Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 6,236 published records · 10 KEV · 6,236 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

6,236 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit4517.2%
High2,14734%
Med2,43639%
Low2253.6%
None90.14%
Legacy00.00%
Unscored96816%

Matching records by UTC month

Mar 266,236

Signal coverage

KEV-listed: 10
With a forecast: 6,236
Unknown date: 0
Unscored severity: 968

Share of cohort: KEV 0.16% · forecast 100% · unscored 16%.

Showing 2221–2240 of 6,236By severity band: Critical · 9.0–10.0 451, High · 7.0–8.9 2,147, Medium · 4.0–6.9 2,436, Low · 0.1–3.9 225, None · scored 0.0 9, Legacy · v2 only 0, Unscored · no CNA metric 968

MedPublished 21 Mar 2026, 19:47 WIB

CVE-2019-25563

PCHelpWareV2 1.0.0.5 Denial of Service via SC Creation

PCHelpWareV2 1.0.0.5 contains a denial of service vulnerability that allows local attackers to crash the application by supplying a malformed image file. Attackers can trigger the vulnerability through the Create SC feature by selecting a crafted BMP file with an oversized buffer, causing the application to crash.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-21T12:47:03.821Z. Updated 2026-03-23T20:13:05.084Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated24 Mar 2026, 03:13 WIB

Official record

MedPublished 21 Mar 2026, 19:47 WIB

CVE-2019-25562

jetAudio 8.1.7 Denial of Service via File Naming Buffer Overflow

jetAudio 8.1.7 contains a buffer overflow vulnerability in the video converter component that allows local attackers to crash the application by supplying an oversized string in the File Naming field. Attackers can paste a malicious buffer of 512 bytes into the File Naming parameter and trigger the crash by clicking th…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 2221 to 2240 of 6236.First page Next page

Published 2026-03-21T12:47:03.099Z. Updated 2026-03-23T16:37:25.882Z.

CVSS6.8v4.0KEVNot listedEPSSPresentUpdated23 Mar 2026, 23:37 WIB

Official record

MedPublished 21 Mar 2026, 19:47 WIB

CVE-2019-25561

Lyric Maker 2.0.1.0 Denial of Service via Buffer Overflow

Lyric Maker 2.0.1.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Title field. Attackers can paste a 5000-byte buffer into the Title input field and save the file to trigger a denial of service condition.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-21T12:47:02.287Z. Updated 2026-03-24T14:14:59.832Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated24 Mar 2026, 21:14 WIB

Official record

HighPublished 21 Mar 2026, 19:47 WIB

CVE-2019-25560

Lyric Video Creator 2.1 Denial of Service via MP3 File

Lyric Video Creator 2.1 contains a denial of service vulnerability that allows attackers to crash the application by processing malformed MP3 files. Attackers can create a crafted MP3 file with an oversized buffer and trigger the crash by opening the file through the Browse song functionality.

Excerpt language: en.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-21T12:47:01.399Z. Updated 2026-03-23T15:39:52.746Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated23 Mar 2026, 22:39 WIB

Official record

MedPublished 21 Mar 2026, 19:47 WIB

CVE-2019-25559

SpotPaltalk 1.1.5 Name/Key Field Denial of Service

SpotPaltalk 1.1.5 contains a denial of service vulnerability in the registration code input field that allows local attackers to crash the application by submitting an excessively long string. Attackers can paste a buffer of 1000 characters into the Name/Key field during registration to trigger a crash when the OK butt…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-21T12:47:00.586Z. Updated 2026-03-23T16:23:09.891Z.

CVSS6.8v4.0KEVNot listedEPSSPresentUpdated23 Mar 2026, 23:23 WIB

Official record

MedPublished 21 Mar 2026, 19:46 WIB

CVE-2019-25558

Selfie Studio 2.17 Denial of Service via Resize Image

Selfie Studio 2.17 contains a denial of service vulnerability in the Resize Image function that allows local attackers to crash the application by supplying an excessively long buffer. Attackers can paste a large string of characters into the New Width or New Height field to trigger a buffer overflow that crashes the a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-21T12:46:59.408Z. Updated 2026-03-23T16:55:34.217Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated23 Mar 2026, 23:55 WIB

Official record

MedPublished 21 Mar 2026, 19:46 WIB

CVE-2019-25557

TwistedBrush Pro Studio 24.06 Denial of Service via srp File

TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability that allows local attackers to crash the application by importing a malformed .srp script file. Attackers can create a .srp file containing an excessively large buffer and import it through the Script Player interface to trigger an application cra…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-21T12:46:58.688Z. Updated 2026-03-23T20:16:10.305Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated24 Mar 2026, 03:16 WIB

Official record

MedPublished 21 Mar 2026, 19:46 WIB

CVE-2019-25556

TwistedBrush Pro Studio 24.06 Resize Image Denial of Service

TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability in the Resize Image function that allows local attackers to crash the application by supplying an excessively long buffer. Attackers can paste a malicious string into the New Width or New Height field to trigger a buffer overflow that causes the a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-21T12:46:57.939Z. Updated 2026-03-23T16:38:08.741Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated23 Mar 2026, 23:38 WIB

Official record

MedPublished 21 Mar 2026, 19:46 WIB

CVE-2019-25555

TwistedBrush Pro Studio 24.06 Script Recorder Denial of Service

TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability in the Script Recorder component that allows local attackers to crash the application by supplying an excessively large buffer. Attackers can paste a malicious string containing 500,000 characters into the Description field of the Script Recorder …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-21T12:46:57.219Z. Updated 2026-03-24T14:13:17.190Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated24 Mar 2026, 21:13 WIB

Official record

MedPublished 21 Mar 2026, 19:46 WIB

CVE-2019-25554

Tomabo MP4 Converter 3.25.22 Denial of Service via Name Field

Tomabo MP4 Converter 3.25.22 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can trigger a buffer overflow by pasting a large payload into the Name parameter when adding a preset in the Video/Audio Forma…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-21T12:46:56.539Z. Updated 2026-03-23T15:41:23.426Z.

