CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 16/03/2020 |
| CVE-2020-8784 | 严重9.8 | SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL Injection (issue 2 of 4). | 16/03/2020 |
| CVE-2020-8783 | 严重9.8 | SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL Injection (issue 1 of 4). | 16/03/2020 |
| CVE-2020-8804 | 中危6.5 | SuiteCRM through 7.11.10 allows SQL Injection via the SOAP API, the EmailUIAjax interface, or the MailMerge module. | 13/02/2020 |
| CVE-2020-8803 | 严重9.8 | SuiteCRM through 7.11.11 allows Directory Traversal to include arbitrary .php files within the webroot via add_to_prospect_list. | 13/02/2020 |
| CVE-2020-8802 | 严重9.8 | SuiteCRM through 7.11.11 has Incorrect Access Control via action_saveHTMLField Bean Manipulation. | 13/02/2020 |
| CVE-2020-8801 | 高危7.2 | SuiteCRM through 7.11.11 allows PHAR Deserialization. | 13/02/2020 |
| CVE-2020-8800 | 高危8.8 | SuiteCRM through 7.11.11 allows EmailsControllerActionGetFromFields PHP Object Injection. | 13/02/2020 |
| CVE-2019-18784 | 严重9.8 | SuiteCRM 7.10.x versions prior to 7.10.21 and 7.11.x versions prior to 7.11.9 allow SQL Injection. | 06/11/2019 |
| CVE-2019-14454 | 严重9.8 | SuiteCRM 7.11.x and 7.10.x before 7.11.8 and 7.10.20 is vulnerable to vertical privilege escalation. | 02/10/2019 |
| CVE-2019-13335 | 严重9.8 | SalesAgility SuiteCRM 7.10.x 7.10.19 and 7.11.x before and 7.11.7 has SSRF. | 02/10/2019 |
| CVE-2019-14752 | 中危6.1 | SuiteCRM 7.10.x and 7.11.x before 7.10.20 and 7.11.8 has XSS. | 30/09/2019 |
| CVE-2019-16922 | 中危5.3 | SuiteCRM 7.10.x before 7.10.20 and 7.11.x before 7.11.8 allows unintended public exposure of files. | 27/09/2019 |
| CVE-2019-12601 | 严重9.8 | SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 3 of 3). | 07/06/2019 |
| CVE-2019-12600 | 严重9.8 | SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 2 of 3). | 07/06/2019 |
| CVE-2019-12599 | 严重9.8 | SuiteCRM 7.10.x before 7.10.17 and 7.11.x before 7.11.5 allows SQL Injection. | 07/06/2019 |
| CVE-2019-12598 | 严重9.8 | SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 1 of 3). | 07/06/2019 |