190 matches found
WS-2022-0353
User can get details of the comments that were deleted in yetiforcecompany/yetiforcecrm. When a user creates a new record he can add a comment on it. The user is also able to delete the comments after which the user wont be having access to that comment like replying, checking what the comment wa...
CVE-2023-49508
Directory Traversal vulnerability in YetiForceCompany YetiForceCRM versions 6.4.0 and before allows a remote authenticated attacker to obtain sensitive information via the license parameter in the LibraryLicense.php component...
EUVD-2021-2589
Malware in sbrugna...
EUVD-2021-2505
Malware in sbrugna...
EUVD-2021-2515
Malware in sbrugna...
EUVD-2021-2542
Malware in sbrugna...
EUVD-2021-2582
Malware in sbrugna...
EUVD-2021-2478
Malware in sbrugna...
EUVD-2022-6669
Malicious code in bioql PyPI...
EUVD-2022-6953
Malicious code in bioql PyPI...
EUVD-2022-6619
Malicious code in bioql PyPI...
EUVD-2022-6637
Malicious code in bioql PyPI...
EUVD-2022-35065
Malicious code in bioql PyPI...
EUVD-2022-6878
Malicious code in bioql PyPI...
CVE-2022-3002
Cross-site Scripting XSS - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0...
CVE-2022-3004
Cross-site Scripting XSS - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0...
CVE-2021-4107
yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-4117
yetiforcecrm is vulnerable to Business Logic Errors...