2019 CVEs (page 2)
Page 2 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-25662 | High | 8.2 | 2026-04-05 | ResourceSpace 8.6 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code th… |
CVE-2019-25661 | Medium | 6.2 | 2026-04-05 | Remote Process Explorer 1.0.0.16 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by sending a crafted payload… |
CVE-2019-25660 | Medium | 6.2 | 2026-04-05 | LanHelper 1.74 contains a local buffer overflow vulnerability that allows attackers to crash the application by sending excessively long input strings. Attacke… |
CVE-2019-25659 | Medium | 6.2 | 2026-04-05 | ASPRunner Professional 6.0.766 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by supplying an excessively lo… |
CVE-2019-25658 | Medium | 5.5 | 2026-04-05 | a-Mac Address Change 5.4 contains a local buffer overflow vulnerability that allows local attackers to crash the application by supplying oversized input to re… |
CVE-2019-25657 | Medium | 5.5 | 2026-04-05 | AnyBurn 4.3 x86 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string to the… |
CVE-2019-25656 | High | 8.4 | 2026-04-05 | R i386 3.5.0 contains a local buffer overflow vulnerability in the GUI Preferences dialog that allows local attackers to trigger a structured exception handler… |
CVE-2019-25655 | Medium | 6.2 | 2026-03-30 | Device Monitoring Studio 8.10.00.8925 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessive… |
CVE-2019-25654 | High | 7.5 | 2026-03-30 | Core FTP/SFTP Server 1.2 contains a buffer overflow vulnerability that allows attackers to crash the service by supplying an excessively long string in the Use… |
CVE-2019-25653 | Medium | 6.2 | 2026-03-30 | Navicat for Oracle 12.1.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long str… |
CVE-2019-25652 | High | 7.5 | 2026-03-27 | UniFi Network Controller before version 5.10.22 and 5.11.x before 5.11.18 contains an improper certificate verification vulnerability that allows adjacent netw… |
CVE-2019-25651 | High | 8.3 | 2026-03-27 | Ubiquiti UniFi Network Controller prior to 5.10.12 (excluding 5.6.42), UAP FW prior to 4.0.6, UAP-AC, UAP-AC v2, and UAP-AC Outdoor FW prior to 3.8.17, USW FW… |
CVE-2019-25650 | High | 8.4 | 2026-03-26 | River Past CamDo 3.7.6 contains a structured exception handler (SEH) buffer overflow vulnerability that allows local attackers to execute arbitrary code by sup… |
CVE-2019-25649 | Medium | 5.5 | 2026-03-26 | River Past Audio Converter 7.7.16 contains a local buffer overflow vulnerability in the activation code field that allows local attackers to crash the applicat… |
CVE-2019-25648 | Medium | 6.2 | 2026-03-26 | MyVideoConverter Pro 3.14 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying an excessively long string… |
CVE-2019-25647 | High | 8.8 | 2026-03-24 | PhreeBooks ERP 5.2.3 contains a remote code execution vulnerability in the image manager that allows authenticated attackers to upload and execute arbitrary PH… |
CVE-2019-25646 | Critical | 9.8 | 2026-03-24 | Tabs Mail Carrier 2.5.1 contains a buffer overflow vulnerability in the MAIL FROM SMTP command that allows remote attackers to execute arbitrary code by sendin… |
CVE-2019-25645 | Medium | 6.2 | 2026-03-24 | WinAVI iPod/3GP/MP4/PSP Converter 4.4.2 contains a denial of service vulnerability that allows local attackers to crash the application by processing malformed… |
CVE-2019-25644 | Medium | 6.2 | 2026-03-24 | WinMPG Video Convert 9.3.5 and older versions contain a buffer overflow vulnerability in the registration dialog that allows local attackers to crash the appli… |
CVE-2019-25643 | High | 8.2 | 2026-03-24 | eNdonesia Portal v8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malici… |
CVE-2019-25642 | High | 8.2 | 2026-03-24 | Bootstrapy CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious cod… |
CVE-2019-25641 | High | 8.2 | 2026-03-24 | Netartmedia Vlog System contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code thro… |
CVE-2019-25640 | High | 8.2 | 2026-03-24 | Inout Article Base CMS contains SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the 'p' and 'u' param… |
CVE-2019-25639 | High | 8.2 | 2026-03-24 | Matrimony Website Script M-Plus contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injectin… |
