# Vulnerabilities published in 2019


- [CVE-2019-5525](https://insights.sbomify.com/CVE-2019-5525/): Use after free in VMware Workstation (high 8.8)
- [CVE-2019-5524](https://insights.sbomify.com/CVE-2019-5524/): Memory corruption in VMware Workstation, VMware Fusion (high 8.8)
- [CVE-2019-5523](https://insights.sbomify.com/CVE-2019-5523/): Auth bypass in VMware vCloud Director for Service Providers (vCD) (critical 9.8)
- [CVE-2019-5522](https://insights.sbomify.com/CVE-2019-5522/): Memory corruption in VMware Tools for Windows (high 7.1)
- [CVE-2019-5521](https://insights.sbomify.com/CVE-2019-5521/): Memory corruption in VMware ESXi (critical 9.6)
- [CVE-2019-5520](https://insights.sbomify.com/CVE-2019-5520/): Memory corruption in ESXi (medium 5.9)
- [CVE-2019-5519](https://insights.sbomify.com/CVE-2019-5519/): Race condition in VMware ESXi, Workstation, Fusion (medium 6.8)
- [CVE-2019-5518](https://insights.sbomify.com/CVE-2019-5518/): Memory corruption in VMware ESXi, Workstation, Fusion (medium 6.8)
- [CVE-2019-5517](https://insights.sbomify.com/CVE-2019-5517/): Memory corruption in ESXi (medium 6.8)
- [CVE-2019-5516](https://insights.sbomify.com/CVE-2019-5516/): Memory corruption in ESXi (medium 6.8)
- [CVE-2019-5515](https://insights.sbomify.com/CVE-2019-5515/): Memory corruption in VMware Workstation and Fusion (high 8.8)
- [CVE-2019-5514](https://insights.sbomify.com/CVE-2019-5514/): Missing authorization in VMware Fusion (high 8.8)
- [CVE-2019-5513](https://insights.sbomify.com/CVE-2019-5513/): Information disclosure in VMware Horizon Connection Server (medium 5.3)
- [CVE-2019-5512](https://insights.sbomify.com/CVE-2019-5512/): Privilege escalation in VMware Workstation (high 8.8)
- [CVE-2019-5511](https://insights.sbomify.com/CVE-2019-5511/): Privilege escalation in VMware Workstation (high 8.8)
- [CVE-2019-5509](https://insights.sbomify.com/CVE-2019-5509/): Code injection in ONTAP Select Deploy administration utility (critical 9.8)
- [CVE-2019-5508](https://insights.sbomify.com/CVE-2019-5508/): Denial of service in Clustered Data ONTAP (high 7.5)
- [CVE-2019-5507](https://insights.sbomify.com/CVE-2019-5507/): Information disclosure in SnapManager for Oracle (medium 5.5)
- [CVE-2019-5506](https://insights.sbomify.com/CVE-2019-5506/): Security feature bypass in Clustered Data ONTAP (medium 5.9)
- [CVE-2019-5505](https://insights.sbomify.com/CVE-2019-5505/): Information disclosure in ONTAP Select Deploy administration utility (critical 9.8)
- [CVE-2019-5504](https://insights.sbomify.com/CVE-2019-5504/): Missing authorization in ONTAP Select Deploy administration utility (critical 9.8)
- [CVE-2019-5503](https://insights.sbomify.com/CVE-2019-5503/): Misconfiguration in OnCommand Workflow Automation (medium 5.3)
- [CVE-2019-5502](https://insights.sbomify.com/CVE-2019-5502/): Weak cryptography in Data ONTAP operating in 7-Mode (critical 9.1)
- [CVE-2019-5501](https://insights.sbomify.com/CVE-2019-5501/): Information disclosure in Data ONTAP operating in 7-Mode (high 7.5)
- [CVE-2019-5500](https://insights.sbomify.com/CVE-2019-5500/): Denial of service in NetApp Service Processor and Baseboard Management Controller (high 7.5)
- [CVE-2019-5498](https://insights.sbomify.com/CVE-2019-5498/): Information disclosure in OnCommand Insight (medium 6.5)
- [CVE-2019-5497](https://insights.sbomify.com/CVE-2019-5497/): Hardcoded credentials in AFF A700s Baseboard Management Controller (critical 9.8)
- [CVE-2019-5496](https://insights.sbomify.com/CVE-2019-5496/): Misconfiguration in OnCommand Insight (high 7.5)
- [CVE-2019-5495](https://insights.sbomify.com/CVE-2019-5495/): Misconfiguration in OnCommand Unified Manager for VMware vSphere,Linux and Windows 7.2 and above (high 7.5)
- [CVE-2019-5494](https://insights.sbomify.com/CVE-2019-5494/): Misconfiguration in OnCommand Unified Manager 7-Mode (high 7.5)
- [CVE-2019-5493](https://insights.sbomify.com/CVE-2019-5493/): Information disclosure in Data ONTAP operating in 7-Mode (high 7.5)
