Where
-Infinity
0

Trending

Last week
Last month
Last year

dolibarr Dolibarr ERP CRMDolibarr ERP CRM 7.0.3 Remote Code Execution via install/step1.php

Risk 86
Severity
9.3
First published (updated )
CVE-2018-25357

dolibarr DolibarrDolibarr has an Authenticated Remote Code Execution via eval() injection in user extrafields

Risk 72
Severity
8.6
First published (updated )
CVE-2025-67486

dolibarr Dolibarr ERP & CRMCode Injection

Risk 79
Severity
8.8
First published (updated )
CVE-2026-31018

dolibarr Dolibarr ERP & CRM Website moduleOS Command Injection

Risk 79
Severity
8.8
First published (updated )
CVE-2026-31019

dolibarr DolibarrDolibarr: OS Command Injection (RCE) via MAIN_ODT_AS_PDF configuration

Risk 75
Severity
9.4
First published (updated )
CVE-2026-23500
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

dolibarr Dolibarr ERP-CRMDolibarr ERP-CRM 8.0.4 SQL Injection via rowid Parameter

Risk 66
Severity
8.8
First published (updated )
CVE-2019-25710

dolibarr Dolibarr ERP/CRMDolibarr ERP/CRM < 23.0.2 Authenticated RCE via dol_eval_standard()

Risk 77
Severity
8.6
First published (updated )
CVE-2026-22666

composer/dolibarr/dolibarrDolibarr Core Discloses Sensitive Data via Authenticated Local File Inclusion in selectobject.php

Risk 38
Severity
6.5
First published (updated )
CVE-2026-34036

dolibarr Dolibarr ERP/CRMDolibarr ERP/CRM 10.0.1 SQL Injection via elemid

Risk 57
Severity
8.8
First published (updated )
CVE-2019-25452

dolibarr Dolibarr ERP/CRMDolibarr ERP/CRM 10.0.1 SQL Injection via card.php

Risk 43
Severity
7.5
First published (updated )
CVE-2019-25450
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

dolibarr Dolibarr ERP-CRMDolibarr ERP-CRM 14.0.2 - Stored Cross-Site Scripting (XSS) / Privilege Escalation

Risk 61
Severity
8.4
First published (updated )
CVE-2021-47779

dolibarr ERP & CRMCode Injection

Risk 77
Severity
8.8
First published (updated )
CVE-2025-56588

composer/dolibarr/dolibarrMalicious File Upload, Code Injection

Risk 82
Severity
8.8
First published (updated )
CVE-2024-37821

composer/dolibarr/dolibarrMultiple vulnerabilities in DOLIBARR's ERP CMS

Risk 48
Severity
9.1
EPSS
0.04%
First published (updated )
CVE-2024-5315

composer/dolibarr/dolibarrMultiple vulnerabilities in DOLIBARR's ERP CMS

Risk 48
Severity
9.1
EPSS
0.04%
First published (updated )
CVE-2024-5314
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

dolibarr Dolibarr Erp\/crmCode Injection

Risk 58
Severity
8.8
EPSS
0.04%
First published (updated )
CVE-2024-29477

composer/dolibarr/dolibarrDolibarr Application Home Page HTML injection vulnerability

Risk 35
Severity
7.1
EPSS
0.05%
First published (updated )
CVE-2024-23817

composer/dolibarr/dolibarrXSS

Risk 81
Severity
9.6
First published (updated )
CVE-2023-38888

composer/dolibarr/dolibarrMalicious File Upload

Risk 81
Severity
8.8
First published (updated )
CVE-2023-38887

composer/dolibarr/dolibarrCode Injection, OS Command Injection

Risk 69
Severity
7.2
First published (updated )
CVE-2023-38886
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

dolibarr Dolibarr Erp\/crmAn issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump an…

Risk 43
Severity
7.5
First published (updated )
CVE-2023-33568

dolibarr Dolibarr Erp\/crmSQL Injection in dolibarr/dolibarr

Risk 86
Severity
9.8
First published (updated )
CVE-2022-4093

dolibarr Dolibarr Erp\/crmDolibarr Open Source ERP & CRM for Business before v14.0.1 allows attackers to escalate privileges v…

Risk 86
Severity
9.8
First published (updated )
CVE-2022-43138

dolibarr Dolibarr Erp\/crmCode Injection

Risk 87
Severity
9.8
First published (updated )
CVE-2022-40871

dolibarr Dolibarr Erp\/crmCode Injection in dolibarr/dolibarr

Risk 79
Severity
8.8
First published (updated )
CVE-2022-0819
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

dolibarr Dolibarr Erp\/crmSQL Injection in dolibarr/dolibarr

Risk 86
Severity
9.8
First published (updated )
CVE-2022-0224

dolibarr Dolibarr Erp\/crmImproper User Access Control in "Dolibarr" Leads to Account Takeover

Risk 66
Severity
7.2
First published (updated )
CVE-2021-25956

composer/dolibarr/dolibarrCSRF

Risk 77
Severity
8.8
First published (updated )
CVE-2020-11825

dolibarr Dolibarr Erp\/crmXSS

Risk 34
Severity
5.4
First published (updated )
CVE-2020-9016

composer/dolibarr/dolibarrXSS

Risk 39
Severity
6.1
First published (updated )
CVE-2020-7994
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203