Total
409326 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2019-25556 | 1 Pixarra | 1 Twistedbrush Pro Studio | 2026-06-17 | N/A | 6.2 MEDIUM |
| TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability in the Resize Image function that allows local attackers to crash the application by supplying an excessively long buffer. Attackers can paste a malicious string into the New Width or New Height field to trigger a buffer overflow that causes the application to crash. | |||||
| CVE-2019-25555 | 1 Pixarra | 1 Twistedbrush Pro Studio | 2026-06-17 | N/A | 6.2 MEDIUM |
| TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability in the Script Recorder component that allows local attackers to crash the application by supplying an excessively large buffer. Attackers can paste a malicious string containing 500,000 characters into the Description field of the Script Recorder dialog to trigger an application crash. | |||||
| CVE-2019-25554 | 1 Tomabo | 1 Mp4 Converter | 2026-06-17 | N/A | 5.5 MEDIUM |
| Tomabo MP4 Converter 3.25.22 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can trigger a buffer overflow by pasting a large payload into the Name parameter when adding a preset in the Video/Audio Formats options, causing the application to crash when Reset All is clicked. | |||||
| CVE-2019-25553 | 1 Cewe | 1 Photo Importer | 2026-06-17 | N/A | 6.2 MEDIUM |
| CEWE PHOTO IMPORTER 6.4.3 contains a denial of service vulnerability that allows local attackers to crash the application by importing a specially crafted image file. Attackers can create a malformed JPG file with an oversized buffer and trigger the crash through the import functionality during the image processing workflow. | |||||
| CVE-2019-25552 | 1 Cewe | 1 Photo Show | 2026-06-17 | N/A | 7.5 HIGH |
| CEWE PHOTO SHOW 6.4.3 contains a denial of service vulnerability that allows attackers to crash the application by submitting an excessively long buffer to the password field. Attackers can paste a large string of repeated characters into the password input during the upload process to trigger an application crash. | |||||
| CVE-2019-25551 | 1 Sandboxie-plus | 1 Sandboxie | 2026-06-17 | N/A | 6.2 MEDIUM |
| Sandboxie 5.30 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Program Alerts configuration field. Attackers can paste a buffer of 5000 characters into the 'Select or enter a program' field during program alert configuration to trigger an application crash. | |||||
| CVE-2019-25550 | 1 Verypdf | 1 Encrypt Pdf | 2026-06-17 | N/A | 6.2 MEDIUM |
| Encrypt PDF 2.3 contains a buffer overflow vulnerability that allows local attackers to crash the application by inputting excessively long strings into password fields. Attackers can paste a 1000-byte buffer into the User Password or Master Password field in the Settings dialog to trigger an application crash when importing PDF files. | |||||
| CVE-2019-25549 | 1 Verypdf | 1 Verypdf | 2026-06-17 | N/A | 6.2 MEDIUM |
| VeryPDF PCL Converter 2.7 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long password string. Attackers can trigger a buffer overflow by entering a 3000-byte password in the PDF Security encryption fields, causing the application to crash when processing PCL files. | |||||
| CVE-2019-25547 | 1 Spytech-web | 1 Netaware | 2026-06-17 | N/A | 6.2 MEDIUM |
| NetAware 1.20 contains a buffer overflow vulnerability in the User Blocking feature that allows local attackers to crash the application by supplying oversized input. Attackers can paste a malicious buffer of 512 bytes into the 'Add a website or keyword to be filtered' field and trigger a crash when removing the created block. | |||||
| CVE-2019-25546 | 1 Spytech-web | 1 Netaware | 2026-06-17 | N/A | 6.2 MEDIUM |
| NetAware 1.20 contains a buffer overflow vulnerability in the Share Name field that allows local attackers to crash the application by supplying an excessively long string. Attackers can trigger a denial of service by pasting a 1000-byte buffer into the Share Name parameter when adding a new share through the Manage Shares interface. | |||||
| CVE-2019-25545 | 1 Lizardsystems | 1 Terminal Services Manager | 2026-06-17 | N/A | 6.2 MEDIUM |
| Terminal Services Manager 3.2.1 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying an excessively long string in the computer name field. Attackers can input a 5000-byte buffer of data into the 'Computer name or IP address' field during computer addition, causing a denial of service when the server entry is accessed. | |||||
| CVE-2019-25544 | 1 Pidgin | 1 Pidgin | 2026-06-17 | N/A | 6.2 MEDIUM |
| Pidgin 2.13.0 contains a denial of service vulnerability that allows local attackers to crash the application by providing an excessively long username string during account creation. Attackers can input a buffer of 1000 characters in the username field and trigger a crash when joining a chat, causing the application to become unavailable. | |||||
| CVE-2019-25543 | 1 Netartmedia | 1 Real Estate Portal | 2026-06-17 | N/A | 8.2 HIGH |
| Netartmedia Real Estate Portal 5.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the page parameter. Attackers can submit POST requests to index.php with malicious SQL payloads in the page field to bypass authentication, extract sensitive data, or modify database contents. | |||||
| CVE-2019-25542 | 1 Netartmedia | 1 Real Estate Portal | 2026-06-17 | N/A | 8.2 HIGH |
| Netartmedia Real Estate Portal 5.0 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the user_email parameter. Attackers can send POST requests to index.php with malicious payloads in the user_email field to bypass authentication, extract sensitive data, or modify database contents. | |||||
| CVE-2019-25541 | 1 Netartmedia | 1 Php Mall | 2026-06-17 | N/A | 8.2 HIGH |
| Netartmedia PHP Mall 4.1 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through unvalidated parameters. Attackers can inject time-based blind SQL payloads via the 'id' parameter in index.php or the 'Email' parameter in loginaction.php to extract sensitive database information. | |||||
| CVE-2019-25540 | 1 Netartmedia | 1 Php Mall | 2026-06-17 | N/A | 8.2 HIGH |
| Netartmedia PHP Mall 4.1 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through various parameters. Attackers can craft malicious requests with SQL payloads to extract sensitive database information including user credentials and system data. | |||||
| CVE-2019-25539 | 1 Konradpl99 | 1 202cms | 2026-06-17 | N/A | 8.2 HIGH |
| 202CMS v10 beta contains a blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the log_user parameter. Attackers can send POST requests to index.php with crafted SQL payloads using time-based blind injection techniques to extract sensitive database information. | |||||
| CVE-2019-25538 | 1 Konradpl99 | 1 202cms | 2026-06-17 | N/A | 8.2 HIGH |
| 202CMS v10 beta contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the log_user parameter. Attackers can send crafted requests with malicious SQL statements in the log_user field to extract sensitive database information or modify database contents. | |||||
| CVE-2019-25537 | 2026-06-17 | N/A | 8.2 HIGH | ||
| Netartmedia Event Portal 2.0 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the Email parameter. Attackers can send POST requests to loginaction.php with malicious SQL payloads in the Email field to extract sensitive database information. | |||||
| CVE-2019-25536 | 1 Netartmedia | 1 Real Estate Portal | 2026-06-17 | N/A | 8.2 HIGH |
| Netartmedia PHP Real Estate Agency 4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the features[] parameter. Attackers can send POST requests to index.php with crafted SQL payloads in the features[] parameter to extract sensitive database information or manipulate database queries. | |||||