CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.07.23)
A vulnerability in Saphira Connect allows Remote Code Inclusion with unnecessary privileges. This issue affects Saphira Connect versions before 9.
CVE-2023-4661 describes an improper neutralization of special elements used in SQL commands, allowing SQL Injection in Saphira Connect versions before 9.
CVE-2023-4670 describes an improper neutralization of special elements used in SQL commands, allowing for SQL Injection attacks in Innosa Probbys.
The Cevik Informatics Online Payment System has an SQL Injection vulnerability due to improper neutralization of special elements used in SQL commands. This issue affects versions before 4.09.
CVE-2023-4830 describes an improper neutralization of special elements used in SQL commands, leading to SQL Injection vulnerabilities in the Tura Signalix application.
CVE-2023-4673 describes an improper neutralization of special elements used in SQL commands, allowing for SQL Injection attacks in the Sanalogy Turasistan application.
The vulnerability in Yepas Digital Yepas related to incorrect use of privileged APIs allows for collecting data provided by users. This issue affects versions before 1.0.1.
CVE-2023-4702 describes an authentication bypass vulnerability in Yepas Digital Yepas. This issue affects versions before 1.0.1.
CVE-2023-4766 describes an improper neutralization of special elements used in SQL commands, allowing for SQL Injection in the Movus system. This issue affects versions before 20230913.
A vulnerability in Exagate SYSGuard 3001 allows authentication bypass through assumed-immutable data. This issue affects versions before 3.2.20.0.
CVE-2023-4832 describes an improper neutralization of special elements used in SQL commands, allowing SQL Injection in Aceka Company Management. This issue affects versions before 3072.
A command injection vulnerability was discovered in the D-Link DIR-816 A2 router running firmware version 1.10 B05. The flaw resides in the /goform/Diagnosis component.
W TSplus Remote Access w wersji do 16.0.2.14 odkryto problem, w którym dane uwierzytelniające są przechowywane w postaci niezaszyfrowanej w kodzie źródłowym HTML strony logowania.
W TSplus Remote Access w wersji do 16.0.2.14 odkryto problem związany z uprawnieniami. Niektóre katalogi w %PROGRAMFILES(X86)%\TSplus\UserDesktop\themes mają pełne uprawnienia kontrolne dla wszystkich użytkowników.
An issue was discovered in MoFi Network MOFI4500-4GXeLTE-V2 3.5.6-xnet-5052 allows attackers to bypass authentication and execute arbitrary code via crafted HTTP request.
Wtyczka Media Library Assistant dla WordPressa jest podatna na lokalne włączenie plików oraz zdalne wykonanie kodu w wersjach do 3.09 włącznie. Problem wynika z niewystarczających zabezpieczeń dotyczących ścieżek plików przekazywanych do parametru 'mla_stream_file'.
A file upload vulnerability in bolo-solo version 2.6 allows a remote attacker to execute arbitrary code by sending a crafted script in the authorization header. This can lead to full server compromise.
CVE-2023-4531 describes an improper neutralization of special elements used in SQL commands, leading to SQL Injection vulnerabilities in Mestav's e-commerce software. This issue affects versions of the software before 20230901.
A vulnerability in Neutron Smart VMS allows authentication bypass via spoofing. This affects versions before b1130.1.0.1.
A SQL Injection vulnerability in Digita Information Technology's Smartrise Document Management System due to improper neutralization of special elements used in SQL commands. This issue affects versions before Hvl-2.0.