# Vulnerabilities published in 2019


- [CVE-2019-5421](https://insights.sbomify.com/CVE-2019-5421/): devise Time-of-check Time-of-use Race Condition vulnerability (critical 9.8)
- [CVE-2019-5420](https://insights.sbomify.com/CVE-2019-5420/): Use of Insufficiently Random Values in Railties Allows Remote Code Execution (critical 9.8)
- [CVE-2019-5419](https://insights.sbomify.com/CVE-2019-5419/): Denial of Service Vulnerability in Action View (high 7.5)
- [CVE-2019-5418](https://insights.sbomify.com/CVE-2019-5418/): Rails Ruby on Rails Path Traversal (high 7.5, exploited in the wild)
- [CVE-2019-5417](https://insights.sbomify.com/CVE-2019-5417/): Directory Traversal in serve (high 7.5)
- [CVE-2019-5416](https://insights.sbomify.com/CVE-2019-5416/): Path Traversal in localhost-now (high 7.5)
- [CVE-2019-5415](https://insights.sbomify.com/CVE-2019-5415/): Path Traversal in serve (high 7.5)
- [CVE-2019-5414](https://insights.sbomify.com/CVE-2019-5414/): Command Injection in kill-port (high 8.1)
- [CVE-2019-5413](https://insights.sbomify.com/CVE-2019-5413/): Code Injection in morgan (critical 9.8)
- [CVE-2019-5408](https://insights.sbomify.com/CVE-2019-5408/): Information disclosure in HP XP7 CVAE (medium 6.5)
- [CVE-2019-5407](https://insights.sbomify.com/CVE-2019-5407/): Information disclosure in HPE 3PAR StoreServ Management and Core Software Media (medium 6.3)
- [CVE-2019-5406](https://insights.sbomify.com/CVE-2019-5406/): Auth bypass in HPE 3PAR StoreServ Management and Core Software Media (high 7.2)
- [CVE-2019-5405](https://insights.sbomify.com/CVE-2019-5405/): Auth bypass in HPE 3PAR StoreServ Management and Core Software Media (high 7.3)
- [CVE-2019-5404](https://insights.sbomify.com/CVE-2019-5404/): Code injection in HPE 3PAR StoreServ Management and Core Software Media (high 8.8)
- [CVE-2019-5403](https://insights.sbomify.com/CVE-2019-5403/): Cross-site scripting in HPE 3PAR StoreServ Management and Core Software Media (medium 4.8)
- [CVE-2019-5402](https://insights.sbomify.com/CVE-2019-5402/): Auth bypass in HPE 3PAR StoreServ Management and Core Software Media (critical 9.4)
- [CVE-2019-5401](https://insights.sbomify.com/CVE-2019-5401/): Cross-site scripting in HP 2910-48G al Switch (medium 4.8)
- [CVE-2019-5400](https://insights.sbomify.com/CVE-2019-5400/): Auth bypass in HPE 3PAR Service Processor (medium 6.3)
- [CVE-2019-5399](https://insights.sbomify.com/CVE-2019-5399/): Other in HPE 3PAR Service Processor (critical 9.4)
- [CVE-2019-5398](https://insights.sbomify.com/CVE-2019-5398/): Cross-site scripting in HPE 3PAR Service Processor (medium 5.4)
- [CVE-2019-5397](https://insights.sbomify.com/CVE-2019-5397/): Cross-site scripting in HPE 3PAR Service Processor (critical 9.4)
- [CVE-2019-5396](https://insights.sbomify.com/CVE-2019-5396/): Auth bypass in HPE 3PAR Service Processor (critical 9.4)
- [CVE-2019-5395](https://insights.sbomify.com/CVE-2019-5395/): File upload in HPE 3PAR Service Processor (high 8.8)
- [CVE-2019-5394](https://insights.sbomify.com/CVE-2019-5394/): Information disclosure in HPE NonStop Maintanence Entity (medium 5.1)
- [CVE-2019-5393](https://insights.sbomify.com/CVE-2019-5393/): Other in HPE Intelligent Management Center (IMC) PLAT (medium 4.3)
- [CVE-2019-5392](https://insights.sbomify.com/CVE-2019-5392/): Information disclosure in HPE Intelligent Management Center (IMC) PLAT (medium 5.3)
- [CVE-2019-5391](https://insights.sbomify.com/CVE-2019-5391/): Memory corruption in HPE Intelligent Management Center (IMC) PLAT (critical 9.8)
- [CVE-2019-5390](https://insights.sbomify.com/CVE-2019-5390/): Command injection in HPE Intelligent Management Center (IMC) PLAT (critical 9.8)
- [CVE-2019-5389](https://insights.sbomify.com/CVE-2019-5389/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5388](https://insights.sbomify.com/CVE-2019-5388/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5387](https://insights.sbomify.com/CVE-2019-5387/): Code injection in HPE Intelligent Management Center (IMC) PLAT (critical 9.8)
