Page 2 of 18 results (0.005 seconds)

CVSS: 8.4EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-2060 – Cross-site Scripting (XSS) - Stored in dolibarr/dolibarr

https://notcve.org/view.php?id=CVE-2022-2060

13 Jun 2022 — Cross-site Scripting (XSS) - Stored in GitHub repository dolibarr/dolibarr prior to 16.0. Una vulnerabilidad de tipo Cross-site Scripting (XSS) - Almacenado en el repositorio de GitHub dolibarr/dolibarr versiones anteriores a 16.0 • https://github.com/dolibarr/dolibarr/commit/2b5b9957c3010a5db9d1988c2efe5b209b16b47f • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 8.8EPSS: 3%CPEs: 1EXPL: 1

CVE-2022-0819 – Code Injection in dolibarr/dolibarr

https://notcve.org/view.php?id=CVE-2022-0819

02 Mar 2022 — Code Injection in GitHub repository dolibarr/dolibarr prior to 15.0.1. Una Inyección de Código en el repositorio GitHub dolibarr/dolibarr versiones anteriores a 15.0.1 • https://github.com/dolibarr/dolibarr/commit/2a48dd349e7de0d4a38e448b0d2ecbe25e968075 • CWE-94: Improper Control of Generation of Code ('Code Injection') •

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-0746 – Business Logic Errors in dolibarr/dolibarr

https://notcve.org/view.php?id=CVE-2022-0746

25 Feb 2022 — Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0. Unos Errores de Lógica de Negocios en el repositorio de GitHub dolibarr/dolibarr versiones anteriores a 16.0. • https://github.com/dolibarr/dolibarr/commit/4973019630d51ad76b7c1a4141ec7a33053a7d21 • CWE-840: Business Logic Errors •

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-0731 – Improper Access Control (IDOR) in dolibarr/dolibarr

https://notcve.org/view.php?id=CVE-2022-0731

23 Feb 2022 — Improper Access Control (IDOR) in GitHub repository dolibarr/dolibarr prior to 16.0. Un Control de Acceso Inapropiado (IDOR) en el repositorio de GitHub dolibarr/dolibarr versiones anteriores a 16.0 • https://github.com/dolibarr/dolibarr/commit/209ab708d4b65fbd88ba4340d60b7822cb72651a • CWE-284: Improper Access Control CWE-639: Authorization Bypass Through User-Controlled Key •

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-0414 – Improper Validation of Specified Quantity in Input in dolibarr/dolibarr

https://notcve.org/view.php?id=CVE-2022-0414

31 Jan 2022 — Improper Validation of Specified Quantity in Input in Packagist dolibarr/dolibarr prior to 16.0. Unos Errores de Lógica de Negocio en el paquete dolibarr/dolibarr versiones anteriores a 16.0 • https://github.com/dolibarr/dolibarr/commit/37fb02ee760cfff18c795ba468da1ba1c53f4684 • CWE-1284: Improper Validation of Specified Quantity in Input •

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-0224 – SQL Injection in dolibarr/dolibarr

https://notcve.org/view.php?id=CVE-2022-0224

14 Jan 2022 — dolibarr is vulnerable to Improper Neutralization of Special Elements used in an SQL Command dolibarr es vulnerable a una Neutralización Inapropiada de los Elementos Especiales usados en un Comando SQL • https://github.com/dolibarr/dolibarr/commit/b9b45fb50618aa8053961f50bc8604b188d0ea79 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-0174 – Improper Validation of Specified Quantity in Input in dolibarr/dolibarr

https://notcve.org/view.php?id=CVE-2022-0174

10 Jan 2022 — Improper Validation of Specified Quantity in Input vulnerability in dolibarr dolibarr/dolibarr. dolibarr es vulnerable a Errores de Lógica de Negocio • https://github.com/dolibarr/dolibarr/commit/d892160f4f130385a3ce520f66cb8cf2eb8c5c32 • CWE-1284: Improper Validation of Specified Quantity in Input •

CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 0

CVE-2019-19206

https://notcve.org/view.php?id=CVE-2019-19206

26 Nov 2019 — Dolibarr CRM/ERP 10.0.3 allows viewimage.php?file= Stored XSS due to JavaScript execution in an SVG image for a profile picture. Dolibarr CRM/ERP versión 10.0.3, permite un ataque de tipo XSS almacenado de viewimage.php?File= debido a la ejecución de JavaScript en una imagen SVG para una imagen de perfil. • https://medium.com/%40k43p/cve-2019-19206-stored-xss-due-to-javascript-execution-in-an-svg-file-ee1d038fba76 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •