# Vulnerabilities published in 2019


- [CVE-2019-5685](https://insights.sbomify.com/CVE-2019-5685/): Memory corruption in GPU Display Driver (critical 9.8)
- [CVE-2019-5684](https://insights.sbomify.com/CVE-2019-5684/): Memory corruption in GPU Display Driver (critical 10.0)
- [CVE-2019-5683](https://insights.sbomify.com/CVE-2019-5683/): Privilege escalation in GPU Display Driver (high 7.8)
- [CVE-2019-5682](https://insights.sbomify.com/CVE-2019-5682/): Missing authorization in SHIELD TV (high 7.8)
- [CVE-2019-5681](https://insights.sbomify.com/CVE-2019-5681/): Other in SHIELD TV (high 7.8)
- [CVE-2019-5680](https://insights.sbomify.com/CVE-2019-5680/): Other in NVIDIA Jetson TX1 (medium 6.7)
- [CVE-2019-5679](https://insights.sbomify.com/CVE-2019-5679/): Auth bypass in SHIELD TV (high 7.8)
- [CVE-2019-5678](https://insights.sbomify.com/CVE-2019-5678/): Other in NVIDIA GeForce Experience (high 7.8)
- [CVE-2019-5677](https://insights.sbomify.com/CVE-2019-5677/): Memory corruption in NVIDIA GPU Display Driver (medium 5.5)
- [CVE-2019-5676](https://insights.sbomify.com/CVE-2019-5676/): Privilege escalation in NVIDIA GPU Display Driver (medium 6.7)
- [CVE-2019-5675](https://insights.sbomify.com/CVE-2019-5675/): Race condition in NVIDIA GPU Display Driver (high 7.8)
- [CVE-2019-5674](https://insights.sbomify.com/CVE-2019-5674/): Privilege escalation in GeForce Experience (high 7.0)
- [CVE-2019-5673](https://insights.sbomify.com/CVE-2019-5673/): Denial of service in Jetson TX2 (medium 6.1)
- [CVE-2019-5672](https://insights.sbomify.com/CVE-2019-5672/): Hardcoded credentials in Jetson TX1 and TX2 (critical 9.1)
- [CVE-2019-5671](https://insights.sbomify.com/CVE-2019-5671/): Denial of service in NVIDIA GPU Graphics Driver (medium 5.5)
- [CVE-2019-5670](https://insights.sbomify.com/CVE-2019-5670/): Memory corruption in NVIDIA GPU Graphics Driver (high 7.8)
- [CVE-2019-5669](https://insights.sbomify.com/CVE-2019-5669/): Memory corruption in NVIDIA GPU Graphics Driver (high 7.8)
- [CVE-2019-5668](https://insights.sbomify.com/CVE-2019-5668/): Null dereference in NVIDIA GPU Graphics Driver (high 7.8)
- [CVE-2019-5667](https://insights.sbomify.com/CVE-2019-5667/): Null dereference in NVIDIA GPU Graphics Driver (high 7.8)
- [CVE-2019-5666](https://insights.sbomify.com/CVE-2019-5666/): Memory corruption in NVIDIA GPU Graphics Driver (high 7.8)
- [CVE-2019-5665](https://insights.sbomify.com/CVE-2019-5665/): Other in NVIDIA GPU Graphics Driver (high 7.8)
- [CVE-2019-5648](https://insights.sbomify.com/CVE-2019-5648/): LDAP Credential Exposure in Barracuda Load Balancer ADC (high 8.7)
- [CVE-2019-5647](https://insights.sbomify.com/CVE-2019-5647/): Rapid7 AppSpider Chrome Plugin Insufficient Session Expiration (medium 4.4)
- [CVE-2019-5645](https://insights.sbomify.com/CVE-2019-5645/): Rapid7 Metasploit HTTP Handler Denial of Service (high 7.5)
- [CVE-2019-5644](https://insights.sbomify.com/CVE-2019-5644/): C4G BLIS Improper Access Control (critical 10.0)
