CVE Vulnerability Database

Search and browse 99 known security vulnerabilities. Filter by severity, vendor, product, and year.

99 vulnerabilities found
Recent Highest Score Oldest
Severity: Critical × Year: 2023 × Clear all
CVE-2023-3376
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Digital Strategy Zekiweb allows SQL Injection. This issue affects Zekiweb: before 2.

Dijital Zekiweb Jul 17, 2023
CVE-2023-2963
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Oliva Expertise Oliva Expertise EKS allows SQL Injection. This issue affects Oliva Expertise EKS: before 1.2.

Olivaekspertiz Oliva Ekspertiz Jul 17, 2023
CVE-2023-35070
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VegaGroup Web Collection allows SQL Injection. This issue affects Web Collection: before 31197.

Vegagroup Web Collection Jul 13, 2023
CVE-2023-1547
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Elra Parkmatik allows SQL Injection through SOAP Parameter Tampering, Command Line Execution through SQL Injection. This issue affects Parkmatik: before 02.01-a51.

Elra Parkmatik Jul 13, 2023
CVE-2023-2957
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Lisa Software Florist Site allows SQL Injection.This issue affects Florist Site: before 3.0.

Lisayazilim Florist Site Jul 13, 2023
CVE-2023-33150
9.6 critical

Microsoft Office Security Feature Bypass Vulnerability

Microsoft 365 Apps Jul 11, 2023
CVE-2023-3045
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tise Technology Parking Web Report allows SQL Injection. This issue affects Parking Web Report: before 2.1.

Tise Parking Web Report Jul 10, 2023
CVE-2023-2852
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Softmed SelfPatron allows SQL Injection.This issue affects SelfPatron : before 2.0.

Softmedyazilim Selfpatron Jul 10, 2023
CVE-2023-2046
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yontem Informatics Vehicle Tracking System allows SQL Injection.This issue affects Vehicle Tracking System: before 8.

Yontemizleme Vehicle Tracking System Jul 10, 2023
CVE-2023-2907
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Marksoft allows SQL Injection.This issue affects Marksoft: through Mobile:v.7.1.7 ; Login:1.4 ; API:20230605.

Marksoft Marksoft Jun 19, 2023
CVE-2023-35064
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Satos Satos Mobile allows SQL Injection through SOAP Parameter Tampering. This issue affects Satos Mobile: before 20230607.

Satos Satos Mobile Jun 13, 2023
CVE-2023-3050
9.8 critical

Reliance on Cookies without Validation and Integrity Checking in a Security Decision vulnerability in TMT Lockcell allows Privilege Abuse, Authentication Bypass. This issue affects Lockcell: before 15.

Tmtmakine Lockcell Firmware Jun 13, 2023
CVE-2023-3049
9.8 critical

Unrestricted Upload of File with Dangerous Type vulnerability in TMT Lockcell allows Command Injection. This issue affects Lockcell: before 15.

Tmtmakine Lockcell Firmware Jun 13, 2023
CVE-2023-3048
9.8 critical

Authorization Bypass Through User-Controlled Key vulnerability in TMT Lockcell allows Authentication Abuse, Authentication Bypass. This issue affects Lockcell: before 15.

Tmtmakine Lockcell Firmware Jun 13, 2023
CVE-2023-3047
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMT Lockcell allows SQL Injection. This issue affects Lockcell: before 15.

Tmtmakine Lockcell Firmware Jun 13, 2023
CVE-2023-3000
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Erikoglu Technology ErMon allows Command Line Execution through SQL Injection, Authentication Bypass. This issue affects ErMon: before 230602.

Erikogluteknoloji Energy Monitoring Jun 2, 2023
CVE-2023-2851
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AGT Tech Ceppatron allows Command Line Execution through SQL Injection, SQL Injection.This issue affects all versions of the sofware also EOS when CVE-ID assigned.

Agtteknik Ceppatron May 25, 2023
CVE-2023-2887
9.8 critical

Authentication Bypass by Spoofing vulnerability in CBOT Chatbot allows Authentication Bypass.This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

Cbot Cbot Core May 25, 2023
CVE-2023-2884
9.8 critical

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG), Use of Insufficiently Random Values vulnerability in CBOT Chatbot allows Signature Spoofing by Key Recreation.This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

Cbot Cbot Core May 25, 2023
CVE-2023-2882
9.8 critical

Generation of Incorrect Security Tokens vulnerability in CBOT Chatbot allows Token Impersonation, Privilege Abuse.This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

Cbot Cbot Core May 25, 2023
CVE-2023-2064
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Minova Technology eTrace allows SQL Injection.This issue affects eTrace: before 23.05.20.

Minovateknoloji Etrace May 24, 2023
CVE-2023-2045
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ipekyolu Software Auto Damage Tracking Software allows SQL Injection.This issue affects Auto Damage Tracking Software: before 4.

Ipekyolunet Software Auto Damage Tracking Software May 24, 2023
CVE-2023-2750
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cityboss E-municipality allows SQL Injection.This issue affects E-municipality: before 6.05.

Cityboss E-Municipality May 24, 2023
CVE-2023-1508
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Adam Retail Automation Systems Mobilmen Terminal Software allows SQL Injection. This issue affects Mobilmen Terminal Software: before 3.

Adampos Mobilmen El Terminali Yazilimi May 23, 2023