CVE-2019-25581

creationtimestamp| type| source ---|---|--- 2026-03-21 15:16:02+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25581 2026-03-21 16:34:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhlhjasryz2e 2026-03-24 22:20:09+00:00| seen|...

CVE-2019-25580

creationtimestamp| type| source ---|---|--- 2026-03-21 15:16:02+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25580 2026-03-21 16:29:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhlhacfkol2o 2026-06-13 22:07:07+00:00| seen|...

CVE-2019-25566

creationtimestamp| type| source ---|---|--- 2026-03-21 15:07:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhlcoalvjc2o...

CVE-2026-0955

creationtimestamp| type| source ---|---|--- 2026-03-21 14:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhl6waxklw2e...

CVE-2019-25554

Tomabo MP4 Converter 3.25.22 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can trigger a buffer overflow by pasting a large payload into the Name parameter when adding a preset i...

CVE-2019-25566

TransMac 12.3 contains a buffer overflow vulnerability in the volume name field that allows local attackers to crash the application by supplying an excessively long string. Attackers can create a malicious file with 1000 repeated characters, paste the content into the volume name field during di...

CVE-2019-25566 TransMac 12.3 Denial of Service via Volume Name Field

TransMac 12.3 contains a buffer overflow vulnerability in the volume name field that allows local attackers to crash the application by supplying an excessively long string. Attackers can create a malicious file with 1000 repeated characters, paste the content into the volume name field during di...

CVE-2019-25566

TransMac 12.3 is affected by a local denial-of-service vulnerability: a buffer overflow in the volume name field can crash the app when a long string is used (e.g., 1000 repeated characters during disk image creation). The connected CVE records confirm the issue and its impact as described; there...

CVE-2019-25563

CVE-2019-25563 affects PCHelpWareV2 1.0.0.5. The vulnerability arises in the Create SC feature when a crafted BMP image with an oversized buffer is processed, enabling a local attacker to crash the application (denial of service). The impact is an availability degradation on the affected host. Th...

CVE-2019-25563 PCHelpWareV2 1.0.0.5 Denial of Service via SC Creation

PCHelpWareV2 1.0.0.5 contains a denial of service vulnerability that allows local attackers to crash the application by supplying a malformed image file. Attackers can trigger the vulnerability through the Create SC feature by selecting a crafted BMP file with an oversized buffer, causing the...

CVE-2019-25554

Tomabo MP4 Converter 3.25.22 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can trigger a buffer overflow by pasting a large payload into the Name parameter when adding a preset i...

CVE-2019-25544 Pidgin 2.13.0 Denial of Service via Malformed Username

Pidgin 2.13.0 contains a denial of service vulnerability that allows local attackers to crash the application by providing an excessively long username string during account creation. Attackers can input a buffer of 1000 characters in the username field and trigger a crash when joining a chat,...

CVE-2019-25544

CVE-2019-25544 affects Pidgin 2.13.0 and describes a denial-of-service condition caused by a malformed username during account creation. A username string of about 1000 characters can crash the client when joining a chat, rendering the application unavailable. The vulnerability is local and requi...

CVE-2019-25544

Pidgin 2.13.0 contains a denial of service vulnerability that allows local attackers to crash the application by providing an excessively long username string during account creation. Attackers can input a buffer of 1000 characters in the username field and trigger a crash when joining a chat,...

CVE-2026-1648

creationtimestamp| type| source ---|---|--- 2026-03-21 09:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116266344664933412 2026-03-21 09:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mhko6ct2x32w...

CVE-2026-4529

creationtimestamp| type| source ---|---|--- 2026-03-21 07:53:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116266081669772514 2026-03-21 23:18:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhm64a6a4q2n 2026-03-22 00:09:23+00:00| seen|...

CVE-2026-4373

creationtimestamp| type| source ---|---|--- 2026-03-21 07:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116265990604760685 2026-03-21 07:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mhkj5cju4426 2026-03-21 07:54:35+00:00| seen|...

CVE-2026-32899

creationtimestamp| type| source ---|---|--- 2026-03-21 04:27:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhk6w3iwbn2n 2026-03-22 03:00:05+00:00| seen| https://github.com/openclaw/openclaw/security/advisories/GHSA-rm2p-j3r7-4x4j...

CVE-2026-3641 Appmax <= 1.0.3 - Missing Authorization to Order Status Manipulation and Arbitrary Order Creation via Webhook Endpoint

The Appmax plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 1.0.3. This is due to the plugin registering a public REST API webhook endpoint at /webhook-system without implementing webhook signature validation, secret verification, or any...

CVE-2026-3641 Appmax <= 1.0.3 - Missing Authorization to Order Status Manipulation and Arbitrary Order Creation via Webhook Endpoint

The Appmax plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 1.0.3. This is due to the plugin registering a public REST API webhook endpoint at /webhook-system without implementing webhook signature validation, secret verification, or any...