CVSS6.8v4.0KEVNot listedEPSSPresentUpdated23 Mar 2026, 22:41 WIB

Official record

MedPublished 21 Mar 2026, 19:46 WIB

CVE-2019-25553

CEWE PHOTO IMPORTER 6.4.3 Denial of Service via Malformed Image

CEWE PHOTO IMPORTER 6.4.3 contains a denial of service vulnerability that allows local attackers to crash the application by importing a specially crafted image file. Attackers can create a malformed JPG file with an oversized buffer and trigger the crash through the import functionality during the image processing wor…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-21T12:46:55.830Z. Updated 2026-03-23T16:32:03.289Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated23 Mar 2026, 23:32 WIB

Official record

HighPublished 21 Mar 2026, 19:46 WIB

CVE-2019-25552

CEWE PHOTO SHOW 6.4.3 Denial of Service via Password Field

CEWE PHOTO SHOW 6.4.3 contains a denial of service vulnerability that allows attackers to crash the application by submitting an excessively long buffer to the password field. Attackers can paste a large string of repeated characters into the password input during the upload process to trigger an application crash.

Excerpt language: en.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-21T12:46:55.073Z. Updated 2026-03-23T16:55:40.662Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated23 Mar 2026, 23:55 WIB

Official record

MedPublished 21 Mar 2026, 19:46 WIB

CVE-2019-25551

Sandboxie 5.30 Denial of Service via Program Alerts Buffer Overflow

Sandboxie 5.30 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Program Alerts configuration field. Attackers can paste a buffer of 5000 characters into the 'Select or enter a program' field during program alert configuration …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-21T12:46:54.305Z. Updated 2026-03-23T20:19:45.197Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated24 Mar 2026, 03:19 WIB

Official record

MedPublished 21 Mar 2026, 19:46 WIB

CVE-2019-25550

Encrypt PDF 2.3 Denial of Service via Buffer Overflow

Encrypt PDF 2.3 contains a buffer overflow vulnerability that allows local attackers to crash the application by inputting excessively long strings into password fields. Attackers can paste a 1000-byte buffer into the User Password or Master Password field in the Settings dialog to trigger an application crash when imp…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-21T12:46:53.540Z. Updated 2026-03-23T16:38:49.709Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated23 Mar 2026, 23:38 WIB

Official record

MedPublished 21 Mar 2026, 19:46 WIB

CVE-2019-25549

VeryPDF PCL Converter 2.7 Denial of Service via PDF Security

VeryPDF PCL Converter 2.7 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long password string. Attackers can trigger a buffer overflow by entering a 3000-byte password in the PDF Security encryption fields, causing the application to crash whe…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-21T12:46:52.307Z. Updated 2026-03-24T14:11:50.064Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated24 Mar 2026, 21:11 WIB

Official record

MedPublished 21 Mar 2026, 19:46 WIB

CVE-2019-25548

BlueStacks 4.80.0.1060 Denial of Service via Search Field

BlueStacks 4.80.0.1060 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to the search field. Attackers can paste a buffer of 100,000 'A' characters into the search field and trigger a search operation to cause the application to crash.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-21T12:46:51.527Z. Updated 2026-03-23T15:41:46.727Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated23 Mar 2026, 22:41 WIB

Official record

MedPublished 21 Mar 2026, 19:46 WIB

CVE-2019-25547

NetAware 1.20 Denial of Service via Add Block Buffer Overflow

NetAware 1.20 contains a buffer overflow vulnerability in the User Blocking feature that allows local attackers to crash the application by supplying oversized input. Attackers can paste a malicious buffer of 512 bytes into the 'Add a website or keyword to be filtered' field and trigger a crash when removing the create…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-21T12:46:50.813Z. Updated 2026-03-23T16:29:35.322Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated23 Mar 2026, 23:29 WIB

Official record

MedPublished 21 Mar 2026, 19:46 WIB

CVE-2019-25546

NetAware 1.20 Share Name Denial of Service

NetAware 1.20 contains a buffer overflow vulnerability in the Share Name field that allows local attackers to crash the application by supplying an excessively long string. Attackers can trigger a denial of service by pasting a 1000-byte buffer into the Share Name parameter when adding a new share through the Manage Sh…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-21T12:46:50.105Z. Updated 2026-03-23T16:55:46.692Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated23 Mar 2026, 23:55 WIB

Official record

MedPublished 21 Mar 2026, 19:46 WIB

CVE-2019-25545

Terminal Services Manager 3.2.1 Local Buffer Overflow Denial of Service

Terminal Services Manager 3.2.1 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying an excessively long string in the computer name field. Attackers can input a 5000-byte buffer of data into the 'Computer name or IP address' field during computer addition, causing …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-21T12:46:49.245Z. Updated 2026-03-23T20:22:15.804Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated24 Mar 2026, 03:22 WIB

Official record

MedPublished 21 Mar 2026, 19:46 WIB

CVE-2019-25544

Pidgin 2.13.0 Denial of Service via Malformed Username

Pidgin 2.13.0 contains a denial of service vulnerability that allows local attackers to crash the application by providing an excessively long username string during account creation. Attackers can input a buffer of 1000 characters in the username field and trigger a crash when joining a chat, causing the application t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-21T12:46:48.415Z. Updated 2026-03-24T14:31:19.687Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated24 Mar 2026, 21:31 WIB

Official record