CVE-2023-36555

An improper neutralization of script-related html tags in a web page basic xss in Fortinet FortiOS 7.2.0 - 7.2.4 allows an attacker to execute unauthorized code or commands via the SAML and Security Fabric components...

Siemens SINEC NMS

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

CVE-2023-43698

Improper Neutralization of Input During Web Page Generation ’Cross-site Scripting’ in RDT400 in SICK APU allows an unprivileged remote attacker to run arbitrary code in the clients browser via injecting code into the website...

CVE-2023-43698

Improper Neutralization of Input During Web Page Generation ’Cross-site Scripting’ in RDT400 in SICK APU allows an unprivileged remote attacker to run arbitrary code in the clients browser via injecting code into the website...

Improper Neutralization

Improper Neutralization in CefSharp.Common.NETCore...

Improper Neutralization

Improper Neutralization in CefSharp.Common...

CVE-2023-41728

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rescue Themes Rescue Shortcodes allows Stored XSS.This issue affects Rescue Shortcodes: from n/a through 2.5...

CVE-2023-3922 URL Redirection to Untrusted Site ('Open Redirect') in GitLab

An issue has been discovered in GitLab affecting all versions starting from 8.15 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1. It was possible to hijack some links and buttons on the GitLab UI to a malicious page...

UBUNTU-CVE-2023-42117

Exim Improper Neutralization of Special Elements Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the smtp...

CVE-2023-4737 SQLi in Hedef Trackings Admin Panel

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Hedef Tracking Admin Panel allows SQL Injection. This issue affects Admin Panel: before 1.2...

CVE-2023-4833

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Besttem Network Marketing Software allows SQL Injection. This issue affects Network Marketing Software: before 1.0.2309.6...

CVE-2023-4835

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CF Software Oil Management Software allows SQL Injection. This issue affects Oil Management Software: before 20230912...

CVE-2023-4661

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Saphira Saphira Connect allows SQL Injection. This issue affects Saphira Connect: before 9...

CVE-2023-4661

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Saphira Saphira Connect allows SQL Injection.This issue affects Saphira Connect: before 9...

Design/Logic Flaw

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Saphira Saphira Connect allows Reflected XSS.This issue affects Saphira Connect: before 9...

CVE-2023-4670

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Innosa Probbys allows SQL Injection. This issue affects Probbys: before 2...

CVE-2023-4673

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sanalogy Turasistan allows SQL Injection. This issue affects Turasistan: before 20230911...

CVE-2023-4673 SQLi in Sanalogy's Turasistan

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sanalogy Turasistan allows SQL Injection. This issue affects Turasistan: before 20230911...

Besttem Network Marketing Software SQL Injection Vulnerability

Besttem Network Marketing Software is a network marketing software from Besttem Turkey. A SQL injection vulnerability exists in Besttem Network Marketing Software versions prior to 1.0.2309.6, which stems from improper neutralization of special elements...

Tura Signalix Portal SQL Injection Vulnerability

Tura Signalix Portal is an application from Tura. A SQL injection vulnerability exists in Tura Signalix Portal version 7T0228 that stems from improper neutralization of special elements...