Lucene search
+L

23 matches found

NVD
NVD
•added 2026/10/18 6:16 a.m.•11 views

CVE-2026-111875

A vulnerability has been found in David-Crty Databasement up to 1.8.1. Affected by this vulnerability is an unknown functionality of the file app/Http/Requests/Api/V1/SaveScheduledRestoreRequest.php of the component Scheduled Restore. Such manipulation of the argument schemaname leads to missing...

5.8CVSS0.00227EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/10/18 5:30 a.m.•31 views

CVE-2026-111875 David-Crty Databasement Scheduled Restore SaveScheduledRestoreRequest.php authorization

A vulnerability has been found in David-Crty Databasement up to 1.8.1. Affected by this vulnerability is an unknown functionality of the file app/Http/Requests/Api/V1/SaveScheduledRestoreRequest.php of the component Scheduled Restore. Such manipulation of the argument schemaname leads to missing...

5.8CVSS0.00227EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/10/18 5:30 a.m.•7 views

EUVD-2026-103386

A vulnerability has been found in David-Crty Databasement up to 1.8.1. Affected by this vulnerability is an unknown functionality of the file app/Http/Requests/Api/V1/SaveScheduledRestoreRequest.php of the component Scheduled Restore. Such manipulation of the argument schemaname leads to missing...

5.8CVSS4.8AI score0.00227EPSS
SaveExploits0References7
osv_cve
osv_cve
•added 2026/10/18 5:30 a.m.•3 views

CVE-2026-111875 David-Crty Databasement Scheduled Restore SaveScheduledRestoreRequest.php authorization

A vulnerability has been found in David-Crty Databasement up to 1.8.1. Affected by this vulnerability is an unknown functionality of the file app/Http/Requests/Api/V1/SaveScheduledRestoreRequest.php of the component Scheduled Restore. Such manipulation of the argument schemaname leads to missing...

5.1CVSS5.2AI score
SaveExploits0References9
CVE
CVE
•added 2026/10/18 5:30 a.m.•15 views

CVE-2026-111875

The David-Crty Databasement software, up to version 1.8.1 , contains a vulnerability in the Scheduled Restore component. Specifically, an unknown functionality within the file app/Http/Requests/Api/V1/SaveScheduledRestoreRequest.php allows for missing authorization when an attacker manipulates th...

5.8CVSS4.8AI score0.00227EPSS
SaveExploits0References7
NVD
NVD
•added 2026/10/01 4:18 a.m.•25 views

CVE-2026-103534

A vulnerability was determined in David-Crty databasement up to 1.7.1. Affected is the function SnapshotPolicy.viewAny/SnapshotPolicy.view of the file /api/v1/snapshots of the component Snapshot Model. This manipulation causes improper access controls. Remote exploitation of the attack is possibl...

6.5CVSS0.00209EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/10/01 3:30 a.m.•48 views

CVE-2026-103534 David-Crty databasement Snapshot Model snapshots SnapshotPolicy.view access control

A vulnerability was determined in David-Crty databasement up to 1.7.1. Affected is the function SnapshotPolicy.viewAny/SnapshotPolicy.view of the file /api/v1/snapshots of the component Snapshot Model. This manipulation causes improper access controls. Remote exploitation of the attack is possibl...

6.5CVSS0.00209EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/10/01 3:30 a.m.•11 views

CVE-2026-103534 David-Crty databasement Snapshot Model snapshots SnapshotPolicy.view access control

A vulnerability was determined in David-Crty databasement up to 1.7.1. Affected is the function SnapshotPolicy.viewAny/SnapshotPolicy.view of the file /api/v1/snapshots of the component Snapshot Model. This manipulation causes improper access controls. Remote exploitation of the attack is possibl...

6.5CVSS6AI score0.00209EPSS
SaveExploits0References7
Mend
Mend
•added 2026/10/01 3:30 a.m.•10 views

CVE-2026-103534

A vulnerability was determined in David-Crty databasement up to 1.7.1. Affected is the function SnapshotPolicy.viewAny/SnapshotPolicy.view of the file /api/v1/snapshots of the component Snapshot Model. This manipulation causes improper access controls. Remote exploitation of the attack is possibl...

6.5CVSS6AI score0.00209EPSS
SaveExploits0References9
osv_cve
osv_cve
•added 2026/10/01 3:30 a.m.•18 views

CVE-2026-103534 David-Crty databasement Snapshot Model snapshots SnapshotPolicy.view access control

A vulnerability was determined in David-Crty databasement up to 1.7.1. Affected is the function SnapshotPolicy.viewAny/SnapshotPolicy.view of the file /api/v1/snapshots of the component Snapshot Model. This manipulation causes improper access controls. Remote exploitation of the attack is possibl...

