Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2025-0606

IDOR in Logo Software's Logo Cloud

Authorization Bypass Through User-Controlled Key vulnerability in Logo Software Inc. Logo Cloud allows Forceful Browsing, Resource Leak Exposure. This issue affects Logo Cloud: before 0.67.

CVSS 3.1 · 6 Medium EPSS < 1% KEV · Not listed
Vendors
Logo Software
Products
Logo Cloud
CVE-2025-0607

HTML Injection in Logo Software's Logo Cloud

Improper Encoding or Escaping of Output vulnerability in Logo Software Inc. Logo Cloud allows Phishing. This issue affects Logo Cloud: before 2.57.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Logo Software
Products
Logo Cloud
CVE-2025-0608

Open Redirect in Logo Software's Logo Cloud

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Logo Software Inc. Logo Cloud allows Phishing, Forceful Browsing. This issue affects Logo Cloud: before 2025.R6.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Logo Software
Products
Logo Cloud
CVE-2025-0609

XSS in Logo Software's Logo Cloud

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Logo Software Inc. Logo Cloud allows Cross-Site Scripting (XSS). This issue affects Logo Cloud: before 1.18.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Logo Software
Products
Logo Cloud
CVE-2025-10609

Hardcoded Credentials in Logo Software's TigerWings ERP

Use of Hard-coded Credentials vulnerability in Logo Software Inc. TigerWings ERP allows Read Sensitive Constants Within an Executable. This issue affects TigerWings ERP: from 01.01.00 before 3.03.00.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Logo Software
Products
Tigerwings Erp
CVE-2024-13151

SQLi in ESBI Informatics's Auto Service Software

CWE - 89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ESBI Information and Telecommunication Industry and Trade Limited Company Auto Service Software allows SQL Injection. This issue affects Auto Service Software: before v.2025.10.01.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Logo Software
Products
Diva