CVE-2019-25544

CVE-2019-25544 affects Pidgin 2.13.0 and describes a denial-of-service condition caused by a malformed username during account creation. A username string of about 1000 characters can crash the client when joining a chat, rendering the application unavailable. The vulnerability is local and requi...

CVE-2019-25544 Pidgin 2.13.0 Denial of Service via Malformed Username

Pidgin 2.13.0 contains a denial of service vulnerability that allows local attackers to crash the application by providing an excessively long username string during account creation. Attackers can input a buffer of 1000 characters in the username field and trigger a crash when joining a chat,...

CVE-2019-25544

Pidgin 2.13.0 contains a denial of service vulnerability that allows local attackers to crash the application by providing an excessively long username string during account creation. Attackers can input a buffer of 1000 characters in the username field and trigger a crash when joining a chat,...

CVE-2026-1648

creationtimestamp| type| source ---|---|--- 2026-03-21 09:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116266344664933412 2026-03-21 09:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mhko6ct2x32w...

CVE-2026-4529

creationtimestamp| type| source ---|---|--- 2026-03-21 07:53:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116266081669772514 2026-03-21 23:18:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhm64a6a4q2n 2026-03-22 00:09:23+00:00| seen|...

CVE-2026-4373

creationtimestamp| type| source ---|---|--- 2026-03-21 07:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116265990604760685 2026-03-21 07:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mhkj5cju4426 2026-03-21 07:54:35+00:00| seen|...

CVE-2026-32899

creationtimestamp| type| source ---|---|--- 2026-03-21 04:27:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhk6w3iwbn2n 2026-03-22 03:00:05+00:00| seen| https://github.com/openclaw/openclaw/security/advisories/GHSA-rm2p-j3r7-4x4j...

CVE-2026-3641 Appmax <= 1.0.3 - Missing Authorization to Order Status Manipulation and Arbitrary Order Creation via Webhook Endpoint

The Appmax plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 1.0.3. This is due to the plugin registering a public REST API webhook endpoint at /webhook-system without implementing webhook signature validation, secret verification, or any...

CVE-2026-3641 Appmax <= 1.0.3 - Missing Authorization to Order Status Manipulation and Arbitrary Order Creation via Webhook Endpoint

The Appmax plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 1.0.3. This is due to the plugin registering a public REST API webhook endpoint at /webhook-system without implementing webhook signature validation, secret verification, or any...

CVE-2026-32064

creationtimestamp| type| source ---|---|--- 2026-03-21 03:00:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhk22lcakl2n 2026-03-21 21:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhlwg2k2gs2s 2026-03-22 03:00:05+00:00| seen|...

CVE-2026-22737

creationtimestamp| type| source ---|---|--- 2026-03-21 03:00:04+00:00| seen| https://spring.io/security/cve-2026-22737 2026-03-21 03:34:17+00:00| seen| https://bsky.app/profile/cyber-news-fi.bsky.social/post/3mhk3wxvagj2a...

CVE-2026-32049

creationtimestamp| type| source ---|---|--- 2026-03-21 02:41:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjyy2flk42y 2026-03-21 22:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhlzrziedd2c 2026-03-22 03:00:05+00:00| seen|...

CVE-2026-33422

creationtimestamp| type| source ---|---|--- 2026-03-21 00:04:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjq75xxiy2e...

PT-2026-26911

TransMac 12.3 contains a buffer overflow vulnerability in the volume name field that allows local attackers to crash the application by supplying an excessively long string. Attackers can create a malicious file with 1000 repeated characters, paste the content into the volume name field during di...

PT-2026-26889

Name of the Vulnerable Software and Affected Versions Pidgin version 2.13.0 Description A denial of service issue allows local attackers to crash the application by providing an excessively long username string during account creation. By inputting a buffer of 1000 characters in the username fiel...

PT-2026-26891

NetAware 1.20 contains a buffer overflow vulnerability in the Share Name field that allows local attackers to crash the application by supplying an excessively long string. Attackers can trigger a denial of service by pasting a 1000-byte buffer into the Share Name parameter when adding a new shar...

PYSEC-2026-2237

NLTK Natural Language Toolkit is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3.9.3 and prior, the NLTK downloader does not validate the subdir and id attributes when processing remote XML index...

CVE-2026-33236

NLTK Natural Language Toolkit is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3.9.3 and prior, the NLTK downloader does not validate the subdir and id attributes when processing remote XML index...

PYSEC-2026-2237

NLTK Natural Language Toolkit is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3.9.3 and prior, the NLTK downloader does not validate the subdir and id attributes when processing remote XML index...

DEBIAN-CVE-2026-33236

NLTK Natural Language Toolkit is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3.9.3 and prior, the NLTK downloader does not validate the subdir and id attributes when processing remote XML index...