- [CVE-2019-5643](https://insights.sbomify.com/CVE-2019-5643/): C4G BLIS Improper Access Control (medium 5.3)
- [CVE-2019-5642](https://insights.sbomify.com/CVE-2019-5642/): MAGICK (low 3.3)
- [CVE-2019-5641](https://insights.sbomify.com/CVE-2019-5641/): Rapid7 InsightVM Information Disclosure after Logout (low 3.3)
- [CVE-2019-5640](https://insights.sbomify.com/CVE-2019-5640/): Rapid7 Nexpose Information Disclosure after logout (low 3.3)
- [CVE-2019-5638](https://insights.sbomify.com/CVE-2019-5638/): Rapid7 Nexpose Insufficient Session Management (high 8.7)
- [CVE-2019-5637](https://insights.sbomify.com/CVE-2019-5637/): Beckhoff TwinCAT Profinet Driver Divide-by-Zero Denial of Service (high 7.5)
- [CVE-2019-5636](https://insights.sbomify.com/CVE-2019-5636/): Beckhoff TwinCAT Discovery Service Denial of Service (medium 5.3)
- [CVE-2019-5635](https://insights.sbomify.com/CVE-2019-5635/): Hickory Smart Lock Cleartext Password (medium 6.5)
- [CVE-2019-5634](https://insights.sbomify.com/CVE-2019-5634/): Hickory Smart Lock Insecure Logging on Android (medium 6.5)
- [CVE-2019-5633](https://insights.sbomify.com/CVE-2019-5633/): Hickory Smart Lock Insecure Storage on iOS (medium 6.5)
- [CVE-2019-5632](https://insights.sbomify.com/CVE-2019-5632/): Hickory Smart Lock Insecure Storage on Android (medium 6.5)
- [CVE-2019-5631](https://insights.sbomify.com/CVE-2019-5631/): Rapid7 InsightAppSec Local Privilege Escalation (high 7.8)
- [CVE-2019-5630](https://insights.sbomify.com/CVE-2019-5630/): Rapid7 Nexpose/InsightVM Security Console CSRF (medium 5.9)
- [CVE-2019-5629](https://insights.sbomify.com/CVE-2019-5629/): Privilege escalation in Insight Agent (high 7.8)
- [CVE-2019-5627](https://insights.sbomify.com/CVE-2019-5627/): BlueCats Reveal iOS App Insecure Storage (low 2.8)
- [CVE-2019-5626](https://insights.sbomify.com/CVE-2019-5626/): BlueCats Reveal Android App Insecure Storage (low 2.8)
- [CVE-2019-5625](https://insights.sbomify.com/CVE-2019-5625/): Eaton Halo Home Android App Insecure Storage (low 2.8)
- [CVE-2019-5624](https://insights.sbomify.com/CVE-2019-5624/): Rapid7 Metasploit Framework Zip Import Directory Traversal (high 7.4)
- [CVE-2019-5623](https://insights.sbomify.com/CVE-2019-5623/): Accellion File Transfer Appliance Improper Neutralization of Special Elements used in a Command ('Command Injection') (critical 9.8)
- [CVE-2019-5622](https://insights.sbomify.com/CVE-2019-5622/): Accellion File Transfer Appliance Use of Hard-coded Credentials (critical 9.8)
- [CVE-2019-5621](https://insights.sbomify.com/CVE-2019-5621/): ABBS Software Audio Media Player Stack-based Buffer Overflow (high 7.8)
- [CVE-2019-5620](https://insights.sbomify.com/CVE-2019-5620/): ABB MicroSCADA Pro SYS600 Missing Authentication for Critical Function (critical 9.8)
- [CVE-2019-5619](https://insights.sbomify.com/CVE-2019-5619/): AASync.com AASync Stack-based Buffer Overflow (critical 9.8)
- [CVE-2019-5618](https://insights.sbomify.com/CVE-2019-5618/): A-PDF WAV to MP3 Stack-based Buffer Overflow (high 7.8)
