https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 08:09:05 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-13970 bdu:2025-13970 https://cve.radiocsirt.org/vuln/bdu:2025-13970 https://cve.radiocsirt.org/vuln/euvd-2026-260457 EUVD-2026-260457 https://cve.radiocsirt.org/vuln/euvd-2026-260457 https://cve.radiocsirt.org/vuln/fkie_cve-2025-64493 <p>SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. In versions 8.6.0 through 8.9.0, there is an authenticated, blind (time-based) SQL-injection inside the appMetadata-operation of the GraphQL-API. This allows extraction of arbitrary data from the database, and does not require administrative access. This issue is fixed in version 8.9.1.</p> <p>SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. In versions 8.6.0 through 8.9.0, there is an authenticated, blind (time-based) SQL-injection inside the appMetadata-operation of the GraphQL-API. This allows extraction of arbitrary data from the database, and does not require administrative access. This issue is fixed in version 8.9.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-64493 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2517 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in SuiteCRM ausnutzen, um Dateien zu manipulieren.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in SuiteCRM ausnutzen, um Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2517