David-crty

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 6
    Known Exploited: 0
    0
    Critical Level Threats
    3
    High Level Threats
    3
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-121939

    Databasement before 1.10.9 Account Takeover via OIDC Email Auto-Linking

    Last Modified: Nov 04, 2026
    Published: Nov 04, 2026

    CVE-2026-111875

    David-Crty Databasement Scheduled Restore SaveScheduledRestoreRequest.php authorization

    Last Modified: Oct 19, 2026
    Published: Oct 18, 2026

    CVE-2026-108963

    databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a database name that can be specified by any authenticated user. For example, --result-file=/app/public/index.php can write to index.php. In other words, quoting prevents OS command injection in mariadb-dump, but the argument injection alone is sufficient for code execution indirectly. NOTE: the project's composer.json file does not indicate an independently published databasement Composer package.

    Last Modified: Oct 13, 2026
    Published: Oct 11, 2026

    CVE-2026-103534

    David-Crty databasement Snapshot Model snapshots SnapshotPolicy.view access control

    Last Modified: Oct 06, 2026
    Published: Oct 01, 2026

    CVE-2026-103533

    David-Crty databasement database-servers API Endpoint RestoreRequest.php 511 path traversal

    Last Modified: Oct 01, 2026
    Published: Oct 01, 2026
    Items Per Page
    David-Crty Vulnerabilities & Security CVEs | CVE-DB