- [CVE-2019-5617](https://insights.sbomify.com/CVE-2019-5617/): C4G BLIS Improper Access Control (critical 10.0)
- [CVE-2019-5616](https://insights.sbomify.com/CVE-2019-5616/): CircuitWerkes Sicon-8 Client-Side Authentication Read-Only Bypass (medium 5.3)
- [CVE-2019-5615](https://insights.sbomify.com/CVE-2019-5615/): Rapid7 InsightVM Stored Credential Exposure (low 3.1)
- [CVE-2019-5614](https://insights.sbomify.com/CVE-2019-5614/): Memory corruption in FreeBSD (critical 9.8)
- [CVE-2019-5613](https://insights.sbomify.com/CVE-2019-5613/): Security feature bypass in FreeBSD (critical 9.8)
- [CVE-2019-5612](https://insights.sbomify.com/CVE-2019-5612/): Race condition in FreeBSD (high 7.5)
- [CVE-2019-5611](https://insights.sbomify.com/CVE-2019-5611/): Denial of service in FreeBSD (high 7.5)
- [CVE-2019-5610](https://insights.sbomify.com/CVE-2019-5610/): Memory corruption in FreeBSD (high 7.5)
- [CVE-2019-5609](https://insights.sbomify.com/CVE-2019-5609/): Memory corruption in FreeBSD (high 7.5)
- [CVE-2019-5608](https://insights.sbomify.com/CVE-2019-5608/): Memory corruption in FreeBSD (critical 9.8)
- [CVE-2019-5607](https://insights.sbomify.com/CVE-2019-5607/): Integer overflow in FreeBSD (high 7.8)
- [CVE-2019-5606](https://insights.sbomify.com/CVE-2019-5606/): Use after free in FreeBSD (high 7.8)
- [CVE-2019-5605](https://insights.sbomify.com/CVE-2019-5605/): Information disclosure in FreeBSD (medium 6.5)
- [CVE-2019-5604](https://insights.sbomify.com/CVE-2019-5604/): Memory corruption in FreeBSD (critical 9.6)
- [CVE-2019-5603](https://insights.sbomify.com/CVE-2019-5603/): Other in FreeBSD (high 7.8)
- [CVE-2019-5602](https://insights.sbomify.com/CVE-2019-5602/): Memory corruption in FreeBSD (high 8.8)
- [CVE-2019-5601](https://insights.sbomify.com/CVE-2019-5601/): Information disclosure in FreeBSD (medium 6.5)
- [CVE-2019-5600](https://insights.sbomify.com/CVE-2019-5600/): Memory corruption in FreeBSD (critical 9.8)
- [CVE-2019-5599](https://insights.sbomify.com/CVE-2019-5599/): Denial of service in FreeBSD (high 7.5)
- [CVE-2019-5598](https://insights.sbomify.com/CVE-2019-5598/): Security feature bypass in FreeBSD (high 7.5)
- [CVE-2019-5597](https://insights.sbomify.com/CVE-2019-5597/): Security feature bypass in FreeBSD (critical 9.1)
- [CVE-2019-5596](https://insights.sbomify.com/CVE-2019-5596/): Memory corruption in FreeBSD (high 8.8)
- [CVE-2019-5595](https://insights.sbomify.com/CVE-2019-5595/): Information disclosure in FreeBSD (medium 5.5)
- [CVE-2019-5594](https://insights.sbomify.com/CVE-2019-5594/): Cross-site scripting in Fortinet FortiNAC (medium 6.1)
- [CVE-2019-5593](https://insights.sbomify.com/CVE-2019-5593/): Information disclosure in Fortinet FortiOS (medium 5.5)
- [CVE-2019-5592](https://insights.sbomify.com/CVE-2019-5592/): Weak cryptography in Fortinet IPS Engine (medium 5.9)
- [CVE-2019-5591](https://insights.sbomify.com/CVE-2019-5591/): Fortinet FortiOS Default Configuration (medium 6.5, exploited in the wild)
