Vulnerabilities

Last updated 2 hours ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
dolibarr/dolibarr Dolibarr has SQL Injection in societe/class/societe.class.php via localtax1_value parameter High Risk 8.8 9 days ago 10 hours ago
dolibarr/dolibarr Dolibarr Core Discloses Sensitive Data via Authenticated Local File Inclusion in selectobject.php Medium Risk 6.5 7 months ago 10 days ago
dolibarr/dolibarr Dolibarr ERP CRM contains a remote code evaluation vulnerability Critical 9.8 5 months ago 1 month ago
dolibarr/dolibarr Dolibarr ERP CRM is vulnerable to Improper Authorization through its Leave Request REST API Medium Risk 4.3 5 months ago 1 month ago
dolibarr/dolibarr Dolibarr has an Injection issue Medium Risk 5.0 6 months ago 5 months ago
dolibarr/dolibarr Dolibarr has Insufficient Verification of Data Authenticity Low Risk 3.7 6 months ago 6 months ago
dolibarr/dolibarr Dolibarr: OS Command Injection (RCE) via MAIN_ODT_AS_PDF configuration Critical 9.1 6 months ago 6 months ago
dolibarr/dolibarr Dolibarr Allows Code Injection through its Website Module High Risk 8.8 6 months ago 6 months ago
dolibarr/dolibarr Dolibarr user with permission to edit PHP content can bypass filtering to restrict dangerous PHP functions High Risk 8.8 6 months ago 6 months ago
dolibarr/dolibarr Dolibarr has SQL injection vulnerability in the rowid parameter of the admin dict.php High Risk 8.2 6 months ago 6 months ago
dolibarr/dolibarr Dolibarr Application Home Page has HTML injection vulnerability High Risk 7.1 2 years ago 10 months ago
dolibarr/dolibarr Dolibarr has Remote Code Execution Vulnerability (Bypass) High Risk 8.8 1 year ago 10 months ago
dolibarr/dolibarr Dolibarr vulnerable to RCE via the computed field parameter High Risk 8.8 1 year ago 1 year ago
dolibarr/dolibarr Dolibarr vulnerable to Cross-Site Request Forgery High Risk 7.5 2 years ago 1 year ago
dolibarr/dolibarr Dolibarr arbitrary file upload vulnerability High Risk 8.8 2 years ago 1 year ago
dolibarr/dolibarr Dolibarr vulnerable to Eval Injection Critical 9.8 4 years ago 1 year ago
dolibarr/dolibarr Dolibarr vulnerable to SQL Injection Critical 9.1 2 years ago 1 year ago
dolibarr/dolibarr Dolibarr vulnerable to SQL Injection Critical 9.1 2 years ago 1 year ago
dolibarr/dolibarr Improper Authorization in dolibarr/dolibarr Medium Risk 6.5 4 years ago 1 year ago
dolibarr/dolibarr Dolibarr ERP and CRM contain XSS Vulnerability Medium Risk 5.4 4 years ago 1 year ago
dolibarr/dolibarr Code injection in dolibarr/dolibarr High Risk 8.8 4 years ago 1 year ago
dolibarr/dolibarr Dolibarr vulnerable to Improper Authentication and Improper Access Control High Risk 7.2 5 years ago 1 year ago
dolibarr/dolibarr Cross site scripting in dolibarr Medium Risk 5.4 4 years ago 1 year ago
dolibarr/dolibarr Dolibarr vulnerable to Improper Validation of Specified Quantity in Input Medium Risk 4.3 4 years ago 1 year ago
dolibarr/dolibarr Dolibarr Stored Cross-site Scripting Medium Risk 5.4 4 years ago 1 year ago
dolibarr/dolibarr Cross site scripting in dolibarr Medium Risk 5.4 4 years ago 1 year ago
dolibarr/dolibarr Dolibarr cross-site scripting (XSS) vulnerability Medium Risk 6.1 4 years ago 1 year ago
dolibarr/dolibarr Dolibarr stored Cross-Site Scripting (XSS) vulnerability Medium Risk 5.4 4 years ago 1 year ago
dolibarr/dolibarr Dolibarr remote PHP code execution Critical 9.8 4 years ago 1 year ago
dolibarr/dolibarr Dolibarr Improper Input Validation vulnerability Medium Risk 6.5 3 years ago 1 year ago
dolibarr/dolibarr Logic error in dolibarr/dolibarr Medium Risk 4.3 4 years ago 1 year ago
dolibarr/dolibarr Dolibarr vulnerable to privilege escalation Critical 9.8 3 years ago 1 year ago
dolibarr/dolibarr XSS in Dolibarr ERP & CRM Medium Risk 6.1 6 years ago 1 year ago
dolibarr/dolibarr Dolibarr Cross-Site Request Forgery Vulnerability High Risk 8.8 4 years ago 1 year ago
dolibarr/dolibarr Dolibarr Cross-site Scripting vulnerability Low Risk 3.0 1 year ago 1 year ago
dolibarr/dolibarr Cross-site Scripting in Dolibarr Medium Risk 6.1 4 years ago 1 year ago
dolibarr/dolibarr SQL Injection in Dolibarr High Risk 8.8 4 years ago 1 year ago
dolibarr/dolibarr Dolibarr vulnerable to remote code execution via uppercase manipulation High Risk 8.8 3 years ago 1 year ago
dolibarr/dolibarr Dolibarr Improper Restriction of Excessive Authentication Attempts Critical 9.8 4 years ago 1 year ago
dolibarr/dolibarr Dolibarr ERP CRM Code Injection vulnerability during installation Medium Risk 6.8 2 years ago 1 year ago
dolibarr/dolibarr Dolibarr reflected cross-site scripting (XSS) vulnerability Medium Risk 6.1 4 years ago 1 year ago
dolibarr/dolibarr File Upload vulnerability in Dolibarr ERP CRM High Risk 8.8 3 years ago 1 year ago
dolibarr/dolibarr Dolibarr Cross-site Scripting vulnerability Medium Risk 5.4 3 years ago 1 year ago
dolibarr/dolibarr Dolibarr allows a remote privileged attacker to execute arbitrary code via a crafted command/script High Risk 7.2 3 years ago 1 year ago
dolibarr/dolibarr Cross Site Scripting vulnerability in Dolibarr ERP CRM Critical 9.6 3 years ago 1 year ago
dolibarr/dolibarr Dolibarr authenticated Remote Code Execution High Risk 7.2 4 years ago 1 year ago
dolibarr/dolibarr Improper Authorization in dolibarr/dolibarr Medium Risk 4.3 1 year ago 1 year ago
dolibarr/dolibarr Dolibarr Cross-site Scripting vulnerability Medium Risk 5.4 1 year ago 1 year ago
dolibarr/dolibarr Dolibarr ERP and CRM contain XSS Vulnerability Medium Risk 6.1 4 years ago 1 year ago
dolibarr/dolibarr Access Control vulnerability in Dolibarr High Risk 7.5 4 years ago 1 year ago