2019 CVEs (page 3)
Page 3 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-25562 | Medium | 5.5 | 2026-03-21 | jetAudio 8.1.7 contains a buffer overflow vulnerability in the video converter component that allows local attackers to crash the application by supplying an o… |
CVE-2019-25561 | Medium | 6.2 | 2026-03-21 | Lyric Maker 2.0.1.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in th… |
CVE-2019-25560 | High | 7.5 | 2026-03-21 | Lyric Video Creator 2.1 contains a denial of service vulnerability that allows attackers to crash the application by processing malformed MP3 files. Attackers… |
CVE-2019-25559 | Medium | 5.5 | 2026-03-21 | SpotPaltalk 1.1.5 contains a denial of service vulnerability in the registration code input field that allows local attackers to crash the application by submi… |
CVE-2019-25558 | Medium | 6.2 | 2026-03-21 | Selfie Studio 2.17 contains a denial of service vulnerability in the Resize Image function that allows local attackers to crash the application by supplying an… |
CVE-2019-25557 | Medium | 6.2 | 2026-03-21 | TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability that allows local attackers to crash the application by importing a malformed .srp scr… |
CVE-2019-25556 | Medium | 6.2 | 2026-03-21 | TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability in the Resize Image function that allows local attackers to crash the application by s… |
CVE-2019-25555 | Medium | 6.2 | 2026-03-21 | TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability in the Script Recorder component that allows local attackers to crash the application… |
CVE-2019-25554 | Medium | 5.5 | 2026-03-21 | Tomabo MP4 Converter 3.25.22 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long s… |
CVE-2019-25553 | Medium | 6.2 | 2026-03-21 | CEWE PHOTO IMPORTER 6.4.3 contains a denial of service vulnerability that allows local attackers to crash the application by importing a specially crafted imag… |
CVE-2019-25552 | High | 7.5 | 2026-03-21 | CEWE PHOTO SHOW 6.4.3 contains a denial of service vulnerability that allows attackers to crash the application by submitting an excessively long buffer to the… |
CVE-2019-25551 | Medium | 6.2 | 2026-03-21 | Sandboxie 5.30 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the P… |
CVE-2019-25550 | Medium | 6.2 | 2026-03-21 | Encrypt PDF 2.3 contains a buffer overflow vulnerability that allows local attackers to crash the application by inputting excessively long strings into passwo… |
CVE-2019-25549 | Medium | 6.2 | 2026-03-21 | VeryPDF PCL Converter 2.7 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long pass… |
CVE-2019-25548 | Medium | 6.2 | 2026-03-21 | BlueStacks 4.80.0.1060 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to the sea… |
CVE-2019-25547 | Medium | 6.2 | 2026-03-21 | NetAware 1.20 contains a buffer overflow vulnerability in the User Blocking feature that allows local attackers to crash the application by supplying oversized… |
CVE-2019-25546 | Medium | 6.2 | 2026-03-21 | NetAware 1.20 contains a buffer overflow vulnerability in the Share Name field that allows local attackers to crash the application by supplying an excessively… |
CVE-2019-25545 | Medium | 6.2 | 2026-03-21 | Terminal Services Manager 3.2.1 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying an excessively long… |
CVE-2019-25544 | Medium | 6.2 | 2026-03-21 | Pidgin 2.13.0 contains a denial of service vulnerability that allows local attackers to crash the application by providing an excessively long username string… |
CVE-2019-25543 | High | 8.2 | 2026-03-12 | Netartmedia Real Estate Portal 5.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQ… |
CVE-2019-25542 | High | 8.2 | 2026-03-12 | Netartmedia Real Estate Portal 5.0 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL… |
CVE-2019-25541 | High | 8.2 | 2026-03-12 | Netartmedia PHP Mall 4.1 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through unvalidate… |
CVE-2019-25540 | High | 8.2 | 2026-03-12 | Netartmedia PHP Mall 4.1 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL c… |
CVE-2019-25539 | High | 8.2 | 2026-03-12 | 202CMS v10 beta contains a blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through… |
CVE-2019-25538 | High | 8.2 | 2026-03-12 | 202CMS v10 beta contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the… |
CVE-2019-25537 | High | 8.2 | 2026-03-12 | Netartmedia Event Portal 2.0 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by in… |
CVE-2019-25536 | High | 8.2 | 2026-03-12 | Netartmedia PHP Real Estate Agency 4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by inject… |
CVE-2019-25535 | High | 8.2 | 2026-03-12 | Netartmedia PHP Dating Site contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code t… |
CVE-2019-25534 | High | 8.2 | 2026-03-12 | Netartmedia PHP Car Dealer contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting maliciou… |
CVE-2019-25533 | High | 8.2 | 2026-03-12 | Netartmedia PHP Business Directory 4.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injectin… |