- [CVE-2019-5492](https://insights.sbomify.com/CVE-2019-5492/): Information disclosure in Element Plug-in for vCenter Server (high 7.5)
- [CVE-2019-5491](https://insights.sbomify.com/CVE-2019-5491/): Information disclosure in Clustered Data ONTAP (high 7.5)
- [CVE-2019-5490](https://insights.sbomify.com/CVE-2019-5490/): Hardcoded credentials in NetApp Service Processor (critical 9.8)
- [CVE-2019-5489](https://insights.sbomify.com/CVE-2019-5489/): Information disclosure in linux:linux kernel (medium 5.5)
- [CVE-2019-5488](https://insights.sbomify.com/CVE-2019-5488/): SQL injection in earclink:espcms-p8 (high 7.5)
- [CVE-2019-5487](https://insights.sbomify.com/CVE-2019-5487/): Missing authorization in GitLab EE (medium 5.3)
- [CVE-2019-5486](https://insights.sbomify.com/CVE-2019-5486/): Auth bypass in GitLab CE/EE (high 8.8)
- [CVE-2019-5485](https://insights.sbomify.com/CVE-2019-5485/): Command Injection in gitlabhook (critical 10.0)
- [CVE-2019-5484](https://insights.sbomify.com/CVE-2019-5484/): Symlink Arbitrary File Overwrite in bower (high 7.5)
- [CVE-2019-5483](https://insights.sbomify.com/CVE-2019-5483/): Sensitive Data Exposure in seneca (medium 5.3)
- [CVE-2019-5482](https://insights.sbomify.com/CVE-2019-5482/): Memory corruption in curl (critical 9.8)
- [CVE-2019-5481](https://insights.sbomify.com/CVE-2019-5481/): Memory corruption in curl (critical 9.8)
- [CVE-2019-5480](https://insights.sbomify.com/CVE-2019-5480/): Path Traversal in statichttpserver (medium 5.3)
- [CVE-2019-5479](https://insights.sbomify.com/CVE-2019-5479/): Unintended Require in larvitbase-api (high 7.5)
- [CVE-2019-5478](https://insights.sbomify.com/CVE-2019-5478/): Security feature bypass in Zynq UltraScale+ SoC (medium 5.5)
- [CVE-2019-5477](https://insights.sbomify.com/CVE-2019-5477/): Nokogiri Command Injection Vulnerability (critical 9.8)
- [CVE-2019-5476](https://insights.sbomify.com/CVE-2019-5476/): SQL injection in lookup.nextcloud.com (critical 9.8)
- [CVE-2019-5475](https://insights.sbomify.com/CVE-2019-5475/): OS Command Injection in Nexus Yum Repository Plugin (high 8.8)
- [CVE-2019-5474](https://insights.sbomify.com/CVE-2019-5474/): Missing authorization in GitLab EE (medium 6.5)
- [CVE-2019-5473](https://insights.sbomify.com/CVE-2019-5473/): Auth bypass in gitlab.com (high 7.2)
- [CVE-2019-5472](https://insights.sbomify.com/CVE-2019-5472/): Missing authorization in GitLab (high 7.5)
- [CVE-2019-5471](https://insights.sbomify.com/CVE-2019-5471/): Cross-site scripting in GitLab (medium 5.4)
- [CVE-2019-5470](https://insights.sbomify.com/CVE-2019-5470/): Information disclosure in GitLab (high 7.5)
- [CVE-2019-5469](https://insights.sbomify.com/CVE-2019-5469/): Missing authorization in GitLab (medium 6.5)
- [CVE-2019-5468](https://insights.sbomify.com/CVE-2019-5468/): Privilege escalation in GitLab (high 8.8)
- [CVE-2019-5467](https://insights.sbomify.com/CVE-2019-5467/): Cross-site scripting in GitLab CE/EE (medium 5.4)
- [CVE-2019-5466](https://insights.sbomify.com/CVE-2019-5466/): Missing authorization in GitLab CE/EE (medium 4.3)
- [CVE-2019-5465](https://insights.sbomify.com/CVE-2019-5465/): Information disclosure in GitLab CE/EE (medium 4.3)
- [CVE-2019-5464](https://insights.sbomify.com/CVE-2019-5464/): Server-side request forgery in GitLab CE/EE (critical 9.8)
- [CVE-2019-5463](https://insights.sbomify.com/CVE-2019-5463/): Missing authorization in GitLab CE/EE (medium 5.3)
- [CVE-2019-5462](https://insights.sbomify.com/CVE-2019-5462/): Privilege escalation in GitLab Community Edition and GitLab Enterprise Edition (high 8.8)
- [CVE-2019-5461](https://insights.sbomify.com/CVE-2019-5461/): Server-side request forgery in GitLab Community Edition (low 3.5)
- [CVE-2019-5460](https://insights.sbomify.com/CVE-2019-5460/): Memory corruption in VLC Media Player (medium 5.5)
- [CVE-2019-5459](https://insights.sbomify.com/CVE-2019-5459/): Integer overflow in VLC (high 7.1)
