agentprime: salesagility-suitecrmEvery new CVE for salesagility-suitecrm.https://agentprime.io/CVE-2024-50335: Authenticated XSS in "Publish Key" Field Allowing Unauthorized Administrator User Creation in SuiteCRMhttps://agentprime.io/advisories/CVE-2024-50335/https://agentprime.io/advisories/CVE-2024-50335/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 Nov 2024 18:42:14 GMTCVECVE-2024-50333: RCE in ModuleBuilder in SuiteCRMhttps://agentprime.io/advisories/CVE-2024-50333/https://agentprime.io/advisories/CVE-2024-50333/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 Nov 2024 18:41:24 GMTCVECVE-2024-50332: Authenticated Blind SQL Injection in DeleteRelationShip in SuiteCRMhttps://agentprime.io/advisories/CVE-2024-50332/https://agentprime.io/advisories/CVE-2024-50332/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 Nov 2024 18:40:14 GMTCVECVE-2024-49774: ModuleScanner flaws in SuiteCRMhttps://agentprime.io/advisories/CVE-2024-49774/https://agentprime.io/advisories/CVE-2024-49774/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 Nov 2024 18:37:05 GMTCVECVE-2024-49773: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in SuiteCRMhttps://agentprime.io/advisories/CVE-2024-49773/https://agentprime.io/advisories/CVE-2024-49773/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 Nov 2024 18:35:11 GMTCVECVE-2024-49772: Authenticated SQL injection in AM_ProjectTemplates controller in SuiteCRMhttps://agentprime.io/advisories/CVE-2024-49772/https://agentprime.io/advisories/CVE-2024-49772/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 Nov 2024 18:31:20 GMTCVECVE-2024-45392: SuiteCRM has wrong deletion permission checks on API delete callhttps://agentprime.io/advisories/CVE-2024-45392/https://agentprime.io/advisories/CVE-2024-45392/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Sep 2024 16:34:14 GMTCVECVE-2024-36418: SuiteCRM authenticated RCE using connectorshttps://agentprime.io/advisories/CVE-2024-36418/https://agentprime.io/advisories/CVE-2024-36418/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Jun 2024 20:16:47 GMTCVECVE-2024-36416: SuiteCRM v4 API Excessive log data DOShttps://agentprime.io/advisories/CVE-2024-36416/https://agentprime.io/advisories/CVE-2024-36416/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Jun 2024 20:03:05 GMTCVECVE-2024-36417: SuiteCRM Stored XSS Vulnerability Allows Code Execution via Malicious iFramehttps://agentprime.io/advisories/CVE-2024-36417/https://agentprime.io/advisories/CVE-2024-36417/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Jun 2024 19:55:56 GMTCVECVE-2024-36415: SuiteCRM Improper Control of Filename for Include Statement in PHP and Unrestricted Upload of File with Dangerous content leads to authenticated remote code executionhttps://agentprime.io/advisories/CVE-2024-36415/https://agentprime.io/advisories/CVE-2024-36415/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Jun 2024 19:49:54 GMTCVEcriticalCVE-2024-36414: SuiteCRM authenticated Server-Side Request Forgeryhttps://agentprime.io/advisories/CVE-2024-36414/https://agentprime.io/advisories/CVE-2024-36414/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Jun 2024 19:40:19 GMTCVECVE-2024-36413: SuiteCRM authenticated Reflected Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-36413/https://agentprime.io/advisories/CVE-2024-36413/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Jun 2024 19:38:55 GMTCVECVE-2024-36412: SuiteCRM unauthenticated SQL Injectionhttps://agentprime.io/advisories/CVE-2024-36412/https://agentprime.io/advisories/CVE-2024-36412/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Jun 2024 19:35:43 GMTCVEcriticalCVE-2024-36411: SuiteCRM authenticated SQL Injection in EmailUIAjax displayView controllerhttps://agentprime.io/advisories/CVE-2024-36411/https://agentprime.io/advisories/CVE-2024-36411/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Jun 2024 19:33:49 GMTCVEcriticalCVE-2024-36410: SuiteCRM authenticated SQL Injection in EmailUIAjax messages count controllerhttps://agentprime.io/advisories/CVE-2024-36410/https://agentprime.io/advisories/CVE-2024-36410/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Jun 2024 17:24:08 GMTCVEcriticalCVE-2024-36409: SuiteCRM authenticated SQL Injection in TreeData entrypointhttps://agentprime.io/advisories/CVE-2024-36409/https://agentprime.io/advisories/CVE-2024-36409/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Jun 2024 17:21:27 GMTCVEcriticalCVE-2024-36408: SuiteCRM