- [CVE-2019-5590](https://insights.sbomify.com/CVE-2019-5590/): Cross-site scripting in FortiWeb (medium 6.1)
- [CVE-2019-5589](https://insights.sbomify.com/CVE-2019-5589/): Other in FortiClientWindows (high 8.6)
- [CVE-2019-5588](https://insights.sbomify.com/CVE-2019-5588/): Cross-site scripting in Fortinet FortiOS (medium 6.1)
- [CVE-2019-5587](https://insights.sbomify.com/CVE-2019-5587/): Security feature bypass in Fortinet FortiOS (medium 6.5)
- [CVE-2019-5586](https://insights.sbomify.com/CVE-2019-5586/): Cross-site scripting in Fortinet FortiOS (medium 6.1)
- [CVE-2019-5585](https://insights.sbomify.com/CVE-2019-5585/): Missing authorization in FortiClientMac (medium 6.1)
- [CVE-2019-5544](https://insights.sbomify.com/CVE-2019-5544/): VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2019-5543](https://insights.sbomify.com/CVE-2019-5543/): Misconfiguration in VMware Horizon Client for Windows (high 7.8)
- [CVE-2019-5542](https://insights.sbomify.com/CVE-2019-5542/): Denial of service in Workstation and Fusion (high 7.7)
- [CVE-2019-5541](https://insights.sbomify.com/CVE-2019-5541/): Memory corruption in Workstation and Fusion (critical 9.1)
- [CVE-2019-5540](https://insights.sbomify.com/CVE-2019-5540/): Information disclosure in Workstation and Fusion (high 7.7)
- [CVE-2019-5539](https://insights.sbomify.com/CVE-2019-5539/): Privilege escalation in Horizon View Agent (high 7.8)
- [CVE-2019-5538](https://insights.sbomify.com/CVE-2019-5538/): Security feature bypass in VMware vCenter Server Appliance (medium 5.9)
- [CVE-2019-5537](https://insights.sbomify.com/CVE-2019-5537/): Weak cryptography in VMware vCenter Server Appliance (medium 5.9)
- [CVE-2019-5536](https://insights.sbomify.com/CVE-2019-5536/): Denial of service in VMware ESXi, Workstation and Fusion (medium 6.5)
- [CVE-2019-5535](https://insights.sbomify.com/CVE-2019-5535/): Denial of service in VMware Workstation and Fusion (medium 4.7)
- [CVE-2019-5534](https://insights.sbomify.com/CVE-2019-5534/): Information disclosure in vCenter Server (high 7.7)
- [CVE-2019-5533](https://insights.sbomify.com/CVE-2019-5533/): Missing authorization in SD-WAN by VeloCloud (medium 4.3)
- [CVE-2019-5532](https://insights.sbomify.com/CVE-2019-5532/): Information disclosure in vCenter Server (high 7.7)
- [CVE-2019-5531](https://insights.sbomify.com/CVE-2019-5531/): Auth bypass in VMware vCenter Server (medium 5.4)
- [CVE-2019-5530](https://insights.sbomify.com/CVE-2019-5530/): Security feature bypass in InstallBuilder (high 7.8)
- [CVE-2019-5528](https://insights.sbomify.com/CVE-2019-5528/): Denial of service in ESXi (medium 5.3)
- [CVE-2019-5527](https://insights.sbomify.com/CVE-2019-5527/): Use after free in ESXi, Workstation, Fusion, VMRC and Horizon Client (high 8.8)
- [CVE-2019-5526](https://insights.sbomify.com/CVE-2019-5526/): Privilege escalation in VMware Workstation (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/36/
