Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Dolibarr has SQL Injection in societe/class/societe.class.php via localtax1_value parameterOpen the advisoryOct 27, 2026
- High8.6Dolibarr ERP CRM before 24.0.0 contains an OS command injection vulnerability in htdocs/admin/tools/export.php that lets authenticated administrators bypass the restri…Check if you run itEPSS 2.08%Oct 26, 2026
- Medium5.3A vulnerability has been found in Dolibarr up to 23.0.2.Check if you run itEPSS 0.36%Oct 19, 2026
- High7.5Dolibarr before 23.0.4 contains a PHP object injection vulnerability in jsonOrUnserialize() in functions.lib.php, which calls unserialize() without class restrictions…Check if you run itEPSS 0.51%Oct 15, 2026
- Unknowndolibarr dolibarr_erp\/crm Incorrect AuthorizationPatch nowKEVEPSS 1.56%Sep 17, 2026
- Low2.1A security vulnerability has been detected in Dolibarr ERP CRM up to 23.0.1.Check if you run itEPSS 0.26%Jun 1, 2026
- Medium5.3A vulnerability has been found in Dolibarr ERP CRM 23.0.0/23.0.1/23.0.2.Check if you run itEPSS 0.22%May 31, 2026
- Critical9.3Dolibarr ERP CRM 7.0.3 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary code by injecting PHP code through the…Check if you run itEPSS 1.70%May 23, 2026
- High8.6Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package.Check if you run itEPSS 0.88%May 8, 2026
- Low2.9A security flaw has been discovered in Dolibarr ERP CRM up to 23.0.2.Check if you run itEPSS 0.14%May 3, 2026
- Low1.3A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2.Check if you run itEPSS 0.22%May 3, 2026
- High8.8In the Website module of Dolibarr ERP & CRM 22.0.4 and below, the application uses blacklist-based filtering to restrict dangerous PHP functions related to system comm…Check if you run itEPSS 0.57%Apr 21, 2026
- High8.8In Dolibarr ERP & CRM <= 22.0.4, PHP code detection and editing permission enforcement in the Website module is not applied consistently to all input parameters, allow…Check if you run itEPSS 0.27%Apr 21, 2026
- Critical9.4Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package.Check if you run itEPSS 0.92%Apr 17, 2026
- High8.8Dolibarr ERP-CRM 8.0.4 contains an SQL injection vulnerability in the rowid parameter of the admin dict.php endpoint that allows attackers to execute arbitrary SQL queries.Check if you run itEPSS 0.31%Apr 12, 2026
- High8.6Dolibarr ERP/CRM versions prior to 23.0.2 contain an authenticated remote code execution vulnerability in the dol_eval_standard() function that fails to apply forbidde…Check this weekEPSS 15.79%Apr 7, 2026
- Medium6.5Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package.Check if you run itEPSS 1.46%Mar 27, 2026
- High8.8Dolibarr ERP/CRM 10.0.1 contains an SQL injection vulnerability in the elemid POST parameter of the viewcat.php endpoint that allows unauthenticated attackers to execu…Check if you run itEPSS 0.43%Feb 22, 2026
- High7.1Dolibarr ERP/CRM 10.0.1 contains multiple SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries by injecting SQL code through…Check if you run itEPSS 0.35%Feb 22, 2026
- Critical9.0Cross Site Request Forgery vulnerability in Dolibarr ERP & CRM v.22.0.9 allows a remote attacker to escalate privileges via the notes field in perms.php NOTE: this is disputed by aCheck if you run itEPSS 0.17%Feb 12, 2026
- Medium5.1Dolibarr 11.0.3 contains a persistent cross-site scripting vulnerability in LDAP synchronization settings that allows attackers to inject malicious scripts through multiple parametCheck if you run itEPSS 0.29%Jan 30, 2026
- High8.4Dolibarr ERP-CRM 14.0.2 contains a stored cross-site scripting vulnerability in the ticket creation module that allows low-privilege users to inject malicious scripts.Check if you run itEPSS 0.35%Jan 15, 2026
- High8.8Dolibarr ERP & CRM v21.0.1 were discovered to contain a remote code execution (RCE) vulnerability in the User module configuration via the computed field parameter.Check if you run itEPSS 0.50%Oct 1, 2025
- Medium5.4A Cross Site Scripting (XSS) vulnerability exists in Dolibarr before 14.0.3 via the ticket creation flow.Check if you run itEPSS 0.98%Dec 15, 2021
- High8.8In “Dolibarr” application, v2.8.1 to v13.0.2 are vulnerable to account takeover via password reset functionality.Check if you run itEPSS 1.06%Aug 17, 2021
Sort