# Vulnerabilities published in 2019


- [CVE-2019-9738](https://insights.sbomify.com/CVE-2019-9738/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-9737](https://insights.sbomify.com/CVE-2019-9737/): Cross-Site Scripting in editor.md (medium 6.1)
- [CVE-2019-9736](https://insights.sbomify.com/CVE-2019-9736/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-9735](https://insights.sbomify.com/CVE-2019-9735/): OpenStack Neutron's unsupported dport option prevents applying security groups (medium 6.5)
- [CVE-2019-9734](https://insights.sbomify.com/CVE-2019-9734/): Information disclosure in n/a (high 7.5)
- [CVE-2019-9733](https://insights.sbomify.com/CVE-2019-9733/): Auth bypass in n/a (critical 9.8)
- [CVE-2019-9732](https://insights.sbomify.com/CVE-2019-9732/): Missing authorization in n/a (critical 9.8)
- [CVE-2019-9730](https://insights.sbomify.com/CVE-2019-9730/): Privilege escalation in n/a (high 8.8)
- [CVE-2019-9729](https://insights.sbomify.com/CVE-2019-9729/): Integer overflow in n/a (high 7.8)
- [CVE-2019-9727](https://insights.sbomify.com/CVE-2019-9727/): Information disclosure in n/a (high 7.5)
- [CVE-2019-9726](https://insights.sbomify.com/CVE-2019-9726/): Path traversal in n/a (high 7.5)
- [CVE-2019-9725](https://insights.sbomify.com/CVE-2019-9725/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-9724](https://insights.sbomify.com/CVE-2019-9724/): Information disclosure in n/a (high 7.5)
- [CVE-2019-9723](https://insights.sbomify.com/CVE-2019-9723/): Path traversal in n/a (high 7.1)
- [CVE-2019-9721](https://insights.sbomify.com/CVE-2019-9721/): Denial of service in n/a (medium 6.5)
- [CVE-2019-9720](https://insights.sbomify.com/CVE-2019-9720/): Memory corruption in n/a (medium 6.5)
- [CVE-2019-9719](https://insights.sbomify.com/CVE-2019-9719/): Memory corruption in n/a (high 8.8)
- [CVE-2019-9718](https://insights.sbomify.com/CVE-2019-9718/): Denial of service in n/a (medium 6.5)
- [CVE-2019-9717](https://insights.sbomify.com/CVE-2019-9717/): Denial of service in n/a (medium 6.5)
- [CVE-2019-9714](https://insights.sbomify.com/CVE-2019-9714/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-9713](https://insights.sbomify.com/CVE-2019-9713/): Missing authorization in n/a (high 7.5)
- [CVE-2019-9712](https://insights.sbomify.com/CVE-2019-9712/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-9711](https://insights.sbomify.com/CVE-2019-9711/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-9710](https://insights.sbomify.com/CVE-2019-9710/): Webargs mishandles concurrent JSON parsing (high 8.1)
- [CVE-2019-9709](https://insights.sbomify.com/CVE-2019-9709/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2019-9708](https://insights.sbomify.com/CVE-2019-9708/): Business logic in n/a (medium 4.9)
- [CVE-2019-9706](https://insights.sbomify.com/CVE-2019-9706/): Use after free in n/a (medium 5.5)
- [CVE-2019-9705](https://insights.sbomify.com/CVE-2019-9705/): Denial of service in n/a (medium 5.5)
- [CVE-2019-9704](https://insights.sbomify.com/CVE-2019-9704/): Null dereference in n/a (medium 5.5)
- [CVE-2019-9703](https://insights.sbomify.com/CVE-2019-9703/): Symantec Endpoint Encryption, prior to SEE 11.3.0, may be susceptible to a privilege escalation vulnerability, which is a type of issue that (high 7.8)
- [CVE-2019-9702](https://insights.sbomify.com/CVE-2019-9702/): Privilege escalation in Endpoint Encryption (high 7.8)
- [CVE-2019-9701](https://insights.sbomify.com/CVE-2019-9701/): Cross-site scripting in Data Loss Prevention (medium 4.8)
- [CVE-2019-9700](https://insights.sbomify.com/CVE-2019-9700/): Other in Norton Password Manager (low 3.9)
- [CVE-2019-9699](https://insights.sbomify.com/CVE-2019-9699/): Information disclosure in Symantec Messaging Gateway (medium 4.5)