CVE-2019-25532 | High | 8.2 | 2026-03-12 | Netartmedia Jobs Portal 6.1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code… |
CVE-2019-25531 | High | 8.2 | 2026-03-12 | Netartmedia Deals Portal contains an SQL injection vulnerability in the Email parameter of loginaction.php that allows unauthenticated attackers to manipulate… |
CVE-2019-25530 | High | 8.2 | 2026-03-12 | uHotelBooking System contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through… |
CVE-2019-25529 | High | 7.1 | 2026-03-12 | Placeto CMS Alpha rv.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through… |
CVE-2019-25528 | High | 8.2 | 2026-03-12 | Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting… |
CVE-2019-25527 | High | 8.2 | 2026-03-12 | Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting… |
CVE-2019-25526 | High | 8.2 | 2026-03-12 | Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting… |
CVE-2019-25525 | High | 8.2 | 2026-03-12 | Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting… |
CVE-2019-25524 | High | 8.2 | 2026-03-12 | XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through th… |
CVE-2019-25523 | High | 8.2 | 2026-03-12 | XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through th… |
CVE-2019-25522 | High | 8.2 | 2026-03-12 | XooGallery Latest contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code thr… |
CVE-2019-25521 | High | 8.2 | 2026-03-12 | XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through th… |
CVE-2019-25520 | High | 8.2 | 2026-03-12 | Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an authentication bypass vulnerability in the administration panel that allows unauthenticated attackers to… |
CVE-2019-25519 | High | 8.2 | 2026-03-12 | Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting malicious S… |
CVE-2019-25518 | High | 8.2 | 2026-03-12 | Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injec… |
CVE-2019-25517 | High | 8.2 | 2026-03-12 | Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injec… |
CVE-2019-25516 | High | 8.2 | 2026-03-12 | Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injec… |
CVE-2019-25515 | High | 7.5 | 2026-03-12 | Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an authentication bypass vulnerability in the login.php administration panel that allows unauthenticated att… |
CVE-2019-25514 | High | 8.2 | 2026-03-12 | Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows attackers to inject malicious SQL commands through the kelime par… |
CVE-2019-25513 | High | 8.2 | 2026-03-12 | Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injec… |
CVE-2019-25512 | High | 8.2 | 2026-03-12 | Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows attackers to inject malicious SQL commands through the kelime par… |
CVE-2019-25511 | High | 8.2 | 2026-03-12 | Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injec… |
CVE-2019-25510 | High | 8.2 | 2026-03-12 | Jettweb PHP Hazir Haber Sitesi Scripti V2 contains an authentication bypass vulnerability in the administration panel that allows unauthenticated attackers to… |
CVE-2019-25509 | High | 8.2 | 2026-03-12 | XooDigital Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through th… |
CVE-2019-25508 | High | 8.2 | 2026-03-12 | Jettweb Php Hazir Ilan Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by inject… |
CVE-2019-25488 | High | 8.2 | 2026-03-12 | Jettweb Hazir Rent A Car Scripti V4 contains multiple SQL injection vulnerabilities in the admin panel that allow unauthenticated attackers to manipulate datab… |
CVE-2019-25482 | High | 8.2 | 2026-03-12 | Jettweb PHP Hazir Rent A Car Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by… |
CVE-2019-25481 | High | 8.2 | 2026-03-12 | iScripts ReserveLogic contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code throug… |
CVE-2019-25479 | High | 8.2 | 2026-03-12 | Inout RealEstate contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the… |
CVE-2019-25473 | High | 7.1 | 2026-03-12 | Clinic Pro contains a SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the month pa… |
CVE-2019-25487 | Critical | 9.8 | 2026-03-11 | SAPIDO RB-1732 V2.0.43 contains a remote command execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitti… |
CVE-2019-25486 | High | 8.2 | 2026-03-11 | Varient 1.6.1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the us… |
CVE-2019-25485 | Medium | 6.2 | 2026-03-11 | R 3.4.4 on Windows x64 contains a buffer overflow vulnerability in the GUI Preferences language menu field that allows local attackers to bypass DEP and ASLR p… |
CVE-2019-25484 | Medium | 6.2 | 2026-03-11 | WinMPG iPod Convert 3.0 contains a buffer overflow vulnerability in the Register dialog that allows local attackers to crash the application by supplying an ov… |
CVE-2019-25483 | High | 8.4 | 2026-03-11 | Comtrend AR-5310 GE31-412SSG-C01_R10.A2pG039u.d24k contains a restricted shell escape vulnerability that allows local users to bypass command restrictions by u… |
CVE-2019-25480 | High | 7.5 | 2026-03-11 | ARMBot contains an unrestricted file upload vulnerability in upload.php that allows unauthenticated attackers to upload arbitrary files by manipulating the fil… |
