CVE Vulnerability Database

Search and browse 99 known security vulnerabilities. Filter by severity, vendor, product, and year.

99 vulnerabilities found
Recent Highest Score Oldest
Severity: Critical × Year: 2023 × Clear all
CVE-2023-4675
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GM Information Technologies MDO allows SQL Injection. This issue affects MDO: through 20231229.  NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Gmbilisim Multi-Disciplinary Design Optimization Dec 29, 2023
CVE-2023-4541
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ween Software Admin Panel allows SQL Injection. This issue affects Admin Panel: through 20231229.  NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Ween Management Panel Dec 29, 2023
CVE-2023-4671
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Talent Software ECOP allows Command Line Execution through SQL Injection. This issue affects ECOP: before 32255.

Talentyazilim Ecop Dec 28, 2023
CVE-2023-5636
9.8 critical

Unrestricted Upload of File with Dangerous Type vulnerability in ArslanSoft Education Portal allows Command Injection. This issue affects Education Portal: before v1.1.

Arslansoft Education Portal Project Arslansoft Education Portal Dec 1, 2023
CVE-2023-5634
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ArslanSoft Education Portal allows SQL Injection. This issue affects Education Portal: before v1.1.

Arslansoft Education Portal Project Arslansoft Education Portal Dec 1, 2023
CVE-2023-3631
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Medart Health Services Medart Notification Panel allows SQL Injection. This issue affects Medart Notification Panel: through 20231123.  NOTE: The vendor was contacted early about this disclosure b

Medart Notification Panel Project Medart Notification Panel Nov 23, 2023
CVE-2023-3377
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Veribilim Software Computer Veribase allows SQL Injection. This issue affects Veribase: through 20231123.  NOTE: The vendor was contacted early about this disclosure but did not respond in any way

Veribase Veribase Nov 23, 2023
CVE-2023-2889
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Veon Computer Service Tracking Software allows SQL Injection.This issue affects Service Tracking Software: before crm 2.0.

Veom Service Tracking Nov 22, 2023
CVE-2023-5047
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DRD Fleet Leasing DRDrive allows SQL Injection. This issue affects DRDrive: before 20231006.

Drd Drdrive Nov 22, 2023
CVE-2023-47359
9.8 critical

Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket() and results in a memory corruption.

Videolan Vlc Media Player Nov 7, 2023
CVE-2023-5807
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TRtek Software Education Portal allows SQL Injection. This issue affects Education Portal: before 3.2023.29.

Trteksolutions Education Portal Oct 27, 2023
CVE-2023-5046
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Biltay Technology Procost allows SQL Injection, Command Line Execution through SQL Injection. This issue affects Procost: before 1390.

Biltay Procost Oct 12, 2023
CVE-2023-5045
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Biltay Technology Kayisi allows SQL Injection, Command Line Execution through SQL Injection. This issue affects Kayisi: before 1286.

Biltay Kayisi Oct 12, 2023
CVE-2023-45199
9.8 critical

Mbed TLS 3.2.x through 3.4.x before 3.5 has a Buffer Overflow that can lead to remote Code execution.

Trustedfirmware Mbed Tls Oct 7, 2023
CVE-2023-4530
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Turna Advertising Administration Panel allows SQL Injection. This issue affects Advertising Administration Panel: before 1.1.

Turnatasarim Advertising Administration Panel Oct 6, 2023
CVE-2023-4737
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Hedef Tracking Admin Panel allows SQL Injection. This issue affects Admin Panel: before 1.2.

Hedeftakip Admin Portal Sep 27, 2023
CVE-2023-35071
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MRV Tech Logging Administration Panel allows SQL Injection. This issue affects Logging Administration Panel: before 20230915 .

Mrv Logging Administration Panel Sep 27, 2023
CVE-2023-4835
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CF Software Oil Management Software allows SQL Injection. This issue affects Oil Management Software: before 20230912 .

Petroleum Management Software Application Project Petroleum Management Software Application Sep 15, 2023
CVE-2023-4833
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Besttem Network Marketing Software allows SQL Injection. This issue affects Network Marketing Software: before 1.0.2309.6.

Besttem Network Marketing Project Besttem Network Marketing Sep 15, 2023
CVE-2023-4662
9.8 critical

Execution with Unnecessary Privileges vulnerability in Saphira Saphira Connect allows Remote Code Inclusion. This issue affects Saphira Connect: before 9.

Adobe Connect Sep 15, 2023
CVE-2023-4661
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saphira Saphira Connect allows SQL Injection. This issue affects Saphira Connect: before 9.

Adobe Connect Sep 15, 2023
CVE-2023-4670
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Innosa Probbys allows SQL Injection. This issue affects Probbys: before 2.

Innosa Probbys Project Innosa Probbys Sep 15, 2023
CVE-2023-4231
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cevik Informatics Online Payment System allows SQL Injection. This issue affects Online Payment System: before 4.09.

Cevik Informatics Online Payment System Sep 15, 2023
CVE-2023-4830
9.8 critical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tura Signalix allows SQL Injection. This issue affects Signalix: 7T_0228.

Turaconsulting Signalix Sep 15, 2023