- [CVE-2019-9698](https://insights.sbomify.com/CVE-2019-9698/): Other in Symantec AV Engine (medium 5.5)
- [CVE-2019-9697](https://insights.sbomify.com/CVE-2019-9697/): Information disclosure in Management Center (MC) (medium 6.5)
- [CVE-2019-9696](https://insights.sbomify.com/CVE-2019-9696/): Cross-site scripting in Symantec VIP Enterprise Gateway (medium 6.1)
- [CVE-2019-9695](https://insights.sbomify.com/CVE-2019-9695/): Code injection in Norton Core (medium 6.8)
- [CVE-2019-9694](https://insights.sbomify.com/CVE-2019-9694/): Privilege escalation in Symantec Endpoint Encryption (high 7.8)
- [CVE-2019-9693](https://insights.sbomify.com/CVE-2019-9693/): SQL injection in n/a (high 8.8)
- [CVE-2019-9692](https://insights.sbomify.com/CVE-2019-9692/): File upload in n/a (medium 6.5)
- [CVE-2019-9689](https://insights.sbomify.com/CVE-2019-9689/): Memory corruption in n/a (high 7.5)
- [CVE-2019-9688](https://insights.sbomify.com/CVE-2019-9688/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2019-9687](https://insights.sbomify.com/CVE-2019-9687/): Memory corruption in n/a (critical 9.8)
- [CVE-2019-9686](https://insights.sbomify.com/CVE-2019-9686/): Path traversal in n/a (high 8.8)
- [CVE-2019-9682](https://insights.sbomify.com/CVE-2019-9682/): Weak cryptography in IPC-HX2XXX Series,IPC-HXXX5X4X Series,IPC-HX5842H,IPC-HX7842H,NVR 5x Series,NVR 4x Series,SD6AL Series,SD5A Series,SD1A Series,PTZ1A Series,SD50/52C Series,IPC-HDBW1320E-W (high 8.1)
- [CVE-2019-9681](https://insights.sbomify.com/CVE-2019-9681/): Information disclosure in IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X (medium 5.3)
- [CVE-2019-9680](https://insights.sbomify.com/CVE-2019-9680/): Information disclosure in IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X (medium 5.3)
- [CVE-2019-9679](https://insights.sbomify.com/CVE-2019-9679/): Missing authorization in IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X (high 8.8)
- [CVE-2019-9678](https://insights.sbomify.com/CVE-2019-9678/): Denial of service in IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X (high 7.5)
- [CVE-2019-9677](https://insights.sbomify.com/CVE-2019-9677/): Memory corruption in IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X (critical 9.8)
- [CVE-2019-9676](https://insights.sbomify.com/CVE-2019-9676/): Memory corruption in IPC-HFW1XXX,IPC-HDW1XXX,IPC-HFW2XXX (high 7.8)
- [CVE-2019-9675](https://insights.sbomify.com/CVE-2019-9675/): Memory corruption in n/a (high 8.1)
- [CVE-2019-9674](https://insights.sbomify.com/CVE-2019-9674/): Denial of service in n/a (high 7.5)
- [CVE-2019-9673](https://insights.sbomify.com/CVE-2019-9673/): Cross-site scripting in n/a (high 8.8)
- [CVE-2019-9670](https://insights.sbomify.com/CVE-2019-9670/): Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference (critical 9.8, exploited in the wild)
- [CVE-2019-9669](https://insights.sbomify.com/CVE-2019-9669/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-9668](https://insights.sbomify.com/CVE-2019-9668/): Denial of service in n/a (high 7.5)
- [CVE-2019-9662](https://insights.sbomify.com/CVE-2019-9662/): Path traversal in n/a (high 7.5)
- [CVE-2019-9661](https://insights.sbomify.com/CVE-2019-9661/): Cross-site scripting in n/a (medium 4.8)
- [CVE-2019-9660](https://insights.sbomify.com/CVE-2019-9660/): Cross-site scripting in n/a (medium 4.8)
- [CVE-2019-9659](https://insights.sbomify.com/CVE-2019-9659/): Security feature bypass in n/a (critical 9.1)
- [CVE-2019-9658](https://insights.sbomify.com/CVE-2019-9658/): Moderate severity vulnerability that affects com.puppycrawl.tools:checkstyle (medium 5.3)
- [CVE-2019-9657](https://insights.sbomify.com/CVE-2019-9657/): Missing authorization in n/a (high 7.8)
