CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3351 matches found

UbuntuCve•added 2014/11/21 3:59 p.m.•45 views

CVE-2014-7137

Multiple SQL injection vulnerabilities in Dolibarr ERP/CRM before 3.6.1 allow remote authenticated users to execute arbitrary SQL commands via the 1 contactid parameter in an addcontact action, 2 ligne parameter in a swapstatut action, or 3 projectref parameter to projet/tasks/contact.php; 4 line...

6.5CVSS6.2AI score0.01698EPSS

SaveExploits3References1

Cvelist•added 2014/11/21 3:00 p.m.•48 views

CVE-2014-7137

8AI score0.01698EPSS

SaveExploits3References5

Mend•added 2014/11/21 3:00 p.m.•3 views

CVE-2014-7137

6.5CVSS0.01698EPSS

SaveExploits3References5

CVE•added 2014/11/21 3:00 p.m.•85 views

CVE-2014-7137

CVE-2014-7137 covers multiple SQL injection vulnerabilities in Dolibarr ERP/CRM before 3.6.1. An authenticated user could exploit numerous parameters across modules (e.g., product/stock/fiche.php; projet/tasks/contact.php; compta/prelevement/liste.php; holiday/index.php; etc.) to execute arbitrar...

6.5CVSS8.2AI score0.01698EPSS

SaveExploits3References5Affected Software1

Rapid7 Vulnerability Database (full)•added 2014/11/21 12:00 a.m.•6 views

CVE-2014-7137: Improper Neutralization of Special Elements used in an SQL Command

6.5CVSS6.4AI score0.01698EPSS

SaveExploits3References2

Positive Technologies•added 2014/11/21 12:00 a.m.•3 views

PT-2014-7798

Name of the Vulnerable Software and Affected Versions Dolibarr ERP/CRM versions prior to 3.6.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands via various parameters in different actions and PHP files. The vulnerable parameters include contactid, ligne,...

6.5CVSS0.01698EPSS

SaveExploits3References6

zdt•added 2014/11/20 12:00 a.m.•58 views

Dolibarr ERP And CRM 3.5.3 SQL Injection Vulnerability

Dolibarr ERP and CRM version 3.5.3 suffers from multiple remote SQL injection vulnerabilities. Vulnerability title: Multiple SQL Injections in Dolibarr ERP & CRM CVE: CVE-2014-7137 Vendor: Dolibarr ERP & CRM Product: Dolibarr ERP & CRM Affected version: 3.5.3 Fixed version: 3.6.1 Reported by: Jer...

6.5CVSS7.8AI score0.01698EPSS

SaveExploits3

Packet Storm•added 2014/11/19 12:00 a.m.•88 views

Dolibarr ERP And CRM 3.5.3 SQL Injection

Vulnerability title: Multiple SQL Injections in Dolibarr ERP & CRM CVE: CVE-2014-7137 Vendor: Dolibarr ERP & CRM Product: Dolibarr ERP & CRM Affected version: 3.5.3 Fixed version: 3.6.1 Reported by: Jerzy Kramarz Details: SQL injection has been found and confirmed within the software as an...

6.5CVSS0.4AI score0.01698EPSS

SaveExploits3

securityvulns•added 2014/08/04 12:00 a.m.•69 views

[Onapsis Security Advisory 2014-025] Multiple Cross Site Scripting Vulnerabilities in SAP HANA XS Administration Tool

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisory 2014-025: Multiple Cross Site Scripting Vulnerabilities in SAP HANA XS Administration Tool This advisory can be downloaded in PDF format from http://www.onapsis.com/. By downloading this advisory from the Onapsis Resource...

6.2AI score

SaveExploits0

NVD•added 2014/07/11 2:55 p.m.•24 views

CVE-2014-3991

Multiple cross-site scripting XSS vulnerabilities in Dolibarr ERP/CRM 3.5.3 allow remote attackers to inject arbitrary web script or HTML via the 1 dolusejmobile, 2 doloptimizesmallscreen, 3 dolnomousehover, 4 dolhidetopmenu, 5 dolhideleftmenu, 6 mainmenu, or 7 leftmenu parameter to index.php; th...

4.3CVSS5.8AI score0.02689EPSS

SaveExploits2References1

NVD•added 2014/07/11 2:55 p.m.•34 views

CVE-2014-3992

Multiple SQL injection vulnerabilities in Dolibarr ERP/CRM 3.5.3 allow remote authenticated users to execute arbitrary SQL commands via the 1 entity parameter in an update action to user/fiche.php or 2 sortorder parameter to user/group/index.php...

6.5CVSS8.1AI score0.01994EPSS

SaveExploits4References1

Prion•added 2014/07/11 2:55 p.m.•29 views

Sql injection

6.5CVSS8.7AI score0.01994EPSS

SaveExploits4References1Affected Software1

UbuntuCve•added 2014/07/11 2:55 p.m.•39 views

CVE-2014-3992

6.5CVSS6.2AI score0.01994EPSS

SaveExploits4References2

UbuntuCve•added 2014/07/11 2:55 p.m.•30 views

CVE-2014-3991

4.3CVSS5.9AI score0.02689EPSS

SaveExploits2References2

Prion•added 2014/07/11 2:55 p.m.•23 views

Cross site scripting

4.3CVSS6AI score0.02689EPSS

SaveExploits2References1Affected Software1

Mend•added 2014/07/11 2:00 p.m.•2 views

CVE-2014-3992

6.5CVSS0.01994EPSS

SaveExploits4References1

CVE•added 2014/07/11 2:00 p.m.•94 views

CVE-2014-3992

CVE-2014-3992 corresponds to multiple SQL injection vulnerabilities in Dolibarr ERP/CRM 3.5.3, exploitable by remote authenticated users via the entity parameter in user/fiche.php or the sortorder parameter in user/group/index.php. The issue allows arbitrary SQL execution within the application's...

6.5CVSS8.3AI score0.01994EPSS

SaveExploits4References1Affected Software1

Cvelist•added 2014/07/11 2:00 p.m.•46 views

CVE-2014-3992

8.1AI score0.01994EPSS

SaveExploits4References1

Mend•added 2014/07/11 2:00 p.m.•5 views

CVE-2014-3991

6.3CVSS0.02689EPSS

SaveExploits2References1

Cvelist•added 2014/07/11 2:00 p.m.•44 views

CVE-2014-3991

5.8AI score0.02689EPSS

SaveExploits2References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by