CVE-2019-25448 OrientDB 3.0.17 Stored Cross-Site Scripting via User Creation

OrientDB 3.0.17 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by creating users with script payloads in the name parameter. Attackers can send POST requests to the document endpoint with JavaScript code in the name field to...

CVE-2019-25437 Foscam Video Management System 1.1.6.6 Buffer Overflow Denial of Service

Foscam Video Management System 1.1.6.6 contains a buffer overflow vulnerability in the UID field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 5000-character buffer into the UID parameter during device addition to trigger an...

CVE-2019-25436 Sricam DeviceViewer 3.12.0.1 Password Change Security Bypass

Sricam DeviceViewer 3.12.0.1 contains a password change security bypass vulnerability that allows authenticated users to change passwords without proper validation of the old password field. Attackers can inject a large payload into the old password parameter during the change password process to...

CVE-2019-25432 Part-DB 0.4 Authentication Bypass via login.php

Part-DB 0.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to login by injecting SQL syntax into authentication parameters. Attackers can submit a single quote followed by 'or' in the login form to bypass credential validation and gain unauthorized access to...

CVE-2019-25363

creationtimestamp| type| source ---|---|--- 2026-02-20 19:40:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfcufg3h452i...

CVE-2019-25444

Fiverr Clone Script 1.2.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the page parameter. Attackers can supply malicious SQL syntax in the page parameter to extract sensitive database information or...

CVE-2019-25444

Fiverr Clone Script 1.2.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the page parameter. Attackers can supply malicious SQL syntax in the page parameter to extract sensitive database information or...

CVE-2019-25444

CVE-2019-25444 : Fiverr Clone Script 1.2.2 is affected by an SQL injection in the page parameter that allows unauthenticated attackers to manipulate database queries, enabling extraction of sensitive data and potential data modification. The vulnerability stems from user-supplied SQL syntax in th...

CVE-2019-25422

creationtimestamp| type| source ---|---|--- 2026-02-20 07:18:49+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfbkxrfyhe2m...

CVE-2019-25405

creationtimestamp| type| source ---|---|--- 2026-02-20 06:20:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfbhownt2323...

CVE-2019-25419

creationtimestamp| type| source ---|---|--- 2026-02-20 06:00:18+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfbgles75z2a...

CVE-2019-25350

creationtimestamp| type| source ---|---|--- 2026-02-20 04:00:18+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfb7usy3f32i...

CVE-2019-25349

creationtimestamp| type| source ---|---|--- 2026-02-20 03:40:12+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfb6qud6tq2u...

CVE-2019-25355

creationtimestamp| type| source ---|---|--- 2026-02-20 03:20:12+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfb5n3wgnl2e...

CVE-2019-25353

creationtimestamp| type| source ---|---|--- 2026-02-20 03:00:19+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfb4jjlgje2l...

CVE-2019-25352

creationtimestamp| type| source ---|---|--- 2026-02-20 01:40:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfay2b7pxj2e...

CVE-2019-25358

creationtimestamp| type| source ---|---|--- 2026-02-20 01:20:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfawwmfmne23...

CVE-2019-25357

creationtimestamp| type| source ---|---|--- 2026-02-19 22:00:18+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfalr3bzaa2h...

CVE-2019-25355

gSOAP 2.8 contains a directory traversal vulnerability that allows unauthenticated attackers to access system files by manipulating HTTP path traversal techniques. Attackers can retrieve sensitive files like /etc/passwd by sending crafted GET requests with multiple '../' directory traversal...

CVE-2019-25427

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the antispyware endpoint. Attackers can send POST requests with JavaScript payloads in the DNSMASQWHITELIST or DNSMASQBLACKLIST...