Export limit exceeded: 22901 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-51947

An issue in Pivotal CRM 6.6.4.08 and systems using patch-ghi-15381-cwe-502-20251225.zip (fixed in Pivotal CRM 6.6.5.10 and Patch_CWE502_20260316.zip) allows a remote attacker to execute arbitrary code via the Pivotal.Engine.Client.Services.Conversion.dll component. NOTE: this issue exists because of an incomplete fix for CVE-2026-39253.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Pivotal
Products
Crm
CVE-2026-39253

Insecure Deserialization Allows Remote Code Execution in Pivotal CRM 6.6.04.08

An issue in Pivotal CRM v.6.6.04.08 allows a remote attacker to execute arbitrary code via the Pivotal.Core.Common.dll and Pivotal.Engine.Client.Services.Conversion.dll components.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Pivotal
Products
Crm