14993 vulnerabilidades · General Orden: CVSS EPSS Año ID
CVE-2019-25550
Encrypt PDF General
6.9
MEDIUM
EPSS
0.0%
2019 CWE-787 1 PoC

Encrypt PDF 2.3 contains a buffer overflow vulnerability that allows local attackers to crash the application by inputting excessively long strings into password fields. Attackers can paste a 1000-byte buffer into the User Password or Master Password field in the Settings dialog to trigger an application crash when importing PDF files.

CVE-2019-25553
CEWE PHOTO IMPORTER General
6.9
MEDIUM
EPSS
0.0%
2019 CWE-226 1 PoC

CEWE PHOTO IMPORTER 6.4.3 contains a denial of service vulnerability that allows local attackers to crash the application by importing a specially crafted image file. Attackers can create a malformed JPG file with an oversized buffer and trigger the crash through the import functionality during the image processing workflow.

CVE-2019-25666
SpotAuditor General
6.9
MEDIUM
EPSS
0.0%
2019 CWE-787 1 PoC

SpotAuditor 3.6.7 contains a local buffer overflow vulnerability in the Base64 Password Decoder component that allows attackers to crash the application. Attackers can supply an oversized Base64 string through the decoder interface to trigger a denial of service condition.

CVE-2019-25549
VeryPDF PCL Converter General
6.9
MEDIUM
EPSS
0.0%
2019 CWE-787 1 PoC

VeryPDF PCL Converter 2.7 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long password string. Attackers can trigger a buffer overflow by entering a 3000-byte password in the PDF Security encryption fields, causing the application to crash when processing PCL files.

CVE-2019-25624
Liquid Studio General
6.9
MEDIUM
EPSS
0.0%
2019 CWE-606 1 PoC

Liquid Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed input through the keyboard interface. Attackers can trigger the vulnerability by entering arbitrary characters during application runtime, causing the application to become unresponsive or terminate abnormally.

CVE-2019-25557
TwistedBrush Pro Studio General
6.9
MEDIUM
EPSS
0.0%
2019 CWE-775 1 PoC

TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability that allows local attackers to crash the application by importing a malformed .srp script file. Attackers can create a .srp file containing an excessively large buffer and import it through the Script Player interface to trigger an application crash.

CVE-2019-25589
ZOC Terminal General
6.9
MEDIUM
EPSS
0.0%
2019 CWE-787 1 PoC

ZOC Terminal 7.23.4 contains a buffer overflow vulnerability in the Shell field of Program Settings that allows local attackers to crash the application by supplying an excessively long string. Attackers can paste a crafted payload into the Shell configuration field and trigger a crash when accessing the Command Shell feature.

CVE-2019-25586
Deluge General
6.9
MEDIUM
EPSS
0.0%
2019 CWE-466 1 PoC

Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the URL field. Attackers can paste a buffer of 5000 characters into the 'From URL' field during torrent addition to trigger an application crash.

CVE-2019-25561
Lyric Maker General
6.9
MEDIUM
EPSS
0.0%
2019 CWE-787 1 PoC

Lyric Maker 2.0.1.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Title field. Attackers can paste a 5000-byte buffer into the Title input field and save the file to trigger a denial of service condition.

CVE-2019-25677
WinRAR General
6.9
MEDIUM
EPSS
0.0%
2019 CWE-379 1 PoC

WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the application by placing a malformed winrar.lng language file in the installation directory. Attackers can trigger the crash by opening an archive and pressing the test button, causing an access violation at memory address 004F1DB8 when the application attempts to read invalid data.

CVE-2019-25551
Sandboxie General
6.9
MEDIUM
EPSS
0.0%
2019 CWE-1282 1 PoC

Sandboxie 5.30 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Program Alerts configuration field. Attackers can paste a buffer of 5000 characters into the 'Select or enter a program' field during program alert configuration to trigger an application crash.

CVE-2019-20649
Software Genérico General
6.9
MEDIUM
EPSS
0.4%
2019 1 PoC

NETGEAR MR1100 devices before 12.06.08.00 are affected by disclosure of sensitive information.

CVE-2019-25548
BlueStacks General
6.9
MEDIUM
EPSS
0.0%
2019 CWE-466 1 PoC

BlueStacks 4.80.0.1060 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to the search field. Attackers can paste a buffer of 100,000 'A' characters into the search field and trigger a search operation to cause the application to crash.

CVE-2019-25477
RAR Password Recovery General
6.9
MEDIUM
EPSS
0.0%
2019 CWE-787 1 PoC

RAR Password Recovery 1.80 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload in the registration dialog. Attackers can craft a malicious input string exceeding 6000 bytes and paste it into the User Name and Registration Code field to trigger an application crash.

CVE-2019-25584
RarmaRadio General
6.9
MEDIUM
EPSS
0.0%
2019 CWE-787 1 PoC

RarmaRadio 2.72.3 contains a buffer overflow vulnerability in the Server field of the Network settings that allows local attackers to crash the application by supplying an excessively long string. Attackers can paste a malicious payload exceeding 4000 bytes into the Server field via the Settings menu to trigger an application crash.

CVE-2019-25544
Pidgin General
6.9
MEDIUM
EPSS
0.0%
2019 CWE-807 1 PoC

Pidgin 2.13.0 contains a denial of service vulnerability that allows local attackers to crash the application by providing an excessively long username string during account creation. Attackers can input a buffer of 1000 characters in the username field and trigger a crash when joining a chat, causing the application to become unavailable.

CVE-2019-25566
TransMac General
6.9
MEDIUM
EPSS
0.0%
2019 CWE-787 1 PoC

TransMac 12.3 contains a buffer overflow vulnerability in the volume name field that allows local attackers to crash the application by supplying an excessively long string. Attackers can create a malicious file with 1000 repeated characters, paste the content into the volume name field during disk image creation, and trigger an application crash.

CVE-2019-25661
Remote Process Explorer General
6.9
MEDIUM
EPSS
0.0%
2019 CWE-787 1 PoC

Remote Process Explorer 1.0.0.16 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by sending a crafted payload to the Add Computer dialog. Attackers can paste a malicious string into the computer name textbox and trigger a crash by connecting to the added computer, overwriting the SEH chain and corrupting exception handlers.

CVE-2019-25585
Deluge General
6.9
MEDIUM
EPSS
0.0%
2019 CWE-1260 1 PoC

Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Webseeds field. Attackers can paste a buffer of 5000 bytes into the Webseeds field during torrent creation to trigger an application crash.

CVE-2019-25563
PCHelpWareV2 General
6.9
MEDIUM
EPSS
0.0%
2019 CWE-226 1 PoC

PCHelpWareV2 1.0.0.5 contains a denial of service vulnerability that allows local attackers to crash the application by supplying a malformed image file. Attackers can trigger the vulnerability through the Create SC feature by selecting a crafted BMP file with an oversized buffer, causing the application to crash.