Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,120

CVE-2025-0419

XSS in Mikrogrup's Zirve Nova

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Zirve Information Technologies Inc. Zirve Nova allows Cross-Site Scripting (XSS). This issue affects Zirve Nova: from 235 through 20250131.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
—
Products
—
CVE-2025-0420

XSS in Mikrogrup's Paraşüt

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Paraşüt Software Paraşüt allows Cross-Site Scripting (XSS). This issue affects Paraşüt: from 0.0.0.65efa44e through 20250204.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Parasut Software
Products
Parasut
CVE-2025-0421

iFrame Injection in Mikrogrup's Shopside

Improper Restriction of Rendered UI Layers or Frames vulnerability in Shopside Software Technologies Inc. Shopside allows iFrame Overlay. This issue affects Shopside: through 05022025.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Shopside
Products
Shopside
CVE-2025-0545

XSS in Tekrom Technology's T-Soft E-Commerce

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Tekrom Technology T-Soft E-Commerce allows Cross-Site Scripting (XSS). This issue affects T-Soft E-Commerce: before v5.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
—
Products
—
CVE-2025-0546

XSS in Mevzuattr Software's MevzuatTR

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improper Restriction of Rendered UI Layers or Frames vulnerability in Mevzuattr Software MevzuatTR allows Phishing, iFrame Overlay, Clickjacking, Forceful Browsing. This issue needs high privileges.  This issue affects MevzuatTR: before 12.02.2025.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
—
Products
—
CVE-2025-0547

XSS in Mikrogrup's Bizmu

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Paraşüt Software Bizmu allows Cross-Site Scripting (XSS). This issue affects Bizmu: from 2.27.0 through 20250212.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Parasut Software
Products
Bizmu
CVE-2025-0603

SQLi in Callvision Healthcare's Callvision Emergency Code

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Callvision Healthcare Callvision Emergency Code allows SQL Injection, Blind SQL Injection. This issue affects Callvision Emergency Code: before V3.0.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Callvision Healthcare
Products
Callvision Emergency Code
CVE-2025-0606

IDOR in Logo Software's Logo Cloud

Authorization Bypass Through User-Controlled Key vulnerability in Logo Software Inc. Logo Cloud allows Forceful Browsing, Resource Leak Exposure. This issue affects Logo Cloud: before 0.67.

CVSS 3.1 · 6 Medium EPSS < 1% KEV · Not listed
Vendors
Logo Software
Products
Logo Cloud
CVE-2025-0607

HTML Injection in Logo Software's Logo Cloud

Improper Encoding or Escaping of Output vulnerability in Logo Software Inc. Logo Cloud allows Phishing. This issue affects Logo Cloud: before 2.57.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Logo Software
Products
Logo Cloud
CVE-2025-0608

Open Redirect in Logo Software's Logo Cloud

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Logo Software Inc. Logo Cloud allows Phishing, Forceful Browsing. This issue affects Logo Cloud: before 2025.R6.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Logo Software
Products
Logo Cloud
CVE-2025-0609

XSS in Logo Software's Logo Cloud

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Logo Software Inc. Logo Cloud allows Cross-Site Scripting (XSS). This issue affects Logo Cloud: before 1.18.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Logo Software
Products
Logo Cloud
CVE-2025-0610

CSRF in Akinsoft's QR Menu

Cross-Site Request Forgery (CSRF) vulnerability in Akınsoft QR Menü allows Cross Site Request Forgery. This issue affects QR Menü: from s1.05.06 before v1.05.12.

CVSS 3.1 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Akinsoft
Products
Qr Menu
CVE-2025-0616

SQLi in Teknolojik Center Telecommunication's B2B - Netsis Panel

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Teknolojik Center Telecommunication Industry Trade Co. Ltd. B2B - Netsis Panel allows SQL Injection. This issue affects B2B - Netsis Panel: through 20251003. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Teknolojik Center
Products
Netsis Panel
CVE-2025-0640

IDOR in Akinsoft's OctoCloud

Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft OctoCloud allows Resource Leak Exposure. This issue affects OctoCloud: from s1.09.02 before v1.11.01.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Akinsoft
Products
Octocloud
CVE-2025-0642

Hard-coded Credentials in PosCube's Assist

Use of Hard-coded Credentials, Authorization Bypass Through User-Controlled Key vulnerability in PosCube Hardware Software and Consulting Ltd. Co. Assist allows Excavation, Authentication Bypass. This issue affects Assist: through 10.02.2025.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Poscube
Products
Assist
CVE-2025-0643

XSS in Narkom Communication Technologies' Pyxis Signage

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Narkom Communication and Software Technologies Trade Ltd. Co. Pyxis Signage allows Stored XSS. This issue affects Pyxis Signage: through 31012025.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Narkom
Products
Pyxis Signage
CVE-2025-0645

Arbitrary File Upload in Narkom Communication Technologies' Pyxis Signage

Unrestricted Upload of File with Dangerous Type vulnerability in Narkom Communication and Software Technologies Trade Ltd. Co. Pyxis Signage allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Pyxis Signage: through 31012025.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Narkom
Products
Pyxis Signage
CVE-2025-0670

IDOR in Akinsoft's ProKuafor

Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft ProKuafor allows Resource Leak Exposure. This issue affects ProKuafor: from s1.02.07 before v1.02.08.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Akinsoft
Products
Prokuafor
CVE-2025-0875

IDOR in Proliz Software's OBS

Authorization Bypass Through User-Controlled Key vulnerability in PROLIZ Computer Software Hardware Service Trade Ltd. Co. OBS (Student Affairs Information System) allows Parameter Injection. This issue affects OBS (Student Affairs Information System): before v26.0328.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
—
Products
—
CVE-2025-0876

XSS in Isin Basi Advertisement & IT's Workif

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Isin Basi Advertisement Information Technologies Trade Inc. IT's Workif allows Cross-Site Scripting (XSS). This issue affects IT's Workif: through 20251003. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 3.1 · 4.1 Medium EPSS < 1% KEV · Not listed
Vendors
—
Products
—