CVE-2019-25478 | High | 7.5 | 2026-03-11 | GetGo Download Manager 6.2.2.3300 contains a buffer overflow vulnerability that allows remote attackers to cause denial of service by sending HTTP responses wi… |
CVE-2019-25477 | Medium | 6.2 | 2026-03-11 | RAR Password Recovery 1.80 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload in t… |
CVE-2019-25476 | Medium | 6.2 | 2026-03-11 | Outlook Password Recovery 2.10 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload… |
CVE-2019-25475 | Medium | 6.2 | 2026-03-11 | SQL Server Password Changer 1.90 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payloa… |
CVE-2019-25474 | Medium | 6.2 | 2026-03-11 | Easy MP3 Downloader 4.7.8.8 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long unlo… |
CVE-2019-25472 | High | 7.5 | 2026-03-11 | IntelBras Telefone IP TIP200 and 200 LITE contain an unauthenticated arbitrary file read vulnerability in the dumpConfigFile function accessible via the cgiSer… |
CVE-2019-25471 | Critical | 9.8 | 2026-03-11 | FileThingie 2.5.7 contains an arbitrary file upload vulnerability that allows attackers to upload malicious files by sending ZIP archives through the ft2.php e… |
CVE-2019-25470 | High | 7.5 | 2026-03-11 | eWON Firmware versions 12.2 to 13.0 contain an authentication bypass vulnerability that allows attackers with minimal privileges to retrieve sensitive user dat… |
CVE-2019-25469 | Medium | 6.2 | 2026-03-11 | Folder Lock 7.7.9 contains a buffer overflow vulnerability in the serial number registration field that allows local attackers to crash the application by subm… |
CVE-2019-25468 | Critical | 9.8 | 2026-03-11 | NetGain EM Plus 10.1.68 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting… |
CVE-2019-25467 | High | 8.4 | 2026-03-11 | Verypdf docPrint Pro 8.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supply… |
CVE-2019-25466 | High | 8.4 | 2026-03-11 | Easy File Sharing Web Server 7.2 contains a local structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary… |
CVE-2019-25465 | High | 7.5 | 2026-03-11 | Hisilicon HiIpcam V100R003 contains a directory traversal vulnerability that allows unauthenticated attackers to access sensitive configuration files by exploi… |
CVE-2019-25464 | Medium | 5.5 | 2026-03-11 | InputMapper 1.6.10 contains a buffer overflow vulnerability in the username field that allows local attackers to crash the application by entering an excessive… |
CVE-2019-25463 | Medium | 6.2 | 2026-03-11 | SpotIE Internet Explorer Password Recovery 2.9.5 contains a denial of service vulnerability in the registration key input field that allows local attackers to… |
CVE-2019-25507 | High | 8.2 | 2026-03-04 | Ashop Shopping Cart Software contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code… |
CVE-2019-25506 | High | 8.2 | 2026-03-04 | FreeSMS 2.1.2 contains a boolean-based blind SQL injection vulnerability in the password parameter that allows unauthenticated attackers to bypass authenticati… |
CVE-2019-25505 | High | 7.1 | 2026-03-04 | Tradebox 5.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the symbo… |
CVE-2019-25504 | High | 8.2 | 2026-03-04 | NCrypted Jobgator contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through th… |
CVE-2019-25503 | High | 7.1 | 2026-03-04 | PHPads 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through t… |
CVE-2019-25502 | Medium | 6.1 | 2026-03-04 | Simple Job Script contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the job_type_… |
CVE-2019-25501 | High | 8.2 | 2026-03-04 | Simple Job Script contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting malicious SQL code through the app_… |
CVE-2019-25500 | High | 8.2 | 2026-03-04 | Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through th… |
CVE-2019-25499 | High | 8.2 | 2026-03-04 | Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through th… |
CVE-2019-25498 | High | 8.2 | 2026-03-04 | Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through th… |
CVE-2019-25497 | High | 8.2 | 2026-02-27 | osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through th… |
CVE-2019-25496 | High | 8.2 | 2026-02-27 | osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through th… |
CVE-2019-25495 | High | 8.2 | 2026-02-27 | osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through th… |
CVE-2019-25494 | High | 8.2 | 2026-02-27 | Homey BNB V4 contains an SQL injection vulnerability in the administration panel login that allows unauthenticated attackers to bypass authentication by inject… |
CVE-2019-25493 | High | 8.2 | 2026-02-27 | Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'va… |
CVE-2019-25492 | High | 8.2 | 2026-02-27 | Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'pt… |
CVE-2019-25491 | High | 8.2 | 2026-02-27 | Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cat… |
CVE-2019-25490 | High | 8.2 | 2026-02-27 | Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'id'… |
CVE-2019-25489 | High | 8.2 | 2026-02-27 | Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the host… |