Fri, Feb 14 · 01:15 PM CSTCVE-2024-13152
10.0/10 · Must read/watchNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BSS Software Mobuy Online Machinery Monitoring Panel allows SQL Injection. This issue affects Mobuy Online Machinery Monitoring Panel: before 2.0.
CVECVE-2024-13152
SeverityCRITICAL
TypeUPDATED
PublishedFri, Feb 14 · 01:15 PM CST
ModifiedMon, Jun 01 · 01:16 PM CDT
Wed, Dec 25 · 01:15 PM CSTCVE-2024-8950
9.9/10 · Must read/watchNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arne Informatics Piramit Automation allows Blind SQL Injection. This issue affects Piramit Automation: before 27.09.2024.
CVECVE-2024-8950
SeverityCRITICAL
TypeUPDATED
PublishedWed, Dec 25 · 01:15 PM CST
ModifiedTue, Jun 02 · 09:16 AM CDT
Mon, Mar 06 · 08:15 AM CSTCVE-2023-0839
9.8/10 · Must read/watchNVDvuln
Summary
Improper Protection for Outbound Error Messages and Alert Signals vulnerability in ProMIS Process Co. InSCADA allows Account Footprinting. This issue affects inSCADA: before 20230115-1.
CVECVE-2023-0839
SeverityCRITICAL
TypeUPDATED
PublishedMon, Mar 06 · 08:15 AM CST
ModifiedMon, Jun 01 · 01:16 PM CDT
Thu, Feb 23 · 08:15 AM CSTCVE-2023-0939
9.8/10 · Must read/watchNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NTN Information Technologies Online Services Software allows SQL Injection. This issue affects Online Services Software: before 1.17.
CVECVE-2023-0939
SeverityCRITICAL
TypeUPDATED
PublishedThu, Feb 23 · 08:15 AM CST
ModifiedMon, Jun 01 · 01:16 PM CDT
Mon, Mar 06 · 03:15 PM CSTCVE-2023-0979
9.8/10 · Must read/watchNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MedData MedDataPACS allows SQL Injection. This issue affects MedDataPACS : before 2023-03-03.
CVECVE-2023-0979
SeverityCRITICAL
TypeUPDATED
PublishedMon, Mar 06 · 03:15 PM CST
ModifiedMon, Jun 01 · 01:16 PM CDT
Thu, Mar 23 · 07:15 AM CDTCVE-2023-1050
9.8/10 · Must read/watchNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in As Koc Energy Web Report System allows SQL Injection. This issue affects Web Report System: before 23.03.10.
CVECVE-2023-1050
SeverityCRITICAL
TypeUPDATED
PublishedThu, Mar 23 · 07:15 AM CDT
ModifiedMon, Jun 01 · 01:16 PM CDT
Wed, Mar 01 · 01:15 PM CSTCVE-2023-1064
9.8/10 · Must read/watchNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Uzay Baskul Weighbridge Automation Software allows SQL Injection. This issue affects Weighbridge Automation Software: before 1.1.
CVECVE-2023-1064
SeverityCRITICAL
TypeUPDATED
PublishedWed, Mar 01 · 01:15 PM CST
ModifiedMon, Jun 01 · 01:16 PM CDT
Fri, Mar 10 · 08:15 AM CSTCVE-2023-1091
9.8/10 · Must read/watchNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alpata Licensed Warehousing Automation System allows Command Line Execution through SQL Injection. This issue affects Licensed Warehousing Automation System: through 2023.1.01.
CVECVE-2023-1091
SeverityCRITICAL
TypeUPDATED
PublishedFri, Mar 10 · 08:15 AM CST
ModifiedMon, Jun 01 · 01:16 PM CDT
Wed, Mar 01 · 01:15 PM CSTCVE-2023-1114
9.8/10 · Must read/watchNVDvuln
Summary
Missing Authorization vulnerability in Eskom e-Belediye allows Information Elicitation. This issue affects e-Belediye: from 1.0.0.95 before 1.0.0.100.
CVECVE-2023-1114
SeverityCRITICAL
TypeUPDATED
PublishedWed, Mar 01 · 01:15 PM CST
ModifiedMon, Jun 01 · 01:16 PM CDT
Fri, Mar 17 · 09:15 AM CDTCVE-2023-1152
9.8/10 · Must read/watchNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Utarit Information Technologies Persolus allows SQL Injection. This issue affects Persolus: before 2.03.93.
CVECVE-2023-1152
SeverityCRITICAL
TypeUPDATED
PublishedFri, Mar 17 · 09:15 AM CDT
ModifiedMon, Jun 01 · 01:16 PM CDT
Tue, Mar 21 · 12:15 PM CDTCVE-2023-1153
9.8/10 · Must read/watchNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pacsrapor allows SQL Injection, Command Line Execution through SQL Injection. This issue affects Pacsrapor: before 1.22.
CVECVE-2023-1153
SeverityCRITICAL
TypeUPDATED
PublishedTue, Mar 21 · 12:15 PM CDT
ModifiedMon, Jun 01 · 01:16 PM CDT
Fri, Mar 10 · 09:15 PM CSTCVE-2023-1198
9.8/10 · Must read/watchNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saysis Starcities allows SQL Injection. This issue affects Starcities: through 1.3.
CVECVE-2023-1198
SeverityCRITICAL
TypeUPDATED
PublishedFri, Mar 10 · 09:15 PM CST
ModifiedMon, Jun 01 · 01:16 PM CDT
Thu, Mar 09 · 08:15 AM CSTCVE-2023-1251
9.8/10 · Must read/watchNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Akinsoft Wolvox. This issue affects Wolvox: before 8.02.03.
