Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

701 matches found

NVD
NVD•added 2019/10/07 4:15 p.m.•16 views

CVE-2019-17295

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the history function by a Regular user...

8.8CVSS9.1AI score0.01163EPSS
SaveExploits0References1
NVD
NVD•added 2019/10/07 4:15 p.m.•14 views

CVE-2019-17292

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmseInbox module by an Admin user...

7.2CVSS7.5AI score0.01123EPSS
SaveExploits0References1
OSV
OSV•added 2019/10/07 4:15 p.m.•7 views

CVE-2019-17294

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the export function by a Regular user...

8.8CVSS7.3AI score0.01163EPSS
SaveExploits0References1
OSV
OSV•added 2019/10/07 4:15 p.m.•6 views

CVE-2019-17295

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the history function by a Regular user...

8.8CVSS5.8AI score0.01163EPSS
SaveExploits0References1
OSV
OSV•added 2019/10/07 4:15 p.m.•10 views

CVE-2019-17293

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmseProject module by a Regular user...

8.8CVSS7.3AI score0.01163EPSS
SaveExploits0References1
OSV
OSV•added 2019/10/07 4:15 p.m.•10 views

CVE-2019-17296

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Contacts module by a Regular user...

8.8CVSS7.3AI score0.01163EPSS
SaveExploits0References1
NVD
NVD•added 2019/10/07 4:15 p.m.•16 views

CVE-2019-17293

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmseProject module by a Regular user...

8.8CVSS9.1AI score0.01163EPSS
SaveExploits0References1
NVD
NVD•added 2019/10/07 4:15 p.m.•13 views

CVE-2019-17296

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Contacts module by a Regular user...

8.8CVSS9.1AI score0.01163EPSS
SaveExploits0References1
NVD
NVD•added 2019/10/07 4:15 p.m.•19 views

CVE-2019-17294

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the export function by a Regular user...

8.8CVSS9.1AI score0.01163EPSS
SaveExploits0References1
Prion
Prion•added 2019/10/07 4:15 p.m.•20 views

Code injection

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by an Admin user...

6.5CVSS7.2AI score0.01353EPSS
SaveExploits0References1Affected Software1
Prion
Prion•added 2019/10/07 4:15 p.m.•23 views

Code injection

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Campaigns module by an Admin user...

6.5CVSS7.2AI score0.01353EPSS
SaveExploits0References1Affected Software1
Prion
Prion•added 2019/10/07 4:15 p.m.•25 views

Code injection

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Administration module by an Admin user...

6.5CVSS7.2AI score0.01353EPSS
SaveExploits0References1Affected Software1
Prion
Prion•added 2019/10/07 4:15 p.m.•13 views

Sql injection

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmseProject module by a Regular user...

6.5CVSS9AI score0.01163EPSS
SaveExploits0References1Affected Software1
Prion
Prion•added 2019/10/07 4:15 p.m.•22 views

Code injection

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Administration module by a Developer user...

6.5CVSS8.8AI score0.01401EPSS
SaveExploits0References1Affected Software1
Prion
Prion•added 2019/10/07 4:15 p.m.•16 views

Code injection

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by a Developer user...

6.5CVSS8.8AI score0.01401EPSS
SaveExploits0References1Affected Software1
Prion
Prion•added 2019/10/07 4:15 p.m.•23 views

Directory traversal

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the attachment function by a Regular user...

6.5CVSS8.6AI score0.01981EPSS
SaveExploits0References1Affected Software1
Prion
Prion•added 2019/10/07 4:15 p.m.•25 views

Code injection

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by a Regular user...

6.5CVSS8.8AI score0.01401EPSS
SaveExploits0References1Affected Software1
Prion
Prion•added 2019/10/07 4:15 p.m.•16 views

Code injection

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Configurator module by an Admin user...

6.5CVSS7.2AI score0.01353EPSS
SaveExploits0References1Affected Software1
Prion
Prion•added 2019/10/07 4:15 p.m.•20 views

Sql injection

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmseInbox module by an Admin user...

6.5CVSS7.4AI score0.01123EPSS
SaveExploits0References1Affected Software1
Prion
Prion•added 2019/10/07 4:15 p.m.•23 views

Code injection

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the ModuleBuilder module by an Admin user...

6.5CVSS7.2AI score0.01353EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder