Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,850

CVE-2024-6406

Sensetive Data Exposure in Yordam Information Technology's Mobile Library Application

Missing Authentication for Critical Function, Missing Authorization vulnerability in Yordam Information Technology Mobile Library Application allows Retrieve Embedded Sensitive Data. This issue affects Mobile Library Application: before 5.0.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
—
Products
—
CVE-2024-6445

Authenticated Local File Inclusion (LFI) in DataFlowX's DataDiodeX

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in DataFlowX Technology DataDiodeX allows Path Traversal. This issue affects DataDiodeX: from v3.0.0 before v3.1.7.

CVSS 4.0 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Dataflowx
Products
Datadiodex
CVE-2026-10694

SourceCodester Online Food Ordering System index.php include file inclusion

A vulnerability was detected in SourceCodester Online Food Ordering System 2.0. Affected by this issue is the function include of the file /index.php. The manipulation of the argument page results in file inclusion. The attack can be launched remotely. The exploit is now public and may be used.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Sourcecodester
Products
Online Food Ordering System
CVE-2024-6656

Hardcoded Credentals in TNB Mobile Solutions' Cockpit Software

Use of Hard-coded Credentials vulnerability in TNB Mobile Solutions Cockpit Software allows Read Sensitive Strings Within an Executable. This issue affects Cockpit Software: before v2.13.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Tnb Mobile Solutions Tnbmobil
Products
Cockpit Software Cockpit
CVE-2024-6684

Authentication Bypass in GST Electronics' inohom Nova Panel N7

Authentication Bypass Using an Alternate Path or Channel vulnerability in GST Electronics inohom Nova Panel N7 allows Authentication Bypass. This issue affects inohom Nova Panel N7: through 1.9.9.6. NOTE: The vendor was contacted and it was learned that the product is not supported.

CVSS 4.0 · 9.9 Critical EPSS < 1% KEV · Not listed
Vendors
Gstelectronics
Products
Inohom Nova Panel N7
CVE-2024-6877

Reflected XSS in Eliz Software's Panel

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Software Panel allows Reflected XSS. This issue affects Panel: before v2.3.24.

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Eliz Software Elizsoftware
Products
Panel Panel
CVE-2024-6878

Directory Browsing in Eliz Software's Panel

Files or Directories Accessible to External Parties vulnerability in Eliz Software Panel allows Collect Data from Common Resource Locations. This issue affects Panel: before v2.3.24.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Vendors
Eliz Software
Products
Panel
CVE-2024-6917

RCE in Veribilim Software's Veribase Order Management

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Veribilim Software Veribase Order Management allows OS Command Injection. This issue affects Veribase Order Management: before v4.010.2.

CVSS 4.0 · 10 Critical EPSS 1.3% KEV · Not listed
Vendors
Veribase
Products
Order Management Veribase Order Management
CVE-2024-6919

SQLi in NAC Telecommunication's NACPremium

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Blind SQL Injection. This issue affects NACPremium: through 01082024.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Nac Nac Telecommunication Systems
Products
Nacpremium Nacpremium
CVE-2024-6920

Stored XSS in NAC Telecommunication's NACPremium

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Stored XSS. This issue affects NACPremium: through 01082024.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Nac
Products
Nacpremium
CVE-2024-6921

Cleartext Username and Password in NAC Telecommunication's NACPremium

Cleartext Storage of Sensitive Information vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Retrieve Embedded Sensitive Data. This issue affects NACPremium: through 01082024.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Nac Nac Telecommunication Systems
Products
Nacpremium Nacpremium
CVE-2024-7015

Improper Authentication in Profelis Informatics and Consulting's PassBOX

Missing Authentication for Critical Function vulnerability in Profelis Informatics and Consulting PassBox allows Authentication Abuse. This issue affects PassBox: before v1.2.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Profelis
Products
Passbox
CVE-2024-7016

Stored XSS in Smarttek Informatics' Smart Doctor

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Smarttek Informatics Smart Doctor's allows Stored XSS required admin privileges. This issue affects Smart Doctor: through 21.11.2024. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Smarttek
Products
Smart Doctor
CVE-2024-7026

SQLi in Teknogis Informatics' Closed Circuit Vehicle Tracking Software

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Teknogis Informatics Closed Circuit Vehicle Tracking Software allows SQL Injection, Blind SQL Injection. This issue affects Closed Circuit Vehicle Tracking Software: through 21.11.2024. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Teknogis Informatics
Products
Close Circuit Vehicle Tracking Software
CVE-2024-7071

Unauthenticate SQLi in Brain Information Technologies' Brain Low-Code

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 564 - SQL Injection: Hibernate vulnerability in Brain Information Technologies Inc. Brain Low-Code allows SQL Injection. This issue affects Brain Low-Code: before 2.1.0.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Brain Information Technologies Brainlowcode
Products
Brain Low-code Brain Low-code
CVE-2024-7076

SQLi in Semtek Informatics Software's Semtek Sempos

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Semtek Informatics Software Consulting Inc. Semtek Sempos allows Blind SQL Injection. This issue affects Semtek Sempos: through 31072024.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Semtek Semtekyazilim
Products
Sempos Semtek Sempos
CVE-2024-7077

Reflected XSS in Semtek Informatics Software's Semtek Sempos

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Semtek Informatics Software Consulting Inc. Semtek Sempos allows Reflected XSS. This issue affects Semtek Sempos: through 31072024.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Semtekyazilim
Products
Semtek Sempos
CVE-2024-7078

Unauthenticate SQLi in Semtek Informatics Software's Semtek Sempos

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Semtek Informatics Software Consulting Inc. Semtek Sempos allows SQL Injection. This issue affects Semtek Sempos: through 31072024.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Vendors
Semtek Semtekyazilim
Products
Sempos Semtek Sempos
CVE-2024-7098

XML Injection in SFS Consulting's ww.Winsure

Improper Restriction of XML External Entity Reference vulnerability in SFS Consulting ww.Winsure allows XML Injection. This issue affects ww.Winsure: before 4.6.2.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Vendors
Sfs Sfs Consulting
Products
Winsure Wwwinsure
CVE-2024-7104

Remote Code Execution in SFS Consulting's ww.Winsure

Improper Control of Generation of Code ('Code Injection') vulnerability in SFS Consulting ww.Winsure allows Code Injection. This issue affects ww.Winsure: before 4.6.2.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Vendors
Sfs Sfs Consulting
Products
Winsure Wwwinsure