Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,868

CVE-2023-1050

SQLi in As Koc Web Report System

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in As Koc Energy Web Report System allows SQL Injection. This issue affects Web Report System: before 23.03.10.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Askoc
Products
Web Report System
CVE-2023-1051

XSS in As Koc Web Report System

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in As Koc Energy Web Report System allows Reflected XSS. This issue affects Web Report System: before 23.03.10.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Askoc
Products
Web Report System
CVE-2023-1060

XSS in YKM CRM

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YKM YKM CRM allows Reflected XSS. This issue affects YKM CRM: before 23.03.30.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Ykmbilisim
Products
Ykm Crm
CVE-2026-10213

AstrBotDevs AstrBot API Endpoint delete path traversal

A security flaw has been discovered in AstrBotDevs AstrBot 4.23.6. This vulnerability affects unknown code of the file /api/skills/delete of the component API Endpoint. Performing a manipulation of the argument Name results in path traversal. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Astrbot
Products
Astrbot
CVE-2023-1064

SQLi in Uzay Baskul's Weighbridge Automation Software

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Uzay Baskul Weighbridge Automation Software allows SQL Injection. This issue affects Weighbridge Automation Software: before 1.1.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Uzaybaskul
Products
Weighbridge Automation Software
CVE-2023-1091

SQL Injection found in ALPATA's Licensed Warehousing Automation System

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alpata Licensed Warehousing Automation System allows Command Line Execution through SQL Injection. This issue affects Licensed Warehousing Automation System: through 2023.1.01.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Alpatateknoloji
Products
Licensed Warehousing Automation System
CVE-2023-1114

Improper Input Validation on e-Belediye

Missing Authorization vulnerability in Eskom e-Belediye allows Information Elicitation. This issue affects e-Belediye: from 1.0.0.95 before 1.0.0.100.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Eskom
Products
E-belediye
CVE-2023-1152

SQLi in Utarit Persolus

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Utarit Information Technologies Persolus allows SQL Injection. This issue affects Persolus: before 2.03.93.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Utarit
Products
Persolus
CVE-2023-1153

SQLi in Pacsrapor

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pacsrapor allows SQL Injection, Command Line Execution through SQL Injection. This issue affects Pacsrapor: before 1.22.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Pacsrapor
Products
Pacsrapor
CVE-2026-10219

nextlevelbuilder GoClaw write_file Tool fsbridge.go FsBridge.WriteFile os command injection

A vulnerability was found in nextlevelbuilder GoClaw up to 3.11.3. This impacts the function FsBridge.WriteFile of the file internal/sandbox/fsbridge.go of the component write_file Tool. Performing a manipulation results in os command injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The pull request to fix this issue awaits acceptance.

CVSS 4.0 · 6.9 Medium EPSS 1.5% KEV · Not listed
Vendors
Nextlevelbuilder
Products
Goclaw
CVE-2023-1154

XSS in Pacsrapor

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pacsrapor allows Reflected XSS. This issue affects Pacsrapor: before 1.22.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Pacsrapor
Products
Pacsrapor
CVE-2026-10225

raisulislamg4 student_management_system_by_php Login login_check.php sql injection

A vulnerability was detected in raisulislamg4 student_management_system_by_php up to 310d950e09013d5133c6b9210aff9444382d16d1. This issue affects some unknown processing of the file login_check.php of the component Login. Performing a manipulation of the argument Username results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Raisulislamg4
Products
Student Management System By Php
CVE-2023-1198

SQLi in Saysis Starcities

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saysis Starcities allows SQL Injection. This issue affects Starcities: through 1.3.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Saysis
Products
Starcities
CVE-2023-1246

Files or Directories Accessible to External Parties in Saysis Starcities

Files or Directories Accessible to External Parties vulnerability in Saysis Starcities allows Collect Data from Common Resource Locations. This issue affects Starcities: through 1.3.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Saysis
Products
Starcities
CVE-2023-1251

SQLi in Wolvox

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Akinsoft Wolvox. This issue affects Wolvox: before 8.02.03.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Akinsoft
Products
Wolvox
CVE-2023-1267

SQLi in Ulkem Company's PtteM Kart

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ulkem Company PtteM Kart. This issue affects PtteM Kart: before 2.1.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Pttemkart
Products
Pttem Kart
CVE-2023-1462

IDOR in Digikent

Authorization Bypass Through User-Controlled Key vulnerability in Vadi Corporate Information Systems DigiKent allows Authentication Bypass, Authentication Abuse. This issue affects DigiKent: before 23.03.20.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Vadi
Products
Digikent
CVE-2023-1508

SQLi in AdamPOS's Mobilmen Terminal Software

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Adam Retail Automation Systems Mobilmen Terminal Software allows SQL Injection. This issue affects Mobilmen Terminal Software: before 3.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Adampos
Products
Mobilmen El Terminali Yazilimi
CVE-2026-10237

SourceCodester Water Billing Management System User Management manage_user sql injection

A vulnerability was found in SourceCodester Water Billing Management System 1.0. Impacted is an unknown function of the file /admin/?page=user/manage_user of the component User Management Module. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Sourcecodester
Products
Water Billing Management System
CVE-2023-1547

SQLi in Elra Computers Parkmatik

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Elra Parkmatik allows SQL Injection through SOAP Parameter Tampering, Command Line Execution through SQL Injection. This issue affects Parkmatik: before 02.01-a51.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Elra
Products
Parkmatik