CVE-2019-25638 | High | 7.1 | 2026-03-24 | Meeplace Business Review Script contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting mal… |
CVE-2019-25637 | High | 8.4 | 2026-03-24 | X-NetStat Pro 5.63 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the EIP register through… |
CVE-2019-25636 | High | 8.2 | 2026-03-24 | Zeeways Jobsite CMS contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through… |
CVE-2019-25635 | High | 8.2 | 2026-03-24 | Zeeways Matrimony CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the profile_l… |
CVE-2019-25634 | High | 8.4 | 2026-03-24 | Base64 Decoder 1.1.2 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by triggering a structured exce… |
CVE-2019-25633 | High | 8.4 | 2026-03-24 | AIDA64 Extreme 5.99.4900 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supply… |
CVE-2019-25632 | Medium | 6.2 | 2026-03-24 | phpFileManager 1.7.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the action, fm… |
CVE-2019-25631 | High | 8.4 | 2026-03-24 | AIDA64 Business 5.99.4900 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by overw… |
CVE-2019-25630 | High | 8.8 | 2026-03-24 | PhreeBooks ERP 5.2.3 contains an arbitrary file upload vulnerability in the Image Manager component that allows authenticated attackers to upload malicious fil… |
CVE-2019-25629 | High | 8.4 | 2026-03-24 | AIDA64 Extreme 5.99.4900 contains a structured exception handler buffer overflow vulnerability in the logging functionality that allows local attackers to exec… |
CVE-2019-25628 | Critical | 9.8 | 2026-03-24 | Download Accelerator Plus DAP 10.0.6.0 contains a structured exception handler buffer overflow vulnerability that allows remote attackers to execute arbitrary… |
CVE-2019-25627 | High | 8.4 | 2026-03-24 | FlexHEX 2.71 contains a local buffer overflow vulnerability in the Stream Name field that allows local attackers to execute arbitrary code by triggering a stru… |
CVE-2019-25626 | High | 8.4 | 2026-03-24 | River Past Cam Do 3.7.6 contains a local buffer overflow vulnerability in the activation code input field that allows local attackers to execute arbitrary code… |
CVE-2019-25625 | Medium | 6.2 | 2026-03-23 | Blob Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed input through the key e… |
CVE-2019-25624 | Medium | 6.2 | 2026-03-23 | Liquid Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed input through the key… |
CVE-2019-25623 | Medium | 6.2 | 2026-03-23 | Luminance Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed input through the… |
CVE-2019-25622 | Medium | 6.2 | 2026-03-23 | Paint Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed input through the key… |
CVE-2019-25621 | Medium | 6.2 | 2026-03-23 | Pixel Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed input through the keyb… |
CVE-2019-25620 | Medium | 6.2 | 2026-03-23 | Tree Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed input through the keybo… |
CVE-2019-25619 | High | 8.4 | 2026-03-22 | FTP Shell Server 6.83 contains a buffer overflow vulnerability in the 'Account name to ban' field that allows local attackers to execute arbitrary code by supp… |
CVE-2019-25618 | Medium | 6.2 | 2026-03-22 | AdminExpress 1.2.5 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input through the Sy… |
CVE-2019-25617 | Medium | 6.2 | 2026-03-22 | Ease Audio Converter 5.30 contains a denial of service vulnerability in the Audio Cutter function that allows local attackers to crash the application by proce… |
CVE-2019-25616 | Medium | 6.2 | 2026-03-22 | AnMing MP3 CD Burner 2.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized string. Attack… |
CVE-2019-25615 | High | 8.4 | 2026-03-22 | Lavavo CD Ripper 4.20 contains a structured exception handling (SEH) buffer overflow vulnerability that allows local attackers to execute arbitrary code by sup… |
CVE-2019-25614 | Critical | 9.8 | 2026-03-22 | Free Float FTP 1.0 contains a buffer overflow vulnerability in the STOR command handler that allows remote attackers to execute arbitrary code by sending a cra… |
CVE-2019-25613 | High | 7.5 | 2026-03-22 | Easy Chat Server 3.1 contains a denial of service vulnerability that allows remote attackers to crash the application by sending oversized data in the message… |
