Search vulnerabilities

Expected end of text, found '/' (at char 47), (line:1, col:48)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,863

CVE-2025-11963

Reflected XSS in Saysis's StarCities

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Saysis Computer Systems Trade Ltd. Co. StarCities allows Reflected XSS. This issue affects StarCities: before 1.1.61.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Saysis
Products
Starcities
CVE-2025-12059

Improper Access Control in Logo Software's Logo j-Platform

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Logo Software Industry and Trade Inc. Logo j-Platform allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Logo j-Platform: from 3.29.6.4 before 3.34.8.9.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Logo Software Industry And Trade Inc.
Products
Logo J-platform
CVE-2025-12504

SQLi in Talent Software's UNIS

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Talent Software UNIS allows SQL Injection. This issue affects UNIS: before 42321.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Talentsoft
Products
Unis
CVE-2025-13002

XSS in Farktor Software's E-Commerce Package

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package allows Cross-Site Scripting (XSS). This issue affects E-Commerce Package: through 27112025.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Farktor Farktor Software E-commerce Services Inc.
Products
E-commerce Package E-commerce Package
CVE-2025-13003

IDOR in Aksis Computer's AxOnboard

Authorization Bypass Through User-Controlled Key vulnerability in Aksis Computer Services and Consulting Inc. AxOnboard allows Exploitation of Trusted Identifiers. This issue affects AxOnboard: from 3.2.0 before 3.3.0.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Aksis Technology
Products
Axonboard
CVE-2025-13124

IDOR in Netiket''s ApplyLogic

Authorization Bypass Through User-Controlled Key vulnerability in Netiket Information Technologies Ltd. Co. ApplyLogic allows Exploitation of Trusted Identifiers. This issue affects ApplyLogic: through 01.12.2025.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Netiket
Products
Applylogic
CVE-2025-13125

IDOR in Im Park's DijiDemi

Authorization Bypass Through User-Controlled Key vulnerability in Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd. Co. DijiDemi allows Exploitation of Trusted Identifiers. This issue affects DijiDemi: through 28.11.2025.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Im Park
Products
Dijidemi
CVE-2025-13127

XSS in TACAS Consulting's GoldenHorn

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in TAC Information Services Internal and External Trade Inc. GoldenHorn allows Cross-Site Scripting (XSS). This issue affects GoldenHorn: before 4.25.1121.1.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
—
Products
—
CVE-2025-13129

Business Logic Error in Seneka Software's Onaylarım

Improper Enforcement of Behavioral Workflow vulnerability in Seneka Software Hardware Information Technology Trade Contracting and Industry Ltd. Co. Onaylarım allows Functionality Misuse. This issue affects Onaylarım: from 25.09.26.01 through 18112025.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Seneka
Products
Onaylarım
CVE-2025-13183

Stored XSS in Hotech's Otello

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Hotech Software Inc. Otello allows Stored XSS. This issue affects Otello: from 2.4.0 before 2.4.4.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
—
Products
—
CVE-2025-13295

Sensitive Data Exposure in ArgusTech's BILGER

Insertion of Sensitive Information Into Sent Data vulnerability in Argus Technology Inc. BILGER allows Choosing Message Identifier. This issue affects BILGER: before 2.4.9.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Argustech Argusteknoloji
Products
Bilger Bilger
CVE-2025-13296

CSRF in Tekrom Technology's T-Soft E-Commerce

Cross-Site Request Forgery (CSRF) vulnerability in Tekrom Technology Inc. T-Soft E-Commerce allows Cross Site Request Forgery. This issue affects T-Soft E-Commerce: through 28112025.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
T-soft
Products
E-commerce
CVE-2025-13474

IDOR in Menulux Software's Mobile App

Authorization Bypass Through User-Controlled Key vulnerability in Menulux Software Inc. Mobile App allows Exploitation of Trusted Identifiers. This issue affects Mobile App: before 9.5.8.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Menulux
Products
Mobile App
CVE-2025-13505

Stored XSS in Datateam's Datactive

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Datateam Information Technologies Inc. Datactive allows Stored XSS. This issue affects Datactive: from 2.13.34 before 2.14.0.6.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Datateam
Products
Datactive
CVE-2025-13506

Improper Authorization in Nebim Neyir's Nebim V3 ERP

Execution with Unnecessary Privileges vulnerability in Nebim Neyir Computer Industry and Services Inc. Nebim V3 ERP allows Expanding Control over the Operating System from the Database. This issue affects Nebim V3 ERP: from 2.0.59 before 3.0.1.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Nebim
Products
Nebim V3 Erp
CVE-2025-14014

Insecure File Upload in NTN Informatics' Smart Panel

Unrestricted Upload of File with Dangerous Type vulnerability in NTN Information Processing Services Computer Software Hardware Industry and Trade Ltd. Co. Smart Panel allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Smart Panel: before 20251215.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Ntn Information Processing Services Computer Software Hardware Industry And Trade Ltd. Co.
Products
Smart Panel
CVE-2025-14018

Unquoted Service Path in NetBT Consultancy's e-Fatura

Unquoted Search Path or Element vulnerability in NetBT Consulting Services Inc. E-Fatura allows Leveraging/Manipulating Configuration File Search Paths, Redirect Access to Libraries. This issue affects e-Fatura: before 1.2.15.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
—
Products
—
CVE-2025-14101

IDOR in GG Soft's PaperWork

Authorization Bypass Through User-Controlled Key vulnerability in GG Soft Software Services Inc. PaperWork allows Exploitation of Trusted Identifiers. This issue affects PaperWork: from 5.2.0.9427 before 6.0.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Gg Soft
Products
Paperwork
CVE-2025-14320

XSS in Tegsoft's Online Support Application

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Tegsoft Management and Information Services Trade Limited Company Online Support Application allows Reflected XSS. This issue affects Online Support Application: from V3 through 31122025.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tegsoft
Products
Online Support Application