Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (17605 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-45012 1 Online Bus Booking System Project 1 Online Bus Booking System 2024-11-21 9.8 Critical
Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'user_email' parameter of the bus_info.php resource does not validate the characters received and they are sent unfiltered to the database.
CVE-2023-45001 1 Castos 1 Seriously Simple Stats 2024-11-21 9.8 Critical
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Castos Seriously Simple Stats allows SQL Injection.This issue affects Seriously Simple Stats: from n/a through 1.5.0.
CVE-2023-44961 1 Koha-community 1 Koha Library Software 2024-11-21 7.5 High
SQL Injection vulnerability in Koha Library Software 23.0.5.04 and before allows a remote attacker to obtain sensitive information via the intranet/cgi bin/cataloging/ysearch.pl. component.
CVE-2023-44694 1 Dlink 2 Dar-7000, Dar-7000 Firmware 2024-11-21 9.8 Critical
D-Link Online behavior audit gateway DAR-7000 V31R02B1413C is vulnerable to SQL Injection via /log/mailrecvview.php.
CVE-2023-44693 1 Dlink 2 Dar-7000, Dar-7000 Firmware 2024-11-21 9.8 Critical
D-Link Online behavior audit gateway DAR-7000 V31R02B1413C is vulnerable to SQL Injection via /importexport.php.
CVE-2023-44481 1 Projectworlds 1 Leave Management System 2024-11-21 8.8 High
Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setearnleave' parameter of the admin/setleaves.php resource does not validate the characters received and they are sent unfiltered to the database.
CVE-2023-44480 1 Projectworlds 1 Leave Management System 2024-11-21 8.8 High
Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setcasualleave' parameter of the admin/setleaves.php resource does not validate the characters received and they are sent unfiltered to the database.
CVE-2023-44294 1 Dell 1 Secure Connect Gateway 2024-11-21 5.4 Medium
In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance (between v5.10.00.00 and v5.18.00.00), a security concern has been identified, where a malicious user with a valid User session may inject malicious content in filters of Collection Rest API. This issue may potentially lead to unintentional information disclosure from the product database.
CVE-2023-44293 1 Dell 1 Secure Connect Gateway 2024-11-21 5.4 Medium
In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance (between v5.10.00.00 and v5.18.00.00), a security concern has been identified, where a malicious user with a valid User session may inject malicious content in filters of IP Range Rest API. This issue may potentially lead to unintentional information disclosure from the product database.
CVE-2023-44267 1 Projectworlds 1 Online Art Gallery 2024-11-21 9.8 Critical
Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'lnm' parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database.
CVE-2023-44166 1 Projectworlds 1 Online Movie Ticket Booking System 2024-11-21 9.8 Critical
The 'age' parameter of the process_registration.php resource does not validate the characters received and they are sent unfiltered to the database.
CVE-2023-44164 1 Projectworlds 1 Online Movie Ticket Booking System 2024-11-21 9.8 Critical
The 'Email' parameter of the process_login.php resource does not validate the characters received and they are sent unfiltered to the database.
CVE-2023-44163 1 Projectworlds 1 Online Movie Ticket Booking System 2024-11-21 9.8 Critical
The 'search' parameter of the process_search.php resource does not validate the characters received and they are sent unfiltered to the database.
CVE-2023-44044 1 Superstorefinder 1 Super Store Finder 2024-11-21 7.2 High
Super Store Finder v3.6 and below was discovered to contain a SQL injection vulnerability via the Search parameter at /admin/stores.php.
CVE-2023-44025 1 Addify 1 Free Gifts 2024-11-21 9.8 Critical
SQL injection vulnerability in addify Addifyfreegifts v.1.0.2 and before allows a remote attacker to execute arbitrary code via a crafted script to the getrulebyid function in the AddifyfreegiftsModel.php component.
CVE-2023-44024 1 Knowband 1 One Page Checkout\, Social Login \& Mailchimp 2024-11-21 9.8 Critical
SQL injection vulnerability in KnowBand Module One Page Checkout, Social Login & Mailchimp (supercheckout) v.8.0.3 and before allows a remote attacker to execute arbitrary code via a crafted request to the updateCheckoutBehaviour function in the supercheckout.php component.
CVE-2023-43986 1 Dmconcept 1 Configurator 2024-11-21 9.8 Critical
DM Concept configurator before v4.9.4 was discovered to contain a SQL injection vulnerability via the component ConfiguratorAttachment::getAttachmentByToken.
CVE-2023-43983 1 Presto-changeo 1 Attribute Grid 2024-11-21 9.8 Critical
Presto Changeo attributegrid up to 2.0.3 was discovered to contain a SQL injection vulnerability via the component disable_json.php.
CVE-2023-43980 1 Presto-changeo 1 Testsitecreator 2024-11-21 9.8 Critical
Presto Changeo testsitecreator up to v1.1.1 was discovered to contain a SQL injection vulnerability via the component disable_json.php.
CVE-2023-43979 1 Prestahero 1 Ybc Blog 2024-11-21 9.8 Critical
ETS Soft ybc_blog before v4.4.0 was discovered to contain a SQL injection vulnerability via the component Ybc_blogBlogModuleFrontController::getPosts().