5.3CVSS5.2AI score
SaveExploits0References9
CVE
CVE
•added 2026/10/01 3:30 a.m.•30 views

CVE-2026-103534

The David-Crty databasement software (versions up to 1.7.1 ) contains a vulnerability in the Snapshot Model component. Specifically, the SnapshotPolicy.viewAny/SnapshotPolicy.view functions within the /api/v1/snapshots file suffer from improper access controls . This flaw allows for remote exploi...

6.5CVSS6AI score0.00209EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/10/01 3:30 a.m.•19 views

EUVD-2026-90467

A vulnerability was determined in David-Crty databasement up to 1.7.1. Affected is the function SnapshotPolicy.viewAny/SnapshotPolicy.view of the file /api/v1/snapshots of the component Snapshot Model. This manipulation causes improper access controls. Remote exploitation of the attack is possibl...

6.5CVSS6AI score0.00209EPSS
SaveExploits0References7
NVD
NVD
•added 2026/10/01 3:16 a.m.•25 views

CVE-2026-103533

A vulnerability was found in David-Crty databasement up to 1.7.1. This impacts the function https:/github.com/David-Crty/databasement/pull/511 of the file app/Http/Requests/Api/V1/RestoreRequest.php of the component database-servers API Endpoint. The manipulation of the argument schemaname result...

4.3CVSS0.0029EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2026/10/01 2:45 a.m.•13 views

CVE-2026-103533 David-Crty databasement database-servers API Endpoint RestoreRequest.php 511 path traversal

A vulnerability was found in David-Crty databasement up to 1.7.1. This impacts the function https:/github.com/David-Crty/databasement/pull/511 of the file app/Http/Requests/Api/V1/RestoreRequest.php of the component database-servers API Endpoint. The manipulation of the argument schemaname result...

4.3CVSS4.4AI score0.0029EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/10/01 2:45 a.m.•14 views

EUVD-2026-90463

A vulnerability was found in David-Crty databasement up to 1.7.1. This impacts the function https:/github.com/David-Crty/databasement/pull/511 of the file app/Http/Requests/Api/V1/RestoreRequest.php of the component database-servers API Endpoint. The manipulation of the argument schemaname result...

4.3CVSS4.4AI score0.0029EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2026/10/01 2:45 a.m.•47 views

CVE-2026-103533 David-Crty databasement database-servers API Endpoint RestoreRequest.php 511 path traversal

A vulnerability was found in David-Crty databasement up to 1.7.1. This impacts the function https:/github.com/David-Crty/databasement/pull/511 of the file app/Http/Requests/Api/V1/RestoreRequest.php of the component database-servers API Endpoint. The manipulation of the argument schemaname result...

4.3CVSS0.0029EPSS
SaveExploits0References8
Mend
Mend
•added 2026/10/01 2:45 a.m.•6 views

CVE-2026-103533

A vulnerability was found in David-Crty databasement up to 1.7.1. This impacts the function https:/github.com/David-Crty/databasement/pull/511 of the file app/Http/Requests/Api/V1/RestoreRequest.php of the component database-servers API Endpoint. The manipulation of the argument schemaname result...

4.3CVSS4.4AI score0.0029EPSS
SaveExploits0References10
osv_cve
osv_cve
•added 2026/10/01 2:45 a.m.•17 views

CVE-2026-103533 David-Crty databasement database-servers API Endpoint RestoreRequest.php 511 path traversal

A vulnerability was found in David-Crty databasement up to 1.7.1. This impacts the function https:/github.com/David-Crty/databasement/pull/511 of the file app/Http/Requests/Api/V1/RestoreRequest.php of the component database-servers API Endpoint. The manipulation of the argument schemaname result...

2.1CVSS4.7AI score
SaveExploits0References10
CVE
CVE
•added 2026/10/01 2:45 a.m.•21 views

CVE-2026-103533

A path traversal vulnerability exists in the database-servers API Endpoint of David-Crty databasement versions up to 1.7.1 . The flaw is located in the app/Http/Requests/Api/V1/RestoreRequest.php file and stems from the improper handling of the schema_name argument. An attacker can potentially la...

4.3CVSS4.4AI score0.0029EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/10/01 12:00 a.m.•18 views

PT-2026-103663

Name of the Vulnerable Software and Affected Versions David-Crty databasement versions prior to 1.7.2 Description Improper access controls exist within the Snapshot Model component. This issue allows remote exploitation via the /api/v1/snapshots endpoint, specifically affecting the...

6.5CVSS6.7AI score0.00209EPSS
SaveExploits0References12
Rows per page
Query Builder