Export limit exceeded: 425601 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 18

Export CSV
CVE-2023-49508

Directory Traversal vulnerability in YetiForceCompany YetiForceCRM versions 6.4.0 and before allows a remote authenticated attacker to obtain sensitive information via the license parameter in the LibraryLicense.php component.

CVSS 3.1 · 6.5 Medium EPSS 1.0% KEV · Not listed
Vendors
Yetiforce
Products
Yetiforce Customer Relationship Management
CVE-2022-1411

Unrestructed file upload in yetiforcecompany/yetiforcecrm

Unrestructed file upload in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. Attacker can send malicious files to the victims is able to retrieve the stored data from the web application without that data being made safe to render in the browser and steals victim's cookie leads to account takeover.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Yetiforce
Products
Yetiforce Customer Relationship Management