Lucene search
K

89 matches found

CNNVD
CNNVD
added 2026/03/20 12:0 a.m.7 views

SuiteCRM 注入漏洞

SuiteCRM is a customer relationship management system developed by the SuiteCRM team. Versions prior to SuiteCRM 7.15.1 and 8.9.3 had an injection vulnerability. This vulnerability stemmed from improper cleanup of user input during the authentication process. As a result, unauthenticated attacker...

9.8CVSS5.8AI score0.00662EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/03/20 12:0 a.m.7 views

SuiteCRM SQL注入漏洞

SuiteCRM is a customer relationship management system developed by the SuiteCRM team. Versions of SuiteCRM prior to 7.15.1 and 8.9.3 had an SQL injection vulnerability. This vulnerability stemmed from the authentication mechanism not properly clearing the username provided by users when directory...

8.8CVSS6.1AI score0.0044EPSS
Exploits0References2
NVD
NVD
added 2026/03/19 11:16 p.m.8 views

CVE-2026-29101

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to versions 7.15.1 and 8.9.3, a Denial-of-Service DoS vulnerability exists in SuiteCRM modules. Versions 7.15.1 and 8.9.3 patch the issue...

7.5CVSS0.00452EPSS
Exploits0References2
OSV
OSV
added 2026/03/19 10:55 p.m.2 views

CVE-2026-29104 SuiteCRM Vulnerable to Authenticated Arbitrary File Upload via Configurator addfontresult View in SuiteCRM

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to versions 7.15.1 and 8.9.3, SuiteCRM contains an authenticated arbitrary file upload vulnerability in the Configurator module. An authenticated administrator can bypass intended file ty...

2.7CVSS5.8AI score0.0023EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/03/19 10:54 p.m.5 views

CVE-2026-29103 SuiteCRM Vulnerable to Remote Code Execution via Module Loader Package Scanner Bypass

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. A Critical Remote Code Execution RCE vulnerability exists in SuiteCRM 7.15.0 and 8.9.2, allowing authenticated administrators to execute arbitrary system commands. This vulnerability is a direc...

9.1CVSS6.2AI score0.00497EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/03/19 10:51 p.m.19 views

CVE-2026-29101 SuiteCRM Vulnerable to Directory Traversal to DoS in Modules

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to versions 7.15.1 and 8.9.3, a Denial-of-Service DoS vulnerability exists in SuiteCRM modules. Versions 7.15.1 and 8.9.3 patch the issue...

4.9CVSS0.00452EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/01/09 11:35 a.m.8 views

CVE-2021-41869

SuiteCRM 7.10.x before 7.10.33 and 7.11.x before 7.11.22 is vulnerable to privilege escalation...

8.8CVSS6.9AI score0.01533EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/11/10 5:22 a.m.5 views

CVE-2025-64490

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Versions 7.14.7 and prior, 8.0.0-beta.1 through 8.9.0 allow a low-privileged user with a restrictive role to view and create work items through the Resource Calendar and project screens, even...

8.3CVSS6.4AI score0.00237EPSS
Exploits0References1
CVE
CVE
added 2025/11/08 12:45 a.m.14 views

CVE-2025-64491

SuiteCRM 7.14.7 and earlier are vulnerable to unauthenticated reflected XSS via the login page. Successful exploitation could lead to full account takeover (e.g., by altering the login form to exfiltrate credentials) and requires a user to open a crafted link. Remediation: upgrade to version 7.14...

6.1CVSS5.3AI score0.0017EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2025/11/08 12:0 a.m.3 views

SuiteCRM 安全漏洞

SuiteCRM is a customer relationship management system from the SuiteCRM team. A security vulnerability exists in SuiteCRM versions 7.14.7 and earlier and 8.0.0-beta.1 through 8.9.0, which stems from inconsistent access control and could lead to unauthorized data exposure and modification...

8.3CVSS6.4AI score0.00237EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2020-29649

Malware in sbrugna...

7.2CVSS6.9AI score0.02805EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2015-5894

Malware in sbrugna...

9.3CVSS8.2AI score0.04482EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-29635

Malware in sbrugna...

7.5CVSS7.5AI score0.0088EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2021-25629

Malware in sbrugna...

6.1CVSS6.1AI score0.01969EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2021-25630

Malware in sbrugna...

6.1CVSS6.1AI score0.01372EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2020-7298

Malware in sbrugna...

7.8CVSS7.6AI score0.00784EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2019-5643

Malware in sbrugna...

9.8CVSS9.2AI score0.01513EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2015-5893

Malware in sbrugna...

8.1CVSS8.1AI score0.0274EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2020-29633

Malware in sbrugna...

9.8CVSS9.1AI score0.01053EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2020-29631

Malware in sbrugna...

9.8CVSS9.1AI score0.01053EPSS
Exploits0References3
Rows per page
Query Builder