CVE-2019-25612 | High | 7.8 | 2026-03-22 | Admin Express 1.2.5.485 contains a local structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by s… |
CVE-2019-25611 | High | 8.4 | 2026-03-22 | MiniFtp contains a buffer overflow vulnerability in the parseconf_load_setting function that allows local attackers to execute arbitrary code by supplying over… |
CVE-2019-25610 | Medium | 6.5 | 2026-03-22 | NetNumber Titan Master 7.9.1 contains a path traversal vulnerability in the drp endpoint that allows authenticated users to download arbitrary files by injecti… |
CVE-2019-25609 | High | 8.4 | 2026-03-22 | JetAudio jetCast Server 2.0 contains a stack-based buffer overflow vulnerability in the Log Directory configuration field that allows local attackers to overwr… |
CVE-2019-25608 | High | 8.4 | 2026-03-22 | Iperius Backup 6.1.0 contains a privilege escalation vulnerability that allows low-privilege users to execute arbitrary programs with elevated privileges by cr… |
CVE-2019-25607 | High | 8.4 | 2026-03-22 | Axessh 4.2 contains a stack-based buffer overflow vulnerability in the log file name field that allows local attackers to execute arbitrary code by supplying a… |
CVE-2019-25606 | Medium | 5.5 | 2026-03-22 | Fast AVI MPEG Joiner 1.2.0812 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload i… |
CVE-2019-25605 | High | 7.5 | 2026-03-22 | EquityPandit 1.0 contains an insecure logging vulnerability that allows attackers to capture sensitive user credentials by accessing developer console logs via… |
CVE-2019-25604 | High | 8.4 | 2026-03-22 | DVDXPlayer Pro 5.5 contains a local buffer overflow vulnerability with structured exception handling that allows local attackers to execute arbitrary code by c… |
CVE-2019-25603 | High | 8.4 | 2026-03-22 | TuneClone 2.20 contains a structured exception handler (SEH) buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a… |
CVE-2019-25602 | Medium | 5.5 | 2026-03-22 | GSearch 1.0.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by inputting an excessively long string in the… |
CVE-2019-25601 | Medium | 6.2 | 2026-03-22 | UltraVNC Launcher 1.2.2.4 contains a buffer overflow vulnerability in the Path vncviewer.exe property field that allows local attackers to crash the applicatio… |
CVE-2019-25600 | Medium | 6.5 | 2026-03-22 | UltraVNC Viewer 1.2.2.4 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized string to the VNC S… |
CVE-2019-25599 | Medium | 6.2 | 2026-03-22 | Backup Key Recovery 2.2.4 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long stri… |
CVE-2019-25598 | Medium | 6.2 | 2026-03-22 | HeidiSQL Portable 10.1.0.5464 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long… |
CVE-2019-25597 | Medium | 6.2 | 2026-03-22 | NSauditor 3.1.2.0 contains a buffer overflow vulnerability in the SNMP Auditor Community field that allows local attackers to crash the application by supplyin… |
CVE-2019-25596 | Medium | 6.2 | 2026-03-22 | SpotAuditor 5.2.6 contains a denial of service vulnerability in the registration dialog that allows local attackers to crash the application by supplying an ex… |
CVE-2019-25595 | Medium | 6.2 | 2026-03-22 | jetAudio 8.1.7.20702 Basic contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long str… |
CVE-2019-25594 | Medium | 6.2 | 2026-03-22 | ASPRunner.NET 10.1 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in t… |
CVE-2019-25593 | Medium | 5.5 | 2026-03-22 | jetCast Server 2.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in t… |
CVE-2019-25592 | Medium | 6.2 | 2026-03-22 | PHPRunner 10.1 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the d… |
CVE-2019-25591 | Medium | 6.2 | 2026-03-22 | DNSS Domain Name Search Software 2.1.8 contains a buffer overflow vulnerability in the registration code input field that allows local attackers to crash the a… |
CVE-2019-25590 | Medium | 6.2 | 2026-03-22 | Axessh 4.2 contains a denial of service vulnerability in the logging configuration that allows local attackers to crash the application by supplying an excessi… |
CVE-2019-25589 | Medium | 6.2 | 2026-03-22 | ZOC Terminal 7.23.4 contains a buffer overflow vulnerability in the Shell field of Program Settings that allows local attackers to crash the application by sup… |
CVE-2019-25588 | Medium | 6.2 | 2026-03-22 | BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the DNS Address field that allows local attackers to crash the application by… |
