# Vulnerabilities published in 2019 - [CVE-2019-6233](https://insights.sbomify.com/CVE-2019-6233/): Memory corruption in Safari (high 8.8) - [CVE-2019-6232](https://insights.sbomify.com/CVE-2019-6232/): Race condition in iCloud for Windows (high 7.5) - [CVE-2019-6231](https://insights.sbomify.com/CVE-2019-6231/): Information disclosure in iOS (medium 5.5) - [CVE-2019-6230](https://insights.sbomify.com/CVE-2019-6230/): Memory corruption in iOS (high 8.6) - [CVE-2019-6229](https://insights.sbomify.com/CVE-2019-6229/): Cross-site scripting in Safari (medium 6.1) - [CVE-2019-6228](https://insights.sbomify.com/CVE-2019-6228/): Cross-site scripting in Safari (medium 6.1) - [CVE-2019-6227](https://insights.sbomify.com/CVE-2019-6227/): Memory corruption in Safari (high 8.8) - [CVE-2019-6226](https://insights.sbomify.com/CVE-2019-6226/): Memory corruption in Safari (high 8.8) - [CVE-2019-6225](https://insights.sbomify.com/CVE-2019-6225/): Memory corruption in iOS (high 7.8) - [CVE-2019-6224](https://insights.sbomify.com/CVE-2019-6224/): Memory corruption in iOS (high 8.8) - [CVE-2019-6223](https://insights.sbomify.com/CVE-2019-6223/): Apple iOS and macOS Group Facetime (high 7.5, exploited in the wild) - [CVE-2019-6222](https://insights.sbomify.com/CVE-2019-6222/): Security feature bypass in iOS (medium 4.3) - [CVE-2019-6221](https://insights.sbomify.com/CVE-2019-6221/): Memory corruption in iOS (high 7.8) - [CVE-2019-6220](https://insights.sbomify.com/CVE-2019-6220/): Information disclosure in macOS (medium 5.5) - [CVE-2019-6219](https://insights.sbomify.com/CVE-2019-6219/): Denial of service in iOS (high 7.5) - [CVE-2019-6218](https://insights.sbomify.com/CVE-2019-6218/): Memory corruption in iOS (high 7.8) - [CVE-2019-6217](https://insights.sbomify.com/CVE-2019-6217/): Memory corruption in Safari (high 8.8) - [CVE-2019-6216](https://insights.sbomify.com/CVE-2019-6216/): Memory corruption in Safari (high 8.8) - [CVE-2019-6215](https://insights.sbomify.com/CVE-2019-6215/): Memory corruption in Safari (high 8.8) - [CVE-2019-6214](https://insights.sbomify.com/CVE-2019-6214/): Memory corruption in iOS (high 8.6) - [CVE-2019-6213](https://insights.sbomify.com/CVE-2019-6213/): Memory corruption in iOS (high 7.8) - [CVE-2019-6212](https://insights.sbomify.com/CVE-2019-6212/): Memory corruption in Safari (high 8.8) - [CVE-2019-6211](https://insights.sbomify.com/CVE-2019-6211/): Memory corruption in iOS (high 8.8) - [CVE-2019-6210](https://insights.sbomify.com/CVE-2019-6210/): Memory corruption in iOS (high 7.8) - [CVE-2019-6209](https://insights.sbomify.com/CVE-2019-6209/): Information disclosure in iOS (medium 5.5) - [CVE-2019-6208](https://insights.sbomify.com/CVE-2019-6208/): Memory corruption in iOS (medium 5.5) - [CVE-2019-6207](https://insights.sbomify.com/CVE-2019-6207/): Information disclosure in iOS (medium 5.5) - [CVE-2019-6206](https://insights.sbomify.com/CVE-2019-6206/): Information disclosure in iOS (critical 9.8) - [CVE-2019-6205](https://insights.sbomify.com/CVE-2019-6205/): Memory corruption in iOS (high 7.8) - [CVE-2019-6204](https://insights.sbomify.com/CVE-2019-6204/): Cross-site scripting in Safari (medium 6.1) - [CVE-2019-6203](https://insights.sbomify.com/CVE-2019-6203/): Information disclosure in iOS (critical 9.8) - [CVE-2019-6202](https://insights.sbomify.com/CVE-2019-6202/): Memory corruption in iOS (high 7.8) - [CVE-2019-6201](https://insights.sbomify.com/CVE-2019-6201/): Memory corruption in Safari (high 8.8) - [CVE-2019-6200](https://insights.sbomify.com/CVE-2019-6200/): Memory corruption in iOS (high 8.8) - [CVE-2019-6198](https://insights.sbomify.com/CVE-2019-6198/): Privilege escalation in PC Manager (high 7.8) - [CVE-2019-6197](https://insights.sbomify.com/CVE-2019-6197/): Privilege