Export limit exceeded: 425860 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2019-14768

An Arbitrary File Upload issue in the file browser of DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to deploy a new WebApp WAR file to the Tomcat server via Path Traversal, allowing remote code execution with SYSTEM privileges.

CVSS 3.1 · 8.8 High EPSS 4.3% KEV · Not listed
Vendors
Dimo-crm
Products
Yellowbox Crm
CVE-2019-14767

In DIMO YellowBox CRM before 6.3.4, Path Traversal in images/Apparence (dossier=../) and servletrecuperefichier (document=../) allows an unauthenticated user to download arbitrary files from the server.

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Dimo-crm
Products
Yellowbox Crm
CVE-2019-14766

Path Traversal in the file browser of DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to browse the server filesystem.

CVSS 3.1 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Dimo-crm
Products
Yellowbox Crm
CVE-2019-14765

Incorrect Access Control in AfficheExplorateurParam() in DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to use administrative controllers.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Dimo-crm
Products
Yellowbox Crm