- [CVE-2019-5386](https://insights.sbomify.com/CVE-2019-5386/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5385](https://insights.sbomify.com/CVE-2019-5385/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5384](https://insights.sbomify.com/CVE-2019-5384/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5383](https://insights.sbomify.com/CVE-2019-5383/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5382](https://insights.sbomify.com/CVE-2019-5382/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5381](https://insights.sbomify.com/CVE-2019-5381/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5380](https://insights.sbomify.com/CVE-2019-5380/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5379](https://insights.sbomify.com/CVE-2019-5379/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5378](https://insights.sbomify.com/CVE-2019-5378/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5377](https://insights.sbomify.com/CVE-2019-5377/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5376](https://insights.sbomify.com/CVE-2019-5376/): Other in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5375](https://insights.sbomify.com/CVE-2019-5375/): Other in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5374](https://insights.sbomify.com/CVE-2019-5374/): Other in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5373](https://insights.sbomify.com/CVE-2019-5373/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5372](https://insights.sbomify.com/CVE-2019-5372/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5371](https://insights.sbomify.com/CVE-2019-5371/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5370](https://insights.sbomify.com/CVE-2019-5370/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5369](https://insights.sbomify.com/CVE-2019-5369/): Other in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5368](https://insights.sbomify.com/CVE-2019-5368/): Other in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5367](https://insights.sbomify.com/CVE-2019-5367/): Code injection in HPE Intelligent Management Center (IMC) PLAT (critical 9.8)
- [CVE-2019-5366](https://insights.sbomify.com/CVE-2019-5366/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5365](https://insights.sbomify.com/CVE-2019-5365/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5364](https://insights.sbomify.com/CVE-2019-5364/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5363](https://insights.sbomify.com/CVE-2019-5363/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5362](https://insights.sbomify.com/CVE-2019-5362/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5361](https://insights.sbomify.com/CVE-2019-5361/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5360](https://insights.sbomify.com/CVE-2019-5360/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5359](https://insights.sbomify.com/CVE-2019-5359/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5358](https://insights.sbomify.com/CVE-2019-5358/): Code injection in HPE Intelligent Management Center (IMC) PLAT (critical 9.8)
- [CVE-2019-5357](https://insights.sbomify.com/CVE-2019-5357/): File upload in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5356](https://insights.sbomify.com/CVE-2019-5356/): Path traversal in HPE Intelligent Management Center (IMC) PLAT (critical 9.8)
- [CVE-2019-5355](https://insights.sbomify.com/CVE-2019-5355/): Denial of service in HPE Intelligent Management Center (IMC) PLAT (high 7.5)
- [CVE-2019-5354](https://insights.sbomify.com/CVE-2019-5354/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5353](https://insights.sbomify.com/CVE-2019-5353/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5352](https://insights.sbomify.com/CVE-2019-5352/): Code injection in HPE Intelligent Management Center (IMC) PLAT (critical 9.8)