- [CVE-2019-5458](https://insights.sbomify.com/CVE-2019-5458/): Cross-Site Scripting in http-file-server (medium 5.4)
- [CVE-2019-5457](https://insights.sbomify.com/CVE-2019-5457/): Cross-Site Scripting in min-http-server (medium 5.4)
- [CVE-2019-5456](https://insights.sbomify.com/CVE-2019-5456/): Information disclosure in UniFi (high 8.1)
- [CVE-2019-5455](https://insights.sbomify.com/CVE-2019-5455/): Security feature bypass in com.nextcloud.client (medium 6.8)
- [CVE-2019-5454](https://insights.sbomify.com/CVE-2019-5454/): SQL injection in com.nextcloud.client (critical 9.8)
- [CVE-2019-5453](https://insights.sbomify.com/CVE-2019-5453/): Auth bypass in com.nextcloud.client (medium 6.1)
- [CVE-2019-5452](https://insights.sbomify.com/CVE-2019-5452/): Security feature bypass in com.nextcloud.client (low 2.4)
- [CVE-2019-5451](https://insights.sbomify.com/CVE-2019-5451/): Auth bypass in com.nextcloud.client (medium 4.6)
- [CVE-2019-5450](https://insights.sbomify.com/CVE-2019-5450/): Cross-site scripting in com.nextcloud.client (medium 6.8)
- [CVE-2019-5449](https://insights.sbomify.com/CVE-2019-5449/): Missing authorization in Nextcloud Server (medium 4.3)
- [CVE-2019-5448](https://insights.sbomify.com/CVE-2019-5448/): Missing Encryption of Sensitive Data in yarn (high 8.1)
- [CVE-2019-5447](https://insights.sbomify.com/CVE-2019-5447/): Path Traversal in http-file-server (medium 5.3)
- [CVE-2019-5446](https://insights.sbomify.com/CVE-2019-5446/): Command injection in EdgeMAX (high 7.2)
- [CVE-2019-5445](https://insights.sbomify.com/CVE-2019-5445/): Denial of service in EdgeMAX (medium 4.9)
- [CVE-2019-5444](https://insights.sbomify.com/CVE-2019-5444/): Path Traversal in serve-here.js (medium 5.3)
- [CVE-2019-5443](https://insights.sbomify.com/CVE-2019-5443/): Code injection in curl (high 7.8)
- [CVE-2019-5442](https://insights.sbomify.com/CVE-2019-5442/): XML Entity Expansion in Pippo (high 7.5)
- [CVE-2019-5440](https://insights.sbomify.com/CVE-2019-5440/): Weak cryptography in Revive Adserver (high 8.1)
- [CVE-2019-5439](https://insights.sbomify.com/CVE-2019-5439/): Memory corruption in VLC Media Player (medium 6.5)
- [CVE-2019-5438](https://insights.sbomify.com/CVE-2019-5438/): Unauthorized File Access in harp (medium 5.3)
- [CVE-2019-5437](https://insights.sbomify.com/CVE-2019-5437/): Unauthorized File Access in harp (medium 5.3)
- [CVE-2019-5436](https://insights.sbomify.com/CVE-2019-5436/): Memory corruption in curl (high 7.8)
- [CVE-2019-5435](https://insights.sbomify.com/CVE-2019-5435/): Integer overflow in curl (low 3.7)
- [CVE-2019-5434](https://insights.sbomify.com/CVE-2019-5434/): Deserialization in Revive Adserver (critical 9.8)
- [CVE-2019-5433](https://insights.sbomify.com/CVE-2019-5433/): Open redirect in Revive Adserver (medium 5.4)
- [CVE-2019-5432](https://insights.sbomify.com/CVE-2019-5432/): Improper Input Validation and Buffer Over-read in mqtt-packet (high 7.5)
- [CVE-2019-5431](https://insights.sbomify.com/CVE-2019-5431/): Auth bypass in Twitter Kit for iOS (medium 5.4)
- [CVE-2019-5430](https://insights.sbomify.com/CVE-2019-5430/): Cross-site request forgery in UniFi Video Server (high 8.8)
- [CVE-2019-5429](https://insights.sbomify.com/CVE-2019-5429/): Privilege escalation in FileZilla (high 7.8)
- [CVE-2019-5427](https://insights.sbomify.com/CVE-2019-5427/): Billion laughs attack in c3p0 (high 7.5)
- [CVE-2019-5426](https://insights.sbomify.com/CVE-2019-5426/): Auth bypass in EdgeMAX (medium 4.8)
- [CVE-2019-5425](https://insights.sbomify.com/CVE-2019-5425/): Command injection in EdgeMAX (high 8.8)
- [CVE-2019-5424](https://insights.sbomify.com/CVE-2019-5424/): Command injection in EdgeMAX (high 8.8)
- [CVE-2019-5423](https://insights.sbomify.com/CVE-2019-5423/): Path Traversal in http-live-simulator (high 7.5)
- [CVE-2019-5422](https://insights.sbomify.com/CVE-2019-5422/): Cross-Site Scripting in buttle (medium 6.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/37/