CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Rapid7 Vulnerability Database (full)•added 2026/02/12 12:00 a.m.•1 views

CVE-2025-70981: Improper Neutralization of Special Elements used in an SQL Command

CordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface /user/list via the departmentIds parameter...

9.8CVSS5.8AI score0.00339EPSS

SaveExploits1References1

OSV•added 2026/02/12 12:00 a.m.•10 views

CVE-2025-70981

CordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface /user/list via the departmentIds parameter...

9.8CVSS5.9AI score

SaveExploits0References3

CNNVD•added 2026/02/12 12:00 a.m.•21 views

FIT2CLOUD CordysCRM 安全漏洞

FIT2CLOUD CordysCRM is a customer relationship management system developed by FIT2CLOUD Corporation. Version 1.4.1 of FIT2CLOUD CordysCRM contains a security vulnerability. This vulnerability stems from a flaw in the departmentIds parameter within the /user/list interface, which may lead to SQL...

9.8CVSS5.8AI score0.00339EPSS

SaveExploits1References2

attackerkb•added 2026/02/12 12:00 a.m.•8 views

CVE-2025-70981

CordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface /user/list via the departmentIds parameter...

9.8CVSS5.9AI score0.00339EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by