.com/CVE-2019-9928/): Memory corruption in n/a (high 8.8) - [CVE-2019-9927](https://insights.sbomify.com/CVE-2019-9927/): Code injection in n/a (critical 9.8) - [CVE-2019-9926](https://insights.sbomify.com/CVE-2019-9926/): Cross-site request forgery in n/a (high 8.8) - [CVE-2019-9925](https://insights.sbomify.com/CVE-2019-9925/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-9924](https://insights.sbomify.com/CVE-2019-9924/): Security feature bypass in n/a (high 7.8) - [CVE-2019-9923](https://insights.sbomify.com/CVE-2019-9923/): Null dereference in n/a (high 7.5) - [CVE-2019-9922](https://insights.sbomify.com/CVE-2019-9922/): Path traversal in n/a (medium 5.8) - [CVE-2019-9921](https://insights.sbomify.com/CVE-2019-9921/): Information disclosure in n/a (high 7.7) - [CVE-2019-9920](https://insights.sbomify.com/CVE-2019-9920/): Missing authorization in n/a (high 7.7) - [CVE-2019-9919](https://insights.sbomify.com/CVE-2019-9919/): Cross-site scripting in n/a (medium 5.4) - [CVE-2019-9918](https://insights.sbomify.com/CVE-2019-9918/): SQL injection in n/a (high 8.5) - [CVE-2019-9917](https://insights.sbomify.com/CVE-2019-9917/): Denial of service in n/a (medium 6.5) - [CVE-2019-9915](https://insights.sbomify.com/CVE-2019-9915/): Open redirect in n/a (medium 6.1) - [CVE-2019-9914](https://insights.sbomify.com/CVE-2019-9914/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-9913](https://insights.sbomify.com/CVE-2019-9913/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-9912](https://insights.sbomify.com/CVE-2019-9912/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-9911](https://insights.sbomify.com/CVE-2019-9911/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-9910](https://insights.sbomify.com/CVE-2019-9910/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-9909](https://insights.sbomify.com/CVE-2019-9909/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-9908](https://insights.sbomify.com/CVE-2019-9908/): Cross-site scripting in n/a (medium 6.1) - [CVE-2019-9904](https://insights.sbomify.com/CVE-2019-9904/): Denial of service in n/a (medium 6.5) - [CVE-2019-9903](https://insights.sbomify.com/CVE-2019-9903/): Denial of service in n/a (medium 6.5) - [CVE-2019-9901](https://insights.sbomify.com/CVE-2019-9901/): EnvoyProxy Envoy Missing HTTP URL path normalization (medium 6.5) - [CVE-2019-9900](https://insights.sbomify.com/CVE-2019-9900/): Security feature bypass in n/a (medium 6.5) - [CVE-2019-9898](https://insights.sbomify.com/CVE-2019-9898/): Weak cryptography in n/a (critical 9.8) - [CVE-2019-9897](https://insights.sbomify.com/CVE-2019-9897/): Denial of service in n/a (high 7.5) - [CVE-2019-9896](https://insights.sbomify.com/CVE-2019-9896/): Path traversal in n/a (high 7.8) - [CVE-2019-9895](https://insights.sbomify.com/CVE-2019-9895/): Memory corruption in n/a (critical 9.8) - [CVE-2019-9894](https://insights.sbomify.com/CVE-2019-9894/): Memory corruption in n/a (high 7.5) - [CVE-2019-9893](https://insights.sbomify.com/CVE-2019-9893/): Security feature bypass in n/a (critical 9.8) - [CVE-2019-9892](https://insights.sbomify.com/CVE-2019-9892/): XML external entity in n/a (medium 6.5) - [CVE-2019-9891](https://insights.sbomify.com/CVE-2019-9891/): Command injection in n/a (critical 9.8) - [CVE-2019-9890](https://insights.sbomify.com/CVE-2019-9890/): Missing authorization in n/a (critical 9.1) - [CVE-2019-9889](https://insights.sbomify.com/CVE-2019-9889/): Path traversal in n/a (low 2.7) - [CVE-2019-9886](https://insights.sbomify.com/CVE-2019-9886/): eClass platform allows user to download arbitrary files without authentication (critical 9.1) - [CVE-2019-9885](https://insights.sbomify.com/CVE-2019-9885/): eClass platform contains a SQL injection vulnerability (critical 