Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,866

CVE-2023-6677

SQLi in Oduyo Online Collection Software

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Oduyo Financial Technology Online Collection allows SQL Injection. This issue affects Online Collection: before v.1.0.2.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Oduyo
Products
Online Collection
CVE-2023-6724

IDOR in Simgesel Software's Hearing Tracking System (Barosel)

Authorization Bypass Through User-Controlled Key vulnerability in Software Engineering Consultancy Machine Equipment Limited Company Hearing Tracking System allows Authentication Abuse. This issue affects Hearing Tracking System: before for IOS 7.0, for Android Latest release 1.0.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Simgesel
Products
Hearing Tracking System
CVE-2023-6919

Path Traversal in VGuard IP Camera Network Recorder

Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard allows Absolute Path Traversal. This issue affects VGuard: before V500.0003.R008.4011.C0012.B351.C.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Biges
Products
Vg-255-bv Vg-255-bv Firmware Vg-255-df and 15 more
CVE-2023-7081

SQLi in PosTahsil's Online Payment System

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in POSTAHSİL Online Payment System allows SQL Injection. This issue affects Online Payment System: before 14.02.2024.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Postahsil
Products
Online Payment System
CVE-2023-7153

Reflected XSS in Macroturk's Macro-Bel

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Macroturk Software and Internet Technologies Macro-Bel allows Reflected XSS. This issue affects Macro-Bel: before V.1.0.1.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Macroturk
Products
Macro-bel
CVE-2022-23790

XSS in Firmanet Software and Technology Customer Relation Manager

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Firmanet Software and Technology Customer Relation Manager allows Cross-Site Scripting (XSS). This issue affects Customer Relation Manager: before 2022.03.13.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Firmanet
Products
Technology Customer Relation Manager
CVE-2022-23791

XSS in Firmanet Software and Technology Customer Relation Manager

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Firmanet Software and Technology Customer Relation Manager allows Cross-Site Scripting (XSS). This issue affects Customer Relation Manager: before 2022.03.13.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Firmanet
Products
Customer Relation Manager
CVE-2022-24036

Unauthorized modification in Karmasis Informatics Infraskope SIEM+

Karmasis Informatics Infraskope SIEM+ has an unauthenticated access vulnerability which could allow an unauthenticated attacker to modificate logs.

CVSS 3.1 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Karmasis
Products
Infraskope Siem\+
CVE-2022-24038

Unauthorized modification in Karmasis Informatics Infraskope SIEM+

Karmasis Informatics Infraskope SIEM+ has an unauthenticated access vulnerability which could allow an unauthenticated attacker to damage the page where the agents are listed.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Karmasis
Products
Infraskope Siem\+
CVE-2022-24037

Unauthorized modification in Karmasis Informatics Infraskope SIEM+

Karmasis Informatics Infraskope SIEM+ has an unauthenticated access vulnerability which could allow an unauthenticated attacker to obtain critical information.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Karmasis
Products
Infraskope Siem\+
CVE-2022-0495

SQL Injection in KOHA

The library automation system product KOHA developed by Parantez Teknoloji before version 19.05.03 has an unauthenticated SQL Injection vulnerability. This has been fixed in the version 19.05.03.01.

CVSS 3.1 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Parantezteknoloji
Products
Koha Library Automation
CVE-2026-7668

MikroTik RouterOS SCEP Endpoint scep.p ASN1_STRING_data out-of-bounds

A vulnerability was identified in MikroTik RouterOS 6.49.8. This vulnerability affects the function ASN1_STRING_data in the library nova/lib/www/scep.p of the component SCEP Endpoint. The manipulation of the argument transactionID/messageType leads to out-of-bounds read. The attack may be initiated remotely. The exploit is publicly available and might be used. You should upgrade the affected component. The vendor recommends to "use the latest v6.x or 7.x MikroTik RouterOS version, the reported issue should be fixed there."

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Mikrotik
Products
Routeros
CVE-2022-0900

Cross-Site Scripting Vulnerability in DivvyDrive

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NetDataSoft DivvyDrive allows Stored XSS. This issue affects DivvyDrive: from unspecified before v.4.6.2.0.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Netdatasoft
Products
Divvy Drive
CVE-2022-1277

SQL Injection in Inavitas Solar Log

Inavitas Solar Log product has an unauthenticated SQL Injection vulnerability.

CVSS 3.1 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Inavitas
Products
Solar Log
CVE-2022-2177

SQL Injection in Kayrasoft

Kayrasoft product before version 2 has an unauthenticated SQL Injection vulnerability. This is fixed in version 2.

CVSS 3.1 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Kayrasoft
Products
Kayrasoft
CVE-2022-2178

XSS in Saysis' Starcities

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saysis Computer Starcities allows Cross-Site Scripting (XSS). This issue affects Starcities: before 1.1.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Saysis
Products
Starcities
CVE-2022-2266

Reflected XSS University Library Automation System

University Library Automation System developed by Yordam Bilgi Teknolojileri before version 19.2 has an unauthenticated Reflected XSS vulnerability. This has been fixed in the version 19.2

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Yordam
Products
Library Automation System
CVE-2022-2315

SQL Injection in Database Accreditation System

Database Software Accreditation Tracking/Presentation Module product before version 2 has an unauthenticated SQL Injection vulnerability. This is fixed in version 2.

CVSS 3.1 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Databank
Products
Accreditation Tracking\/presentation Module
CVE-2022-2504

SQLi in SDD-Baro

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SDD Computer Software SDD-Baro allows SQL Injection. This issue affects SDD-Baro: before 2.8.432.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Sdd-baro Project
Products
Sdd-baro