escalation in PC Manager (high 7.8) - [CVE-2019-6196](https://insights.sbomify.com/CVE-2019-6196/): Path traversal in Installation Packages (medium 6.7) - [CVE-2019-6195](https://insights.sbomify.com/CVE-2019-6195/): Auth bypass in XClarity Controller (XCC) (medium 4.8) - [CVE-2019-6194](https://insights.sbomify.com/CVE-2019-6194/): XML external entity in XClarity Administrator (LXCA) (medium 5.7) - [CVE-2019-6193](https://insights.sbomify.com/CVE-2019-6193/): Information disclosure in XClarity Administrator (LXCA) (high 7.5) - [CVE-2019-6192](https://insights.sbomify.com/CVE-2019-6192/): Memory corruption in Power Management driver (medium 4.4) - [CVE-2019-6191](https://insights.sbomify.com/CVE-2019-6191/): Privilege escalation in LenovoPaper (high 7.8) - [CVE-2019-6190](https://insights.sbomify.com/CVE-2019-6190/): Denial of service in BIOS (medium 5.0) - [CVE-2019-6189](https://insights.sbomify.com/CVE-2019-6189/): Other in Lenovo System Interface Foundation (high 7.8) - [CVE-2019-6188](https://insights.sbomify.com/CVE-2019-6188/): ThinkPad T460p and T470p BIOS Tamper Mechanism (critical 9.8) - [CVE-2019-6187](https://insights.sbomify.com/CVE-2019-6187/): Other in Lenovo XClarity Controller (XCC) (medium 6.5) - [CVE-2019-6186](https://insights.sbomify.com/CVE-2019-6186/): Privilege escalation in Lenovo System Interface Foundation (high 8.8) - [CVE-2019-6184](https://insights.sbomify.com/CVE-2019-6184/): Privilege escalation in Customer Engagement Service (CCSDK) (high 7.8) - [CVE-2019-6183](https://insights.sbomify.com/CVE-2019-6183/): Denial of service in Energy Management driver (high 7.5) - [CVE-2019-6182](https://insights.sbomify.com/CVE-2019-6182/): Other in XClarity Administrator (LXCA) (medium 4.8) - [CVE-2019-6181](https://insights.sbomify.com/CVE-2019-6181/): Cross-site scripting in XClarity Administrator (LXCA) (medium 6.1) - [CVE-2019-6180](https://insights.sbomify.com/CVE-2019-6180/): Cross-site scripting in XClarity Administrator (LXCA) (medium 4.8) - [CVE-2019-6179](https://insights.sbomify.com/CVE-2019-6179/): XML external entity in XClarity Administrator (LXCA) (medium 5.3) - [CVE-2019-6178](https://insights.sbomify.com/CVE-2019-6178/): Information disclosure in NAS products (medium 5.3) - [CVE-2019-6177](https://insights.sbomify.com/CVE-2019-6177/): Path traversal in Solution Center (high 7.8) - [CVE-2019-6176](https://insights.sbomify.com/CVE-2019-6176/): Denial of service in ThinkPad USB-C Dock Firmware (high 7.5) - [CVE-2019-6175](https://insights.sbomify.com/CVE-2019-6175/): System Update Vulnerability (high 7.5) - [CVE-2019-6173](https://insights.sbomify.com/CVE-2019-6173/): Privilege escalation in Installation Packages (medium 6.7) - [CVE-2019-6172](https://insights.sbomify.com/CVE-2019-6172/): Code injection in ThinkPad (medium 6.4) - [CVE-2019-6171](https://insights.sbomify.com/CVE-2019-6171/): Security feature bypass in BIOS (medium 6.4) - [CVE-2019-6170](https://insights.sbomify.com/CVE-2019-6170/): Code injection in ThinkPad (medium 6.4) - [CVE-2019-6169](https://insights.sbomify.com/CVE-2019-6169/): Information disclosure in Service Bridge (medium 6.5) - [CVE-2019-6168](https://insights.sbomify.com/CVE-2019-6168/): Code injection in Service Bridge (high 8.8) - [CVE-2019-6167](https://insights.sbomify.com/CVE-2019-6167/): Code injection in Service Bridge (high 8.8) - [CVE-2019-6166](https://insights.sbomify.com/CVE-2019-6166/): Cross-site request forgery in Service Bridge (medium 5.4) - [CVE-2019-6165](https://insights.sbomify.com/CVE-2019-6165/): Privilege escalation in PaperDisplay Hotkey Service (high 7.3) - [CVE-2019-6163](https://insights.sbomify.com/CVE-2019-6163/): Path traversal in System Update (medium 