CVE-2023-1833

Authentication Bypass in Redline Router

Authentication Bypass by Primary Weakness vulnerability in DTS Electronics Redline Router firmware allows Authentication Bypass. This issue affects Redline Router: before 7.17.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Redline

Products

Router Firmware

CVE-2023-1863

SQLi in Eskom Computer Water Metering Software

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eskom Water Metering Software allows Command Line Execution through SQL Injection. This issue affects Water Metering Software: before 23.04.06.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Eskom

Products

El Terminali \(su Okuma\) Uygulamalarimiz

CVE-2023-1873

SQLi in Bircard

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Faturamatik Bircard allows SQL Injection. This issue affects Bircard: before 23.04.05.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Faturamatik

Products

Bircard

CVE-2023-2045

SQLi in Ipekyolu Software's Auto Damage Tracking Software

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ipekyolu Software Auto Damage Tracking Software allows SQL Injection. This issue affects Auto Damage Tracking Software: before 4.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Ipekyolunet

Products

Software Auto Damage Tracking Software

CVE-2023-2046

SQLi in Yontem Vehicle TrackingSsystem

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yontem Informatics Vehicle Tracking System allows SQL Injection. This issue affects Vehicle Tracking System: before 8.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Yontemizleme

Products

Vehicle Tracking System

CVE-2023-2064

SQLi in Minova Technology's eTrace

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Minova Technology eTrace allows SQL Injection. This issue affects eTrace: before 23.05.20.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Minovateknoloji

Products

Etrace

CVE-2023-2065

IDOR in Armoli Technology's Cargo Tracking System

Authorization Bypass Through User-Controlled Key vulnerability in Armoli Technology Cargo Tracking System allows Authentication Abuse, Authentication Bypass. This issue affects Cargo Tracking System: before 3558f28 .

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Armoli

Products

Cargo Tracking System

CVE-2023-2702

IDOR in Finex Media's Competition Management System

Authorization Bypass Through User-Controlled Key vulnerability in Finex Media Competition Management System allows Authentication Abuse, Authentication Bypass. This issue affects Competition Management System: before 23.07.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Finexmedia

Products

Competition Management System

CVE-2023-2703

Information Disclosure in Finex Media's Competition Management System

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Finex Media Competition Management System allows Retrieve Embedded Sensitive Data, Collect Data as Provided by Users. This issue affects Competition Management System: before 23.07.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Finexmedia

Products

Competition Management System

CVE-2023-2712

Malicious File Upload vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform.

Unrestricted Upload of File with Dangerous Type vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Command Injection, Using Malicious Files, Upload a Web Shell to a Web Server. This issue affects Rental Module: before 23.05.15.

CVSS 3.1 · 9.8 Critical EPSS 1.3% KEV · Not listed

Vendors

Rental Module Project

Products

Rental Module

CVE-2023-2713

IDOR vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform.

Authorization Bypass Through User-Controlled Key vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Authentication Abuse, Authentication Bypass. This issue affects Rental Module: before 23.05.15.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Rental Module Project

Products

Rental Module

CVE-2023-2750

SQLi in Cityboss Software's E-municipality

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cityboss E-municipality allows SQL Injection. This issue affects E-municipality: before 6.05.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Cityboss

Products

E-municipality

CVE-2023-2851

SQLi in Ceppatron

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AGT Tech Ceppatron allows Command Line Execution through SQL Injection, SQL Injection. This issue affects all versions of the sofware also EOS when CVE-ID assigned.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Agtteknik

Products

Ceppatron

CVE-2023-2852

SQLi in SoftMed's SelfPatron

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Softmed SelfPatron allows SQL Injection. This issue affects SelfPatron : before 2.0.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Softmedyazilim

Products

Selfpatron

CVE-2023-2853

XSS in SoftMed's SelfPatron

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Softmed SelfPatron allows Reflected XSS. This issue affects SelfPatron : before 2.0.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Softmedyazilim

Products

Selfpatron

CVE-2023-2882

Privilege Escalation in CBOT's Chatbot

Generation of Incorrect Security Tokens vulnerability in CBOT Chatbot allows Token Impersonation, Privilege Abuse. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Cbot

Products

Cbot Core Cbot Panel

CVE-2023-2883

IDOR in CBOT's Chatbot

Authorization Bypass Through User-Controlled Key vulnerability in CBOT Chatbot allows Authentication Abuse, Authentication Bypass. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Cbot

Products

Cbot Core Cbot Panel

CVE-2023-2884

Insecure Randomness in CBOT's Chatbot

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG), Use of Insufficiently Random Values vulnerability in CBOT Chatbot allows Signature Spoofing by Key Recreation. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Cbot

Products

Cbot Core Cbot Panel

CVE-2023-2885

Channel Accessible by Non-Endpoint in CBOT's Chatbot

Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in CBOT Chatbot allows Adversary in the Middle (AiTM). This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed

Vendors

Cbot

Products

Cbot Core Cbot Panel

CVE-2023-2886

Cross-Site WebSocket Hijacking in CBOT's Chatbot

Missing Origin Validation in WebSockets vulnerability in CBOT Chatbot allows Content Spoofing Via Application API Manipulation. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Cbot

Products

Cbot Core Cbot Panel