Lucene search
+L

111 matches found

NVD
NVD
•added 2025/10/01 8:18 p.m.•18 views

CVE-2025-56588

Dolibarr ERP & CRM v21.0.1 were discovered to contain a remote code execution RCE vulnerability in the User module configuration via the computed field parameter...

8.8CVSS0.00503EPSS
SaveExploits0References1
OSV
OSV
•added 2025/10/01 8:18 p.m.•17 views

UBUNTU-CVE-2025-56588

Dolibarr ERP & CRM v21.0.1 were discovered to contain a remote code execution RCE vulnerability in the User module configuration via the computed field parameter...

8.8CVSS6.4AI score0.00503EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/10/01 12:00 a.m.•20 views

PT-2025-40295

Name of the Vulnerable Software and Affected Versions Dolibarr ERP & CRM version 21.0.1 Description The software contains a remote code execution RCE issue within the User module configuration. This is due to a flaw in the computed field parameter. Recommendations At the moment, there is no...

8.8CVSS7.6AI score0.00503EPSS
SaveExploits0References12
CNNVD
CNNVD
•added 2025/10/01 12:00 a.m.•12 views

Dolibarr ERP & CRM 安全漏洞

Dolibarr ERP & CRM is an enterprise management software from Dolibarr Open Source. A security vulnerability exists in Dolibarr ERP & CRM version 21.0.1 due to a remote code execution vulnerability in the computed field parameter of the User module configuration...

8.8CVSS7.6AI score0.00503EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/10/01 12:00 a.m.•4 views

CVE-2025-56588

Dolibarr ERP & CRM v21.0.1 were discovered to contain a remote code execution RCE vulnerability in the User module configuration via the computed field parameter...

8.1AI score0.00503EPSS
SaveExploits0References1
OSV
OSV
•added 2025/10/01 12:00 a.m.•10 views

CVE-2025-56588

Dolibarr ERP & CRM v21.0.1 were discovered to contain a remote code execution RCE vulnerability in the User module configuration via the computed field parameter...

8.8CVSS8.5AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/01 12:00 a.m.•0 views

CVE-2025-56588: Improper Control of Generation of Code

Dolibarr ERP & CRM v21.0.1 were discovered to contain a remote code execution RCE vulnerability in the User module configuration via the computed field parameter...

8.8CVSS6.3AI score0.00503EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/09/10 12:00 a.m.•3 views

Linux Distros Unpatched Vulnerability : CVE-2011-1691

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The counterToCSSValue function in CSSComputedStyleDeclaration.cpp in the Cascading Style Sheets CSS implementation in WebCore in WebKit before r82222, as used i...

5CVSS5.6AI score0.01582EPSS
SaveExploits1References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•7 views

Malicious code in embercom-computed-properties (npm)

The package embercom-computed-properties was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•6 views

MAL-2025-19587 Malicious code in embercom-computed-properties (npm)

The package embercom-computed-properties was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
•added 2025/06/10 8:17 p.m.•13 views

GHSA-WJW6-95H5-4JPX Nautobot vulnerable to secrets exposure and data manipulation through Jinja2 templating

Impact What kind of vulnerability is it? Who is impacted? All users of Nautobot versions prior to 2.4.10 or prior to 1.6.32 are potentially affected. Due to insufficient security configuration of the Jinja2 templating feature used in computed fields, custom links, etc. in Nautobot: 1. A malicious...

6CVSS5.9AI score0.00363EPSS
SaveExploits0References9
OSV
OSV
•added 2025/06/10 3:40 p.m.•10 views

CVE-2025-49142 Nautobot vulnerable to secrets exposure and data manipulation through Jinja2 templating

Nautobot is a Network Source of Truth and Network Automation Platform. All users of Nautobot versions prior to 2.4.10 or prior to 1.6.32 are potentially affected. Due to insufficient security configuration of the Jinja2 templating feature used in computed fields, custom links, etc. in Nautobot, a...

6CVSS6.5AI score
SaveExploits0References7
Microsoft KB
Microsoft KB
•added 2025/04/08 7:00 a.m.•75 views

Description of the security update for SharePoint Server 2019: April 8, 2025 (KB5002691)

None None...

8.8CVSS7.4AI score0.23627EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2025/02/03 12:00 a.m.•17 views

The vulnerability of the EctEnhancedCT method in the DICOM DCMT format allows a intruder to gain unauthorized access to protected information.

The vulnerability of the EctEnhancedCT method in the DICOM DCMT library lies in the copying of buffers without checking the input data. Exploiting this vulnerability could allow an unauthorized actor to gain unauthorized access to protected information...

8.5CVSS6.8AI score0.00735EPSS
SaveExploits1References7Affected Software4
Rapid7 Blog
Rapid7 Blog
•added 2024/11/15 2:30 p.m.•22 views

New IDR Log Search Enhancements: Accelerate, Streamline, and Simplify Investigations

Co-authored by Ed Montgomery & René Fusco, Rapid7 In today’s cybersecurity landscape, organizations need robust detection and response solutions to stay ahead of evolving threats. Rapid7’s InsightIDR, the foundation of our Managed Detection and Response MDR service, empowers security teams with...

7.2AI score
SaveExploits0
OSV
OSV
•added 2024/07/24 9:31 p.m.•17 views

GHSA-VPRP-94P9-5JP8 Dolibarr ERP CRM vulnerable to remote code execution (RCE)

Dolibarr ERP CRM before 19.0.2 was discovered to contain a remote code execution RCE vulnerability via the Computed field parameter under the Users Module Setup function...

7CVSS6AI score0.00679EPSS
SaveExploits0References3
NVD
NVD
•added 2024/07/24 7:15 p.m.•24 views

CVE-2024-40137

Dolibarr ERP CRM before 19.0.2-php8.2 was discovered to contain a remote code execution RCE vulnerability via the Computed field parameter under the Users Module Setup function...

5.5CVSS0.00679EPSS
SaveExploits0References1
OSV
OSV
•added 2024/07/24 7:15 p.m.•10 views

UBUNTU-CVE-2024-40137

Dolibarr ERP CRM before 19.0.2-php8.2 was discovered to contain a remote code execution RCE vulnerability via the Computed field parameter under the Users Module Setup function...

5.5CVSS6.4AI score0.00679EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2024/07/24 7:15 p.m.•17 views

CVE-2024-40137

Dolibarr ERP CRM before 19.0.2-php8.2 was discovered to contain a remote code execution RCE vulnerability via the Computed field parameter under the Users Module Setup function...

5.5CVSS6.1AI score0.00679EPSS
SaveExploits0References2
CVE
CVE
•added 2024/07/24 12:00 a.m.•65 views

CVE-2024-40137

Dolibarr ERP CRM versions prior to 19.0.2 (including those before 19.0.2-php8.2 ) are vulnerable to a remote code execution (RCE) vulnerability. The root cause lies in the Computed field parameter within the Users Module Setup function. An attacker could exploit this flaw to execute arbitrary cod...

8.4AI score0.00679EPSS
SaveExploits0References1
Rows per page
Query Builder