Search vulnerabilities

Expected end of text, found ':' (at char 23), (line:1, col:24)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,822

CVE-2024-6919

SQLi in NAC Telecommunication's NACPremium

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Blind SQL Injection. This issue affects NACPremium: through 01082024.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Nac Nac Telecommunication Systems
Products
Nacpremium Nacpremium
CVE-2024-6920

Stored XSS in NAC Telecommunication's NACPremium

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Stored XSS. This issue affects NACPremium: through 01082024.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Nac
Products
Nacpremium
CVE-2024-6921

Cleartext Username and Password in NAC Telecommunication's NACPremium

Cleartext Storage of Sensitive Information vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Retrieve Embedded Sensitive Data. This issue affects NACPremium: through 01082024.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Nac Nac Telecommunication Systems
Products
Nacpremium Nacpremium
CVE-2024-7015

Improper Authentication in Profelis Informatics and Consulting's PassBOX

Missing Authentication for Critical Function vulnerability in Profelis Informatics and Consulting PassBox allows Authentication Abuse. This issue affects PassBox: before v1.2.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Profelis
Products
Passbox
CVE-2024-7016

Stored XSS in Smarttek Informatics' Smart Doctor

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Smarttek Informatics Smart Doctor's allows Stored XSS required admin privileges. This issue affects Smart Doctor: through 21.11.2024. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Smarttek
Products
Smart Doctor
CVE-2024-7026

SQLi in Teknogis Informatics' Closed Circuit Vehicle Tracking Software

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Teknogis Informatics Closed Circuit Vehicle Tracking Software allows SQL Injection, Blind SQL Injection. This issue affects Closed Circuit Vehicle Tracking Software: through 21.11.2024. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Teknogis Informatics
Products
Close Circuit Vehicle Tracking Software
CVE-2024-7071

Unauthenticate SQLi in Brain Information Technologies' Brain Low-Code

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 564 - SQL Injection: Hibernate vulnerability in Brain Information Technologies Inc. Brain Low-Code allows SQL Injection. This issue affects Brain Low-Code: before 2.1.0.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Brain Information Technologies Brainlowcode
Products
Brain Low-code Brain Low-code
CVE-2024-7076

SQLi in Semtek Informatics Software's Semtek Sempos

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Semtek Informatics Software Consulting Inc. Semtek Sempos allows Blind SQL Injection. This issue affects Semtek Sempos: through 31072024.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Semtek Semtekyazilim
Products
Sempos Semtek Sempos
CVE-2024-7077

Reflected XSS in Semtek Informatics Software's Semtek Sempos

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Semtek Informatics Software Consulting Inc. Semtek Sempos allows Reflected XSS. This issue affects Semtek Sempos: through 31072024.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Semtekyazilim
Products
Semtek Sempos
CVE-2024-7078

Unauthenticate SQLi in Semtek Informatics Software's Semtek Sempos

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Semtek Informatics Software Consulting Inc. Semtek Sempos allows SQL Injection. This issue affects Semtek Sempos: through 31072024.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Vendors
Semtek Semtekyazilim
Products
Sempos Semtek Sempos
CVE-2024-7098

XML Injection in SFS Consulting's ww.Winsure

Improper Restriction of XML External Entity Reference vulnerability in SFS Consulting ww.Winsure allows XML Injection. This issue affects ww.Winsure: before 4.6.2.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Vendors
Sfs Sfs Consulting
Products
Winsure Wwwinsure
CVE-2024-7104

Remote Code Execution in SFS Consulting's ww.Winsure

Improper Control of Generation of Code ('Code Injection') vulnerability in SFS Consulting ww.Winsure allows Code Injection. This issue affects ww.Winsure: before 4.6.2.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Vendors
Sfs Sfs Consulting
Products
Winsure Wwwinsure
CVE-2024-7107

Directory Traversal in National Keep's CyberMath

Files or Directories Accessible to External Parties vulnerability in National Keep Cyber Security Services CyberMath allows Collect Data from Common Resource Locations. This issue affects CyberMath: before CYBM.240816253.

CVSS 4.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Nationalkeep
Products
Cybermath
CVE-2024-7108

Incorrect Authorization in National Keep's CyberMath

Incorrect Authorization vulnerability in National Keep Cyber Security Services CyberMath allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects CyberMath: before CYBM.240816253.

CVSS 4.0 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Nationalkeep
Products
Cybermath
CVE-2024-7130

Reflected XSS in Kion Computer's KION Exchange Programs Software

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kion Computer KION Exchange Programs Software allows Reflected XSS. This issue affects KION Exchange Programs Software: before 1.21.9092.29966.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
—
Products
—
CVE-2024-7488

Business Logic Error in RestApp Inc.'s Online Ordering System

Integer Overflow or Wraparound, Improper Validation of Specified Quantity in Input vulnerability in RestApp Inc. Online Ordering System allows Integer Attacks. This issue affects Online Ordering System: 8.2.1. NOTE: Vulnerability fixed in version 8.2.2 and does not exist before 8.2.1.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Restapp
Products
Online Ordering System
CVE-2024-7609

Directory Traversal in Vidco Software's VOC TESTER

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Vidco Software VOC TESTER allows Path Traversal. This issue affects VOC TESTER: before 12.34.8.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Vendors
Vidco
Products
Voc Tester
CVE-2024-7735

SQLi in Exnet Informatics Software's Ferry Reservation System

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Exnet Informatics Software Ferry Reservation System allows SQL Injection. This issue affects Ferry Reservation System: before 240805-002.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Exnet Informatics Software
Products
Ferry Reservation System
CVE-2024-7785

Reflected XSS in Ece Software's Electronic Ticket System

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ece Software Electronic Ticket System allows Reflected XSS, Cross-Site Scripting (XSS). This issue affects Electronic Ticket System: before 2024.08.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
—
Products
—
CVE-2024-7787

Reflected XSS in ITG Computer Technology's vSRM Supplier Relationship Management System

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ITG Computer Technology vSRM Supplier Relationship Management System allows Reflected XSS, Cross-Site Scripting (XSS). This issue affects vSRM Supplier Relationship Management System: before 28.08.2024.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
—
Products
—