authenticated SQL Injection in Alertshttps://agentprime.io/advisories/CVE-2024-36408/https://agentprime.io/advisories/CVE-2024-36408/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Jun 2024 16:46:00 GMTCVEcriticalCVE-2024-36407: SuiteCRM unauthenticated user password reset on php7https://agentprime.io/advisories/CVE-2024-36407/https://agentprime.io/advisories/CVE-2024-36407/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Jun 2024 16:38:17 GMTCVECVE-2024-36406: SuiteCRM vulnerable to open redirectshttps://agentprime.io/advisories/CVE-2024-36406/https://agentprime.io/advisories/CVE-2024-36406/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Jun 2024 15:06:22 GMTCVECVE-2023-6131: Code Injection in salesagility/suitecrmhttps://agentprime.io/advisories/CVE-2023-6131/https://agentprime.io/advisories/CVE-2023-6131/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Nov 2023 16:27:57 GMTCVECVE-2023-6130: Path Traversal: '\..\filename' in salesagility/suitecrmhttps://agentprime.io/advisories/CVE-2023-6130/https://agentprime.io/advisories/CVE-2023-6130/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Nov 2023 16:19:29 GMTCVECVE-2023-6128: Cross-site Scripting (XSS) - Reflected in salesagility/suitecrmhttps://agentprime.io/advisories/CVE-2023-6128/https://agentprime.io/advisories/CVE-2023-6128/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Nov 2023 16:11:04 GMTCVECVE-2023-6127: Unrestricted Upload of File with Dangerous Type in salesagility/suitecrmhttps://agentprime.io/advisories/CVE-2023-6127/https://agentprime.io/advisories/CVE-2023-6127/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Nov 2023 16:01:57 GMTCVECVE-2023-6126: Code Injection in salesagility/suitecrmhttps://agentprime.io/advisories/CVE-2023-6126/https://agentprime.io/advisories/CVE-2023-6126/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Nov 2023 15:51:44 GMTCVECVE-2023-6125: Code Injection in salesagility/suitecrmhttps://agentprime.io/advisories/CVE-2023-6125/https://agentprime.io/advisories/CVE-2023-6125/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Nov 2023 15:30:05 GMTCVECVE-2023-6124: Server-Side Request Forgery (SSRF) in salesagility/suitecrmhttps://agentprime.io/advisories/CVE-2023-6124/https://agentprime.io/advisories/CVE-2023-6124/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Nov 2023 14:52:40 GMTCVECVE-2023-5353: Improper Access Control in salesagility/suitecrmhttps://agentprime.io/advisories/CVE-2023-5353/https://agentprime.io/advisories/CVE-2023-5353/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Oct 2023 12:15:20 GMTCVECVE-2023-5351: Cross-site Scripting (XSS) - Stored in salesagility/suitecrmhttps://agentprime.io/advisories/CVE-2023-5351/https://agentprime.io/advisories/CVE-2023-5351/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Oct 2023 11:58:01 GMTCVECVE-2023-5350: SQL Injection in salesagility/suitecrmhttps://agentprime.io/advisories/CVE-2023-5350/https://agentprime.io/advisories/CVE-2023-5350/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Oct 2023 11:45:41 GMTCVECVE-2023-1034: Path Traversal: '\..\filename' in salesagility/suitecrmhttps://agentprime.io/advisories/CVE-2023-1034/https://agentprime.io/advisories/CVE-2023-1034/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 25 Feb 2023 00:00:00 GMTCVECVE-2022-0754: SQL Injection in salesagility/suitecrmhttps://agentprime.io/advisories/CVE-2022-0754/https://agentprime.io/advisories/CVE-2022-0754/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Mar 2022 12:45:24 GMTCVECVE-2022-0756: Missing Authorization in salesagility/suitecrmhttps://agentprime.io/advisories/CVE-2022-0756/https://agentprime.io/advisories/CVE-2022-0756/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Mar 2022 00:00:00 GMTCVECVE-2022-0755: Missing Authorization in salesagility/suitecrmhttps://agentprime.io/advisories/CVE-2022-0755/https://agentprime.io/advisories/CVE-2022-0755/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Mar 2022 00:00:00 GMTCVECVE-2021-25960: SuiteCRM - CSV Injection in Accounts Modulehttps://agentprime.io/advisories/CVE-2021-25960/https://agentprime.io/advisories/CVE-2021-25960/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Sep 2021 13:55:15 GMTCVECVE-2021-25961: SuiteCRM - Account Takeover in Password Reset Functionalityhttps://agentprime.io/advisories/CVE-2021-25961/https://agentprime.io/advisories/CVE-2021-25961/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Sep 2021 13:50:10 GMTCVE