- [CVE-2019-5351](https://insights.sbomify.com/CVE-2019-5351/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5350](https://insights.sbomify.com/CVE-2019-5350/): Deserialization in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5349](https://insights.sbomify.com/CVE-2019-5349/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5348](https://insights.sbomify.com/CVE-2019-5348/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5347](https://insights.sbomify.com/CVE-2019-5347/): Auth bypass in HPE Intelligent Management Center (IMC) PLAT (critical 9.8)
- [CVE-2019-5346](https://insights.sbomify.com/CVE-2019-5346/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5345](https://insights.sbomify.com/CVE-2019-5345/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5344](https://insights.sbomify.com/CVE-2019-5344/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5343](https://insights.sbomify.com/CVE-2019-5343/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5342](https://insights.sbomify.com/CVE-2019-5342/): Code injection in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5341](https://insights.sbomify.com/CVE-2019-5341/): Other in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5340](https://insights.sbomify.com/CVE-2019-5340/): Other in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5339](https://insights.sbomify.com/CVE-2019-5339/): Other in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5338](https://insights.sbomify.com/CVE-2019-5338/): Other in HPE Intelligent Management Center (IMC) PLAT (high 8.8)
- [CVE-2019-5326](https://insights.sbomify.com/CVE-2019-5326/): Deserialization in AirWave Management Platform (high 7.2)
- [CVE-2019-5323](https://insights.sbomify.com/CVE-2019-5323/): Command injection in AirWave Management Platform (high 7.2)
- [CVE-2019-5322](https://insights.sbomify.com/CVE-2019-5322/): Information disclosure in Aruba Intelligent Edge Switch 5400 3810 2920 2930 2530 with GigT port 2530 10/100 port or 2540 (high 7.5)
- [CVE-2019-5321](https://insights.sbomify.com/CVE-2019-5321/): Auth bypass in Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M (high 8.8)
- [CVE-2019-5320](https://insights.sbomify.com/CVE-2019-5320/): Cross-site scripting in Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M (medium 6.1)
- [CVE-2019-5319](https://insights.sbomify.com/CVE-2019-5319/): Memory corruption in Aruba Instant Access Points (critical 9.8)
- [CVE-2019-5318](https://insights.sbomify.com/CVE-2019-5318/): Cross-site request forgery in Aruba Operating System Software (medium 6.5)
- [CVE-2019-5317](https://insights.sbomify.com/CVE-2019-5317/): Auth bypass in Aruba Instant Access Points (medium 6.8)
- [CVE-2019-5315](https://insights.sbomify.com/CVE-2019-5315/): Command injection in Aruba Mobility Controllers (high 7.2)
- [CVE-2019-5314](https://insights.sbomify.com/CVE-2019-5314/): Cross-site scripting in Aruba Mobility Controllers (medium 6.1)
- [CVE-2019-5312](https://insights.sbomify.com/CVE-2019-5312/): XML External Entity Reference in weixin-java-tools (critical 9.8)
- [CVE-2019-5311](https://insights.sbomify.com/CVE-2019-5311/): Cross-site scripting in yunucms:yunucms (medium 6.1)
- [CVE-2019-5310](https://insights.sbomify.com/CVE-2019-5310/): Cross-site scripting in yunucms:yunucms (medium 6.1)
- [CVE-2019-5309](https://insights.sbomify.com/CVE-2019-5309/): Auth bypass in Honor play (medium 4.6)
- [CVE-2019-5308](https://insights.sbomify.com/CVE-2019-5308/): Missing authorization in Mate 20 RS (low 2.4)
- [CVE-2019-5307](https://insights.sbomify.com/CVE-2019-5307/): Auth bypass in P30,P30 Pro (medium 4.2)
- [CVE-2019-5306](https://insights.sbomify.com/CVE-2019-5306/): Security feature bypass in P20 (medium 4.6)
- [CVE-2019-5305](https://insights.sbomify.com/CVE-2019-5305/): Memory corruption in Mate 10 (medium 5.5)
- [CVE-2019-5304](https://insights.sbomify.com/CVE-2019-5304/): Memory corruption in AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600;IPS Module;NGFW Module;NIP6300;NIP6600;NetEngine16EX;S5700;S6700;SRG1300;SRG2300;SRG3300;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600 (high 7.5)
- [CVE-2019-5303](https://insights.sbomify.com/CVE-2019-5303/): Denial of service in ALP-AL00B (medium 5.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/38/