Total
409311 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2019-25358 | 2026-06-17 | N/A | 7.5 HIGH | ||
| FileOptimizer 14.00.2524 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the FileOptimizer32.ini configuration file. Attackers can overwrite the TempDirectory parameter with a 5000-character buffer to cause the application to crash when opening options. | |||||
| CVE-2019-25357 | 2026-06-17 | N/A | 8.4 HIGH | ||
| Control Center PRO 6.2.9 contains a stack-based buffer overflow vulnerability in the user creation module's username field that allows attackers to overwrite Structured Exception Handler (SEH). Attackers can craft a malicious payload exceeding 664 bytes to inject shellcode and potentially execute arbitrary code on vulnerable Windows systems. | |||||
| CVE-2019-25356 | 2026-06-17 | N/A | 6.1 MEDIUM | ||
| Bematech (formerly Logic Controls, now Elgin) MP-4200 TH printer contains a cross-site scripting vulnerability in the admin configuration page. Attackers can inject malicious scripts via crafted POST requests with malformed 'admin' and 'person' parameters, allowing execution of arbitrary JavaScript in the context of an authenticated user's browser session. | |||||
| CVE-2019-25355 | 1 Genivia | 1 Gsoap | 2026-06-17 | N/A | 7.5 HIGH |
| gSOAP 2.8 contains a directory traversal vulnerability that allows unauthenticated attackers to access system files by manipulating HTTP path traversal techniques. Attackers can retrieve sensitive files like /etc/passwd by sending crafted GET requests with multiple '../' directory traversal sequences. | |||||
| CVE-2019-25354 | 2026-06-17 | N/A | 7.5 HIGH | ||
| iSmartViewPro 1.3.34 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the camera ID input field. Attackers can paste a 257-character buffer into the camera DID and password fields to trigger an application crash on iOS devices. | |||||
| CVE-2019-25353 | 2026-06-17 | N/A | 7.5 HIGH | ||
| Foscam Video Management System 1.1.4.9 contains a denial of service vulnerability in the username input field that allows attackers to crash the application. Attackers can overwrite the username with a 520-byte buffer of repeated 'A' characters to trigger an application crash during device login. | |||||
| CVE-2019-25352 | 2026-06-17 | N/A | 7.5 HIGH | ||
| Crystal Live HTTP Server 6.01 contains a directory traversal vulnerability that allows remote attackers to access system files by manipulating URL path segments. Attackers can use multiple '../' sequences to navigate outside the web root and retrieve sensitive configuration files like Windows system files. | |||||
| CVE-2019-25351 | 2026-06-17 | N/A | 8.8 HIGH | ||
| Centova Cast 3.2.11 contains a file download vulnerability that allows authenticated attackers to retrieve arbitrary system files through the server.copyfile API endpoint. Attackers can exploit the vulnerability by supplying crafted parameters to download sensitive files like /etc/passwd using curl and wget requests. | |||||
| CVE-2019-25350 | 2026-06-17 | N/A | 7.5 HIGH | ||
| XMedia Recode 3.4.8.6 contains a denial of service vulnerability that allows attackers to crash the application by loading a specially crafted .m3u playlist file. Attackers can create a malicious .m3u file with an oversized buffer to trigger an application crash when the file is opened. | |||||
| CVE-2019-25349 | 2026-06-17 | N/A | 7.5 HIGH | ||
| ScadaApp for iOS 1.1.4.0 contains a denial of service vulnerability that allows attackers to crash the application by inputting an oversized buffer in the Servername field. Attackers can paste a 257-character buffer during login to trigger an application crash on iOS devices. | |||||
| CVE-2019-25347 | 1 Kostasmitroglou | 1 Password Management Application | 2026-06-17 | N/A | 7.5 HIGH |
| thesystem App 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating the username parameter. Attackers can inject malicious SQL code like ' or '1=1 to the username field to gain unauthorized access to user accounts. | |||||
| CVE-2019-25346 | 1 Kostasmitroglou | 1 Password Management Application | 2026-06-17 | N/A | 7.5 HIGH |
| TheSystem 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating the 'server_name' parameter. Attackers can inject malicious SQL code like ' or '1=1 to retrieve unauthorized database records and potentially access sensitive system information. | |||||
| CVE-2019-25345 | 2026-06-17 | N/A | 7.8 HIGH | ||
| Realtek IIS Codec Service 6.4.10041.133 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in the service configuration to inject malicious executables and escalate privileges on the system. | |||||
| CVE-2019-25344 | 1 Wondershare | 1 Mobilego | 2026-06-17 | N/A | 7.8 HIGH |
| Wondershare MobileGo 8.5.0 contains an insecure file permissions vulnerability that allows local users to modify executable files in the application directory. Attackers can replace the original MobileGo.exe with a malicious executable to create a new user account and add it to the Administrators group with full system access. | |||||
| CVE-2019-25343 | 2026-06-17 | N/A | 7.8 HIGH | ||
| NextVPN 4.10 contains an insecure file permissions vulnerability that allows local users to modify executable files with full access rights. Attackers can replace system executables with malicious files to gain SYSTEM or Administrator privileges through unauthorized file modification. | |||||
| CVE-2019-25342 | 2026-06-17 | N/A | 7.5 HIGH | ||
| Centova Cast 3.2.12 contains a denial of service vulnerability that allows attackers to overwhelm the system by repeatedly calling the database export API endpoint. Attackers can trigger 100% CPU load by sending multiple concurrent requests to the /api.php endpoint with crafted parameters. | |||||
| CVE-2019-25341 | 2026-06-17 | N/A | 7.5 HIGH | ||
| iNetTools for iOS 8.20 contains a denial of service vulnerability in the Whois feature that allows attackers to crash the application by manipulating input. Attackers can paste a specially crafted 98-character buffer into the Domain Name field to trigger an application crash. | |||||
| CVE-2019-25340 | 1 Nsasoft | 1 Spotauditor | 2026-06-17 | N/A | 7.5 HIGH |
| SpotAuditor 5.3.2 contains a denial of service vulnerability in its Base64 decryption feature that allows attackers to crash the application by supplying an oversized buffer. Attackers can generate a malformed input file with 2000 repeated characters to trigger an application crash when pasted into the Base64 Encrypted Password field. | |||||
| CVE-2019-25339 | 2026-06-17 | N/A | 7.5 HIGH | ||
| GHIA CamIP 1.2 for iOS contains a denial of service vulnerability in the password input field that allows attackers to crash the application. Attackers can paste a 33-character buffer of repeated characters into the password field to trigger an application crash on iOS devices. | |||||
| CVE-2019-25338 | 1 Dokuwiki | 1 Dokuwiki | 2026-06-17 | N/A | 5.3 MEDIUM |
| DokuWiki 2018-04-22b contains a username enumeration vulnerability in its password reset functionality that allows attackers to identify valid user accounts. Attackers can submit different usernames to the password reset endpoint and distinguish between existing and non-existing accounts by analyzing the server's error response messages. | |||||