Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-1618

Admin Account Takeover in Universal Sotware's FlexCity/Kiosk

Authentication Bypass Using an Alternate Path or Channel vulnerability in Universal Software Inc. FlexCity/Kiosk allows Privilege Escalation. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Uni-yaz Universal Software Inc.
Products
Flexcity Flexcity/kiosk
CVE-2026-1619

IDOR in Universal Sotware's FlexCity/Kiosk

Authorization Bypass Through User-Controlled Key vulnerability in Universal Software Inc. FlexCity/Kiosk allows Exploitation of Trusted Identifiers. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.

CVSS 3.1 · 8.3 High EPSS < 1% KEV · Not listed
Vendors
Uni-yaz Universal Software Inc.
Products
Flexcity Flexcity/kiosk
CVE-2025-14349

Business Logic Error in Universal Software's FlexCity/Kiosk

Privilege Defined With Unsafe Actions, Missing Authentication for Critical Function vulnerability in Universal Software Inc. FlexCity/Kiosk allows Accessing Functionality Not Properly Constrained by ACLs, Privilege Escalation. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Uni-yaz Universal Software Inc.
Products
Flexcity Flexcity/kiosk
CVE-2024-0857

SQLi in Universal Software's FlexWater Corporate Water Management

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Universal Software Inc. FlexWater Corporate Water Management allows SQL Injection. This issue affects FlexWater Corporate Water Management: before 5.452.0.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Uni-yaz Universal Software Inc
Products
Flexwater Corporate Water Management Flexwater Corporate Water Management