- [CVE-2019-9656](https://insights.sbomify.com/CVE-2019-9656/): Null dereference in n/a (high 8.8)
- [CVE-2019-9653](https://insights.sbomify.com/CVE-2019-9653/): Command injection in n/a (critical 9.8)
- [CVE-2019-9652](https://insights.sbomify.com/CVE-2019-9652/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2019-9651](https://insights.sbomify.com/CVE-2019-9651/): Code injection in n/a (critical 9.8)
- [CVE-2019-9650](https://insights.sbomify.com/CVE-2019-9650/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-9649](https://insights.sbomify.com/CVE-2019-9649/): Path traversal in n/a (medium 5.3)
- [CVE-2019-9648](https://insights.sbomify.com/CVE-2019-9648/): CoreFTP Directory Traversal (medium 5.3)
- [CVE-2019-9647](https://insights.sbomify.com/CVE-2019-9647/): Gila CMS 1.9.1 has XSS. (medium 6.1)
- [CVE-2019-9646](https://insights.sbomify.com/CVE-2019-9646/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2019-9644](https://insights.sbomify.com/CVE-2019-9644/): Improper Neutralization of Input During Web Page Generation in Jupyter Notebook (medium 5.4)
- [CVE-2019-9642](https://insights.sbomify.com/CVE-2019-9642/): Code injection in n/a (critical 9.8)
- [CVE-2019-9641](https://insights.sbomify.com/CVE-2019-9641/): Information disclosure in n/a (critical 9.8)
- [CVE-2019-9640](https://insights.sbomify.com/CVE-2019-9640/): Memory corruption in n/a (high 7.5)
- [CVE-2019-9639](https://insights.sbomify.com/CVE-2019-9639/): Information disclosure in n/a (high 7.5)
- [CVE-2019-9638](https://insights.sbomify.com/CVE-2019-9638/): Information disclosure in n/a (high 7.5)
- [CVE-2019-9637](https://insights.sbomify.com/CVE-2019-9637/): Race condition in n/a (high 7.5)
- [CVE-2019-9636](https://insights.sbomify.com/CVE-2019-9636/): Information disclosure in n/a (medium 5.3)
- [CVE-2019-9635](https://insights.sbomify.com/CVE-2019-9635/): NULL Pointer Dereference in Google TensorFlow (medium 6.5)
- [CVE-2019-9634](https://insights.sbomify.com/CVE-2019-9634/): Other in n/a (high 7.8)
- [CVE-2019-9633](https://insights.sbomify.com/CVE-2019-9633/): Null dereference in n/a (medium 6.5)
- [CVE-2019-9632](https://insights.sbomify.com/CVE-2019-9632/): Path traversal in n/a (high 7.5)
- [CVE-2019-9631](https://insights.sbomify.com/CVE-2019-9631/): Memory corruption in n/a (critical 9.8)
- [CVE-2019-9630](https://insights.sbomify.com/CVE-2019-9630/): Misconfiguration in n/a (high 7.5)
- [CVE-2019-9629](https://insights.sbomify.com/CVE-2019-9629/): Hardcoded credentials in n/a (critical 9.8)
- [CVE-2019-9628](https://insights.sbomify.com/CVE-2019-9628/): Denial of service in n/a (high 7.5)
- [CVE-2019-9627](https://insights.sbomify.com/CVE-2019-9627/): Memory corruption in n/a (high 7.0)
- [CVE-2019-9626](https://insights.sbomify.com/CVE-2019-9626/): SQL injection in n/a (critical 9.8)
- [CVE-2019-9625](https://insights.sbomify.com/CVE-2019-9625/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2019-9624](https://insights.sbomify.com/CVE-2019-9624/): File upload in n/a (high 7.8)
- [CVE-2019-9623](https://insights.sbomify.com/CVE-2019-9623/): File upload in n/a (critical 9.8)
- [CVE-2019-9622](https://insights.sbomify.com/CVE-2019-9622/): Path traversal in n/a (medium 4.3)
- [CVE-2019-9621](https://insights.sbomify.com/CVE-2019-9621/): Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) (high 7.5, exploited in the wild)
- [CVE-2019-9618](https://insights.sbomify.com/CVE-2019-9618/): Path traversal in n/a (critical 9.8)
- [CVE-2019-9617](https://insights.sbomify.com/CVE-2019-9617/): File upload in n/a (high 8.8)
- [CVE-2019-9616](https://insights.sbomify.com/CVE-2019-9616/): File upload in n/a (high 7.2)
- [CVE-2019-9615](https://insights.sbomify.com/CVE-2019-9615/): SQL injection in n/a (high 7.2)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/5/