CVE-2019-14974

SugarCRM Enterprise 9.0.0 allows mobile/error-not-supported-platform.html?desktop_url= XSS.

• CWE-79

• https://www.exploit-db.com/exploits/47247Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/47247Exploit, Third Party Advisory, VDB Entry

Published

Aug 14, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-14967An issue was discovered in Frappe Framework 10, 11 before 11…
• CVE-2019-14968An issue was discovered in imcat 4.9. There is SQL Injection…
• CVE-2019-14969Netwrix Auditor before 9.8 has insecure permissions on %PROG…
• CVE-2019-1497Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-14970A vulnerability in mkv::event_thread_t in VideoLAN VLC media…
• CVE-2019-14973_TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTI…6.5
• CVE-2019-14975Artifex MuPDF before 1.16.0 has a heap-based buffer over-rea…
• CVE-2019-14976iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords…
• CVE-2019-14977Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-14978/payu/icpcheckout/ in the WooCommerce PayU India Payment Gat…
• CVE-2019-14979cgi-bin/webscr?cmd=_cart in the WooCommerce PayPal Checkout …
• CVE-2019-1498Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…