CVECVE-2023-1251
SeverityCRITICAL
TypeUPDATED
PublishedThu, Mar 09 · 08:15 AM CST
ModifiedMon, Jun 01 · 01:16 PM CDT
Wed, Mar 08 · 12:15 PM CSTCVE-2023-1267
9.8/10 · Must read/watchNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ulkem Company PtteM Kart. This issue affects PtteM Kart: before 2.1.
CVECVE-2023-1267
SeverityCRITICAL
TypeUPDATED
PublishedWed, Mar 08 · 12:15 PM CST
ModifiedMon, Jun 01 · 01:16 PM CDT
Tue, May 23 · 09:15 PM CDTCVE-2023-1508
9.8/10 · Must read/watchNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Adam Retail Automation Systems Mobilmen Terminal Software allows SQL Injection. This issue affects Mobilmen Terminal Software: before 3.
CVECVE-2023-1508
SeverityCRITICAL
TypeUPDATED
PublishedTue, May 23 · 09:15 PM CDT
ModifiedMon, Jun 01 · 01:16 PM CDT
Thu, Jul 13 · 08:15 AM CDTCVE-2023-1547
9.8/10 · Must read/watchNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Elra Parkmatik allows SQL Injection through SOAP Parameter Tampering, Command Line Execution through SQL Injection. This issue affects Parkmatik: before 02.01-a51.
CVECVE-2023-1547
SeverityCRITICAL
TypeUPDATED
PublishedThu, Jul 13 · 08:15 AM CDT
ModifiedMon, Jun 01 · 11:16 AM CDT
Mon, Nov 04 · 12:16 PM CSTCVE-2024-10035
9.8/10 · Must read/watchNVDvuln
Summary
Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Special Elements used in a Command ('Command Injection'), Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in BG-TEK Informatics Security Technologies CoslatV3 allows Command Inj
CVECVE-2024-10035
SeverityCRITICAL
TypeUPDATED
PublishedMon, Nov 04 · 12:16 PM CST
ModifiedTue, Jun 02 · 09:16 AM CDT
Thu, Dec 19 · 02:15 PM CSTCVE-2024-10244
9.8/10 · Must read/watchNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ISDO Software Web Software allows SQL Injection. This issue affects Web Software: before 3.6.
CVECVE-2024-10244
SeverityCRITICAL
TypeUPDATED
PublishedThu, Dec 19 · 02:15 PM CST
ModifiedTue, Jun 02 · 07:16 AM CDT
Fri, Nov 15 · 11:15 AM CSTCVE-2024-10534
9.8/10 · Must read/watchNVDvuln
Summary
Origin Validation Error vulnerability in Dataprom Informatics Personnel Attendance Control Systems (PACS) / Access Control Security Systems (ACSS) allows Traffic Injection. This issue affects Personnel Attendance Control Systems (PACS) / Access Control Security Systems (ACSS): before 2024.
CVECVE-2024-10534
SeverityCRITICAL
TypeUPDATED
PublishedFri, Nov 15 · 11:15 AM CST
ModifiedTue, Jun 02 · 07:16 AM CDT
Wed, Mar 05 · 02:15 PM CSTCVE-2024-12097
9.8/10 · Must read/watchNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Boceksoft Informatics E-Travel allows SQL Injection. This issue affects E-Travel: before 15.12.2024.
CVECVE-2024-12097
SeverityCRITICAL
TypeUPDATED
PublishedWed, Mar 05 · 02:15 PM CST
ModifiedTue, Jun 02 · 07:16 AM CDT
Thu, Mar 06 · 02:15 PM CSTCVE-2024-12144
9.8/10 · Must read/watchNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Finder Fire Safety Finder ERP/CRM (Old System) allows SQL Injection. This issue affects Finder ERP/CRM (Old System): before 18.12.2024.
CVECVE-2024-12144
SeverityCRITICAL
TypeUPDATED
PublishedThu, Mar 06 · 02:15 PM CST
ModifiedMon, Jun 01 · 03:16 PM CDT
Wed, Mar 05 · 02:15 PM CSTCVE-2024-13147
9.8/10 · Must read/watchNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Merkur Software B2B Login Panel allows SQL Injection. This issue affects B2B Login Panel: before 15.01.2025.
CVECVE-2024-13147
SeverityCRITICAL
TypeUPDATED
PublishedWed, Mar 05 · 02:15 PM CST
ModifiedMon, Jun 01 · 01:16 PM CDT
Thu, Feb 27 · 03:15 PM CSTCVE-2024-13148
9.8/10 · Must read/watchNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yukseloglu Filter B2B Login Platform allows SQL Injection. This issue affects B2B Login Platform: before 16.01.2025.
CVECVE-2024-13148
SeverityCRITICAL
TypeUPDATED
PublishedThu, Feb 27 · 03:15 PM CST
ModifiedMon, Jun 01 · 01:16 PM CDT
Mon, Dec 09 · 02:15 PM CSTCVE-2024-8259
9.8/10 · Must read/watchNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eryaz Information Technologies NatraCar B2B Dealer Management Program allows SQL Injection. This issue affects NatraCar B2B Dealer Management Program: through 09.12.2024. NOTE: The vendor was contacted and it was learn
CVECVE-2024-8259
SeverityCRITICAL
TypeUPDATED
PublishedMon, Dec 09 · 02:15 PM CST
ModifiedTue, Jun 02 · 09:16 AM CDT
Mon, Mar 03 · 03:15 PM CSTCVE-2024-8262
9.8/10 · Must read/watchNVDvuln
Summary
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Proliz Software OBS allows Path Traversal. This issue affects OBS: before 24.0927.
CVECVE-2024-8262
SeverityCRITICAL
TypeUPDATED
PublishedMon, Mar 03 · 03:15 PM CST
ModifiedTue, Jun 02 · 09:16 AM CDT