5.5) - [CVE-2019-6161](https://insights.sbomify.com/CVE-2019-6161/): Auth bypass in ThinkAgile CP-SB (high 7.5) - [CVE-2019-6160](https://insights.sbomify.com/CVE-2019-6160/): Missing authorization in NAS products (high 8.8) - [CVE-2019-6159](https://insights.sbomify.com/CVE-2019-6159/): Cross-site scripting in legacy System x IMM (IMM v1) firmware (critical 9.6) - [CVE-2019-6158](https://insights.sbomify.com/CVE-2019-6158/): Information disclosure in Lenovo XClarity Administrator (high 8.7) - [CVE-2019-6157](https://insights.sbomify.com/CVE-2019-6157/): Information disclosure in System x (medium 6.5) - [CVE-2019-6156](https://insights.sbomify.com/CVE-2019-6156/): Security feature bypass in BIOS (low 3.3) - [CVE-2019-6155](https://insights.sbomify.com/CVE-2019-6155/): Denial of service in BladeCenter BIOS (medium 4.1) - [CVE-2019-6154](https://insights.sbomify.com/CVE-2019-6154/): Other in Lenovo Bootable Generator (medium 5.3) - [CVE-2019-6149](https://insights.sbomify.com/CVE-2019-6149/): Privilege escalation in unspecified (medium 6.7) - [CVE-2019-6147](https://insights.sbomify.com/CVE-2019-6147/): Misconfiguration in NGFW Security Management Center (medium 5.9) - [CVE-2019-6146](https://insights.sbomify.com/CVE-2019-6146/): Cross-site scripting in Forcepoint Web Security (medium 6.1) - [CVE-2019-6145](https://insights.sbomify.com/CVE-2019-6145/): Privilege escalation in Forcepoint VPN Client for Windows (medium 6.7) - [CVE-2019-6144](https://insights.sbomify.com/CVE-2019-6144/): Security feature bypass in Forcepoint One Endpoint (medium 6.5) - [CVE-2019-6143](https://insights.sbomify.com/CVE-2019-6143/): Auth bypass in Forcepoint Next Generation Firewall (critical 9.1) - [CVE-2019-6142](https://insights.sbomify.com/CVE-2019-6142/): Cross-site scripting in Forcepoint Email Security (medium 6.1) - [CVE-2019-6140](https://insights.sbomify.com/CVE-2019-6140/): Misconfiguration in Forcepoint Email Security (critical 9.8) - [CVE-2019-6139](https://insights.sbomify.com/CVE-2019-6139/): File upload in Forcepoint User ID (FUID) server (critical 9.8) - [CVE-2019-6138](https://insights.sbomify.com/CVE-2019-6138/): Denial of service in n/a (high 7.5) - [CVE-2019-6137](https://insights.sbomify.com/CVE-2019-6137/): Null dereference in n/a (high 7.5) - [CVE-2019-6136](https://insights.sbomify.com/CVE-2019-6136/): Null dereference in n/a (high 7.5) - [CVE-2019-6135](https://insights.sbomify.com/CVE-2019-6135/): Denial of service in n/a (high 7.5) - [CVE-2019-6133](https://insights.sbomify.com/CVE-2019-6133/): Race condition in n/a (medium 6.7) - [CVE-2019-6132](https://insights.sbomify.com/CVE-2019-6132/): Memory corruption in n/a (high 7.5) - [CVE-2019-6131](https://insights.sbomify.com/CVE-2019-6131/): Denial of service in n/a (medium 5.5) - [CVE-2019-6130](https://insights.sbomify.com/CVE-2019-6130/): Null dereference in n/a (medium 5.5) - [CVE-2019-6129](https://insights.sbomify.com/CVE-2019-6129/): Denial of service in n/a (medium 6.5) - [CVE-2019-6128](https://insights.sbomify.com/CVE-2019-6128/): Denial of service in n/a (high 8.8) - [CVE-2019-6127](https://insights.sbomify.com/CVE-2019-6127/): SQL injection in n/a (high 7.2) - [CVE-2019-6126](https://insights.sbomify.com/CVE-2019-6126/): Missing authorization in n/a (high 7.5) - [CVE-2019-6122](https://insights.sbomify.com/CVE-2019-6122/): Information disclosure in n/a (low 3.1) - [CVE-2019-6121](https://insights.sbomify.com/CVE-2019-6121/): Missing authorization in n/a (low 3.7) - [CVE-2019-6120](https://insights.sbomify.com/CVE-2019-6120/): Information disclosure in n/a (high 7.5) - [CVE-2019-6117](https://insights.sbomify.com/CVE-2019-6117/): Cross-site scripting in n/a (medium 6.1) --- From sbomify Insights: https://insights.sbomify.com/years/2019/page/32/