9.8) - [CVE-2019-9884](https://insights.sbomify.com/CVE-2019-9884/): eClass platform contains a Broken Access Control vulnerability (critical 9.8) - [CVE-2019-9883](https://insights.sbomify.com/CVE-2019-9883/): Cross-site request forgery in MailSherlock MSR35 (high 8.8) - [CVE-2019-9882](https://insights.sbomify.com/CVE-2019-9882/): Cross-site request forgery in MailSherlock MSR35 (high 8.8) - [CVE-2019-9881](https://insights.sbomify.com/CVE-2019-9881/): Missing authorization in n/a (medium 5.3) - [CVE-2019-9880](https://insights.sbomify.com/CVE-2019-9880/): Information disclosure in n/a (critical 9.1) - [CVE-2019-9879](https://insights.sbomify.com/CVE-2019-9879/): Privilege escalation in n/a (critical 9.8) - [CVE-2019-9878](https://insights.sbomify.com/CVE-2019-9878/): Memory corruption in n/a (high 7.8) - [CVE-2019-9877](https://insights.sbomify.com/CVE-2019-9877/): Memory corruption in n/a (high 7.8) - [CVE-2019-9875](https://insights.sbomify.com/CVE-2019-9875/): Sitecore CMS and Experience Platform (XP) Deserialization (high 8.8, exploited in the wild) - [CVE-2019-9874](https://insights.sbomify.com/CVE-2019-9874/): Sitecore CMS and Experience Platform (XP) Deserialization (critical 9.8, exploited in the wild) - [CVE-2019-9873](https://insights.sbomify.com/CVE-2019-9873/): Hardcoded credentials in n/a (critical 9.8) - [CVE-2019-9872](https://insights.sbomify.com/CVE-2019-9872/): Hardcoded credentials in n/a (high 8.1) - [CVE-2019-9871](https://insights.sbomify.com/CVE-2019-9871/): Missing authorization in n/a (critical 9.8) - [CVE-2019-9870](https://insights.sbomify.com/CVE-2019-9870/): Cross-site scripting in n/a (critical 9.8) - [CVE-2019-9868](https://insights.sbomify.com/CVE-2019-9868/): Information disclosure in n/a (high 7.2) - [CVE-2019-9867](https://insights.sbomify.com/CVE-2019-9867/): Information disclosure in n/a (high 7.2) - [CVE-2019-9866](https://insights.sbomify.com/CVE-2019-9866/): Information disclosure in n/a (medium 6.5) - [CVE-2019-9865](https://insights.sbomify.com/CVE-2019-9865/): Integer overflow in n/a (high 8.1) - [CVE-2019-9864](https://insights.sbomify.com/CVE-2019-9864/): Business logic in n/a (medium 6.5) - [CVE-2019-9863](https://insights.sbomify.com/CVE-2019-9863/): Weak cryptography in n/a (critical 9.8) - [CVE-2019-9862](https://insights.sbomify.com/CVE-2019-9862/): Information disclosure in n/a (medium 6.5) - [CVE-2019-9861](https://insights.sbomify.com/CVE-2019-9861/): Security feature bypass in n/a (high 8.1) - [CVE-2019-9860](https://insights.sbomify.com/CVE-2019-9860/): Weak cryptography in n/a (high 7.5) - [CVE-2019-9859](https://insights.sbomify.com/CVE-2019-9859/): Command injection in n/a (high 8.8) - [CVE-2019-9858](https://insights.sbomify.com/CVE-2019-9858/): Path traversal in n/a (high 8.8) - [CVE-2019-9857](https://insights.sbomify.com/CVE-2019-9857/): Denial of service in n/a (medium 5.5) - [CVE-2019-9855](https://insights.sbomify.com/CVE-2019-9855/): Windows 8.3 path equivalence handling flaw allows LibreLogo script execution (critical 9.8) - [CVE-2019-9854](https://insights.sbomify.com/CVE-2019-9854/): Unsafe URL assembly flaw in allowed script location check (high 7.8) - [CVE-2019-9853](https://insights.sbomify.com/CVE-2019-9853/): Insufficient URL decoding flaw in categorizing macro location (high 7.8) - [CVE-2019-9852](https://insights.sbomify.com/CVE-2019-9852/): Insufficient URL encoding flaw in allowed script location check (high 7.8) - [CVE-2019-9851](https://insights.sbomify.com/CVE-2019-9851/): LibreLogo global-event script execution (critical 9.8) - [CVE-2019-9850](https://insights.sbomify.com/CVE-2019-9850/): Insufficient url validation allowing LibreLogo script execution (critical 9.8) --- From sbomify Insights: https://insights.sbomify.com/years/2019/page/3/