CVE-2019-25587 | Medium | 6.2 | 2026-03-22 | BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the Storage-Path configuration parameter that allows local attackers to crash… |
CVE-2019-25586 | Medium | 6.2 | 2026-03-22 | Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the UR… |
CVE-2019-25585 | Medium | 6.2 | 2026-03-22 | Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the We… |
CVE-2019-25584 | Medium | 6.2 | 2026-03-22 | RarmaRadio 2.72.3 contains a buffer overflow vulnerability in the Server field of the Network settings that allows local attackers to crash the application by… |
CVE-2019-25583 | Medium | 6.2 | 2026-03-22 | RarmaRadio 2.72.3 contains a denial of service vulnerability in the Username field that allows local attackers to crash the application by submitting excessive… |
CVE-2019-25582 | Medium | 6.5 | 2026-03-21 | i-doit CMDB 1.12 contains an arbitrary file download vulnerability that allows authenticated attackers to download sensitive files by manipulating the file par… |
CVE-2019-25581 | High | 8.2 | 2026-03-21 | i-doit CMDB 1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code thr… |
CVE-2019-25580 | High | 8.2 | 2026-03-21 | ownDMS 4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through t… |
CVE-2019-25579 | High | 7.5 | 2026-03-21 | phpTransformer 2016.9 contains a directory traversal vulnerability that allows unauthenticated attackers to access arbitrary files by manipulating the path par… |
CVE-2019-25578 | High | 8.2 | 2026-03-21 | phpTransformer 2016.9 contains an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through… |
CVE-2019-25577 | Medium | 5.5 | 2026-03-21 | SeoToaster Ecommerce 3.0.0 contains a local file inclusion vulnerability that allows authenticated attackers to read arbitrary files by manipulating path param… |
CVE-2019-25576 | High | 8.2 | 2026-03-21 | Kepler Wallpaper Script 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicio… |
CVE-2019-25575 | High | 8.2 | 2026-03-21 | SimplePress CMS 1.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious cod… |
CVE-2019-25574 | Medium | 6.5 | 2026-03-21 | Green CMS 2.x contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files and directories by injecting directory tr… |
CVE-2019-25573 | High | 7.1 | 2026-03-21 | Green CMS 2.x contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through… |
CVE-2019-25572 | Medium | 6.2 | 2026-03-21 | NordVPN 6.19.6 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the… |
CVE-2019-25571 | Medium | 6.2 | 2026-03-21 | MediaMonkey 4.1.23 contains a denial of service vulnerability that allows local attackers to crash the application by opening a specially crafted MP3 file cont… |
CVE-2019-25570 | Medium | 5.5 | 2026-03-21 | RealTerm Serial Terminal 2.0.0.70 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively l… |
CVE-2019-25569 | Medium | 6.2 | 2026-03-21 | RealTerm Serial Terminal 2.0.0.70 contains a stack-based buffer overflow vulnerability in the Echo Port field that allows local attackers to crash the applicat… |
CVE-2019-25568 | Critical | 9.8 | 2026-03-21 | Memu Play 6.0.7 contains an insecure file permissions vulnerability that allows low-privilege users to escalate privileges by replacing the MemuService.exe exe… |
CVE-2019-25567 | Medium | 6.2 | 2026-03-21 | Valentina Studio 9.0.5 Linux contains a buffer overflow vulnerability in the Host field of the connection dialog that allows local attackers to crash the appli… |
CVE-2019-25566 | Medium | 6.2 | 2026-03-21 | TransMac 12.3 contains a buffer overflow vulnerability in the volume name field that allows local attackers to crash the application by supplying an excessivel… |
CVE-2019-25565 | Medium | 6.2 | 2026-03-21 | Magic Iso Maker 5.5 build 281 contains a buffer overflow vulnerability in the Serial Code registration field that allows local attackers to crash the applicati… |
CVE-2019-25564 | Medium | 5.5 | 2026-03-21 | PCHelpWareV2 1.0.0.5 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in… |
CVE-2019-25563 | Medium | 6.2 | 2026-03-21 | PCHelpWareV2 1.0.0.5 contains a denial of service vulnerability that allows local attackers to crash the application by supplying a malformed image file. Attac… |