dbcve.org
Vulnerability index

Browse CVEs

100 matching
Cards Compact
Filters 1 Clear all
Severity

Filters apply as you choose them.

Top technology Linux 13140 Google 12525 Microsoft 12378 Apple 6692 Oracle 6649 Adobe 6383 Ibm 6266 Cisco 5746 Debian 3919 Apache 2864 Mozilla 2857 Redhat 2581
Suitecrm MEDIUM 5.3
CVE-2019-16922

SuiteCRM 7.10.x before 7.10.20 and 7.11.x before 7.11.8 allows unintended public exposure of files.

Fix: 7.10.20 / 7.11.8+
Fix from $1,600 2019-09-27
Suitecrm CRITICAL 9.8
CVE-2019-12598

SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 1 of 3).

Fix: 7.8.30 / 7.10.17+
Fix from $2,300 2019-06-07
Suitecrm CRITICAL 9.8
CVE-2019-12599

SuiteCRM 7.10.x before 7.10.17 and 7.11.x before 7.11.5 allows SQL Injection.

Fix: 7.10.17 / 7.11.5+
Fix from $2,300 2019-06-07
Suitecrm CRITICAL 9.8
CVE-2019-12600

SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 2 of 3).

Fix: 7.8.30 / 7.10.17+
Fix from $2,300 2019-06-07
Suitecrm CRITICAL 9.8
CVE-2019-12601

SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 3 of 3).

Fix: 7.8.30 / 7.10.17+
Fix from $2,300 2019-06-07
Suitecrm MEDIUM 6.1
CVE-2018-20816

An XSS combined with CSRF vulnerability discovered in SalesAgility SuiteCRM 7.x before 7.8.24 and 7.10.x before 7.10.11 leads to cookie stealing, aka…

Fix: 7.8.24 / 7.10.11+
Fix from $1,600 2019-04-05
Suitecrm CRITICAL 9.8
CVE-2019-6506

SuiteCRM before 7.8.28, 7.9.x and 7.10.x before 7.10.15, and 7.11.x before 7.11.3 allows SQL Injection.

Mitigation only
Fix from $2,300 2019-04-02
Suitecrm MEDIUM 6.1
CVE-2018-15606

An XSS issue was discovered in SalesAgility SuiteCRM 7.x before 7.8.21 and 7.10.x before 7.10.8, related to phishing an error message.

Fix: 7.8.21 / 7.10.8+
Fix from $1,600 2018-09-26
Suitecrm HIGH 8.1
CVE-2015-5947

SuiteCRM before 7.2.3 allows remote attackers to execute arbitrary code.

Fix: after 7.2.2
Fix from $1,950 2017-09-06
Suitecrm HIGH 8.1
CVE-2015-5948

Race condition in SuiteCRM before 7.2.3 allows remote attackers to execute arbitrary code. NOTE: this vulnerability exists because of an incomplete …

Fix: after 7.2.2
Fix from $1,950 2017-09-06