Search vulnerabilities

Expected end of text, found '\' (at char 28), (line:1, col:29)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,120

CVE-2022-24038

Unauthorized modification in Karmasis Informatics Infraskope SIEM+

Karmasis Informatics Infraskope SIEM+ has an unauthenticated access vulnerability which could allow an unauthenticated attacker to damage the page where the agents are listed.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Karmasis
Products
Infraskope Siem\+
CVE-2022-24037

Unauthorized modification in Karmasis Informatics Infraskope SIEM+

Karmasis Informatics Infraskope SIEM+ has an unauthenticated access vulnerability which could allow an unauthenticated attacker to obtain critical information.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Karmasis
Products
Infraskope Siem\+
CVE-2022-0495

SQL Injection in KOHA

The library automation system product KOHA developed by Parantez Teknoloji before version 19.05.03 has an unauthenticated SQL Injection vulnerability. This has been fixed in the version 19.05.03.01.

CVSS 3.1 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Parantezteknoloji
Products
Koha Library Automation
CVE-2026-7668

MikroTik RouterOS SCEP Endpoint scep.p ASN1_STRING_data out-of-bounds

A vulnerability was identified in MikroTik RouterOS 6.49.8. This vulnerability affects the function ASN1_STRING_data in the library nova/lib/www/scep.p of the component SCEP Endpoint. The manipulation of the argument transactionID/messageType leads to out-of-bounds read. The attack may be initiated remotely. The exploit is publicly available and might be used. You should upgrade the affected component. The vendor recommends to "use the latest v6.x or 7.x MikroTik RouterOS version, the reported issue should be fixed there."

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Mikrotik
Products
Routeros
CVE-2022-0900

Cross-Site Scripting Vulnerability in DivvyDrive

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NetDataSoft DivvyDrive allows Stored XSS. This issue affects DivvyDrive: from unspecified before v.4.6.2.0.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Netdatasoft
Products
Divvy Drive
CVE-2022-1277

SQL Injection in Inavitas Solar Log

Inavitas Solar Log product has an unauthenticated SQL Injection vulnerability.

CVSS 3.1 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Inavitas
Products
Solar Log
CVE-2022-2177

SQL Injection in Kayrasoft

Kayrasoft product before version 2 has an unauthenticated SQL Injection vulnerability. This is fixed in version 2.

CVSS 3.1 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Kayrasoft
Products
Kayrasoft
CVE-2022-2178

XSS in Saysis' Starcities

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saysis Computer Starcities allows Cross-Site Scripting (XSS). This issue affects Starcities: before 1.1.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Saysis
Products
Starcities
CVE-2022-2266

Reflected XSS University Library Automation System

University Library Automation System developed by Yordam Bilgi Teknolojileri before version 19.2 has an unauthenticated Reflected XSS vulnerability. This has been fixed in the version 19.2

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Yordam
Products
Library Automation System
CVE-2022-2315

SQL Injection in Database Accreditation System

Database Software Accreditation Tracking/Presentation Module product before version 2 has an unauthenticated SQL Injection vulnerability. This is fixed in version 2.

CVSS 3.1 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Databank
Products
Accreditation Tracking\/presentation Module
CVE-2022-2504

SQLi in SDD-Baro

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SDD Computer Software SDD-Baro allows SQL Injection. This issue affects SDD-Baro: before 2.8.432.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Sdd-baro Project
Products
Sdd-baro
CVE-2022-2807

SQL Injection in Prens Student Information System

SQL Injection vulnerability in Algan Software Prens Student Information System allows SQL Injection. This issue affects Prens Student Information System: before 2.1.11.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Algan
Products
Prens Student Information System
CVE-2022-2808

IDOR in Prens Student Information System

Authorization Bypass Through User-Controlled Key vulnerability in Algan Software Prens Student Information System allows Object Relational Mapping Injection. This issue affects Prens Student Information System: before 2.1.11.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Algan
Products
Prens Student Information System
CVE-2022-3693

Path traversal in FileOrbis File Management System

Path Traversal vulnerability in Deytek Informatics FileOrbis File Management System allows Path Traversal. This issue affects FileOrbis File Management System: from unspecified before 10.6.3.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Fileorbis
Products
Fileorbis
CVE-2022-3760

SQLi in Mia-Med

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mia Technology Mia-Med. This issue affects Mia-Med: before 1.0.0.58.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Miateknoloji
Products
Mia-med
CVE-2022-3792

SQL Injection in GullsEye Terminal Operating System

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GullsEye GullsEye terminal operating system allows SQL Injection. This issue affects GullsEye terminal operating system: from unspecified before 5.0.13.

CVSS 3.1 · 9.8 Critical EPSS 14.2% KEV · Not listed
Vendors
Gullseye
Products
Gullseye Terminal Operating System
CVE-2022-4422

SQLi in Bulutdesk Callcenter

Call Center System developed by Bulutses Information Technologies before version 3.0 has an unauthenticated Sql Injection vulnerability. This has been fixed in the version 3.0

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Bulutses
Products
Bulutdesk Callcenter
CVE-2022-4554

Reflected XSS B2B Dealer Ordering System

B2B Customer Ordering System developed by ID Software Project and Consultancy Services before version 1.0.0.347 has an authenticated Reflected XSS vulnerability. This has been fixed in the version 1.0.0.347.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Idyazilim
Products
B2b Dealer Order System
CVE-2026-6902

Code Injection in Perforce P4 (Helix Core)

A Remote Code Execution vulnerability in P4 (Helix Core) Server's Command-Line Client, prior to the 2025.2 Patch 2, has been fixed to address potential security risks.

CVSS 4.0 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
Perforce
Products
Helix Core