CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 16/03/2020 |
| CVE-2020-8784 | 심각9.8 | SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL Injection (issue 2 of 4). | 16/03/2020 |
| CVE-2020-8783 | 심각9.8 | SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL Injection (issue 1 of 4). | 16/03/2020 |
| CVE-2020-8804 | 보통6.5 | SuiteCRM through 7.11.10 allows SQL Injection via the SOAP API, the EmailUIAjax interface, or the MailMerge module. | 13/02/2020 |
| CVE-2020-8803 | 심각9.8 | SuiteCRM through 7.11.11 allows Directory Traversal to include arbitrary .php files within the webroot via add_to_prospect_list. | 13/02/2020 |
| CVE-2020-8802 | 심각9.8 | SuiteCRM through 7.11.11 has Incorrect Access Control via action_saveHTMLField Bean Manipulation. | 13/02/2020 |
| CVE-2020-8801 | 높음7.2 | SuiteCRM through 7.11.11 allows PHAR Deserialization. | 13/02/2020 |
| CVE-2020-8800 | 높음8.8 | SuiteCRM through 7.11.11 allows EmailsControllerActionGetFromFields PHP Object Injection. | 13/02/2020 |
| CVE-2019-18784 | 심각9.8 | SuiteCRM 7.10.x versions prior to 7.10.21 and 7.11.x versions prior to 7.11.9 allow SQL Injection. | 06/11/2019 |
| CVE-2019-14454 | 심각9.8 | SuiteCRM 7.11.x and 7.10.x before 7.11.8 and 7.10.20 is vulnerable to vertical privilege escalation. | 02/10/2019 |
| CVE-2019-13335 | 심각9.8 | SalesAgility SuiteCRM 7.10.x 7.10.19 and 7.11.x before and 7.11.7 has SSRF. | 02/10/2019 |
| CVE-2019-14752 | 보통6.1 | SuiteCRM 7.10.x and 7.11.x before 7.10.20 and 7.11.8 has XSS. | 30/09/2019 |
| CVE-2019-16922 | 보통5.3 | SuiteCRM 7.10.x before 7.10.20 and 7.11.x before 7.11.8 allows unintended public exposure of files. | 27/09/2019 |
| CVE-2019-12601 | 심각9.8 | SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 3 of 3). | 07/06/2019 |
| CVE-2019-12600 | 심각9.8 | SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 2 of 3). | 07/06/2019 |
| CVE-2019-12599 | 심각9.8 | SuiteCRM 7.10.x before 7.10.17 and 7.11.x before 7.11.5 allows SQL Injection. | 07/06/2019 |
| CVE-2019-12598 | 심각9.8 | SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 1 of 3). | 07/06/2019 |