Lucene search
+L

19 matches found

NVD
NVD
•added 2026/10/18 6:16 a.m.•9 views

CVE-2026-111875

A vulnerability has been found in David-Crty Databasement up to 1.8.1. Affected by this vulnerability is an unknown functionality of the file app/Http/Requests/Api/V1/SaveScheduledRestoreRequest.php of the component Scheduled Restore. Such manipulation of the argument schemaname leads to missing...

5.8CVSS0.00227EPSS
SaveExploits0References7
CVE
CVE
•added 2026/10/18 5:30 a.m.•10 views

CVE-2026-111875

The David-Crty Databasement software, up to version 1.8.1 , contains a vulnerability in the Scheduled Restore component. Specifically, an unknown functionality within the file app/Http/Requests/Api/V1/SaveScheduledRestoreRequest.php allows for missing authorization when an attacker manipulates th...

5.8CVSS4.8AI score0.00227EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/10/18 5:30 a.m.•12 views

CVE-2026-111875 David-Crty Databasement Scheduled Restore SaveScheduledRestoreRequest.php authorization

A vulnerability has been found in David-Crty Databasement up to 1.8.1. Affected by this vulnerability is an unknown functionality of the file app/Http/Requests/Api/V1/SaveScheduledRestoreRequest.php of the component Scheduled Restore. Such manipulation of the argument schemaname leads to missing...

5.8CVSS0.00227EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/10/18 5:30 a.m.•4 views

EUVD-2026-103386

A vulnerability has been found in David-Crty Databasement up to 1.8.1. Affected by this vulnerability is an unknown functionality of the file app/Http/Requests/Api/V1/SaveScheduledRestoreRequest.php of the component Scheduled Restore. Such manipulation of the argument schemaname leads to missing...

5.8CVSS4.8AI score0.00227EPSS
SaveExploits0References7
NVD
NVD
•added 2026/10/01 4:18 a.m.•24 views

CVE-2026-103534

A vulnerability was determined in David-Crty databasement up to 1.7.1. Affected is the function SnapshotPolicy.viewAny/SnapshotPolicy.view of the file /api/v1/snapshots of the component Snapshot Model. This manipulation causes improper access controls. Remote exploitation of the attack is possibl...

6.5CVSS0.00209EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/10/01 3:30 a.m.•48 views

CVE-2026-103534 David-Crty databasement Snapshot Model snapshots SnapshotPolicy.view access control

A vulnerability was determined in David-Crty databasement up to 1.7.1. Affected is the function SnapshotPolicy.viewAny/SnapshotPolicy.view of the file /api/v1/snapshots of the component Snapshot Model. This manipulation causes improper access controls. Remote exploitation of the attack is possibl...

6.5CVSS0.00209EPSS
SaveExploits0References7
osv_cve
osv_cve
•added 2026/10/01 3:30 a.m.•11 views

CVE-2026-103534 David-Crty databasement Snapshot Model snapshots SnapshotPolicy.view access control

A vulnerability was determined in David-Crty databasement up to 1.7.1. Affected is the function SnapshotPolicy.viewAny/SnapshotPolicy.view of the file /api/v1/snapshots of the component Snapshot Model. This manipulation causes improper access controls. Remote exploitation of the attack is possibl...

5.3CVSS5.2AI score
SaveExploits0References9
CVE
CVE
•added 2026/10/01 3:30 a.m.•28 views

CVE-2026-103534

The David-Crty databasement software (versions up to 1.7.1 ) contains a vulnerability in the Snapshot Model component. Specifically, the SnapshotPolicy.viewAny/SnapshotPolicy.view functions within the /api/v1/snapshots file suffer from improper access controls . This flaw allows for remote exploi...

6.5CVSS6AI score0.00209EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/10/01 3:30 a.m.•11 views

CVE-2026-103534 David-Crty databasement Snapshot Model snapshots SnapshotPolicy.view access control

A vulnerability was determined in David-Crty databasement up to 1.7.1. Affected is the function SnapshotPolicy.viewAny/SnapshotPolicy.view of the file /api/v1/snapshots of the component Snapshot Model. This manipulation causes improper access controls. Remote exploitation of the attack is possibl...

6.5CVSS6AI score0.00209EPSS
SaveExploits0References7
NVD
NVD
•added 2026/10/01 3:16 a.m.•20 views

CVE-2026-103533

A vulnerability was found in David-Crty databasement up to 1.7.1. This impacts the function https:/github.com/David-Crty/databasement/pull/511 of the file app/Http/Requests/Api/V1/RestoreRequest.php of the component database-servers API Endpoint. The manipulation of the argument schemaname result...

4.3CVSS0.0029EPSS
SaveExploits0References8
osv_cve
osv_cve
•added 2026/10/01 2:45 a.m.•15 views

CVE-2026-103533 David-Crty databasement database-servers API Endpoint RestoreRequest.php 511 path traversal

A vulnerability was found in David-Crty databasement up to 1.7.1. This impacts the function https:/github.com/David-Crty/databasement/pull/511 of the file app/Http/Requests/Api/V1/RestoreRequest.php of the component database-servers API Endpoint. The manipulation of the argument schemaname result...

2.1CVSS4.7AI score
SaveExploits0References10
Vulnrichment
Vulnrichment
•added 2026/10/01 2:45 a.m.•11 views

CVE-2026-103533 David-Crty databasement database-servers API Endpoint RestoreRequest.php 511 path traversal

A vulnerability was found in David-Crty databasement up to 1.7.1. This impacts the function https:/github.com/David-Crty/databasement/pull/511 of the file app/Http/Requests/Api/V1/RestoreRequest.php of the component database-servers API Endpoint. The manipulation of the argument schemaname result...

4.3CVSS4.4AI score0.0029EPSS
SaveExploits0References8
Mend
Mend
•added 2026/10/01 2:45 a.m.•5 views

CVE-2026-103533

A vulnerability was found in David-Crty databasement up to 1.7.1. This impacts the function https:/github.com/David-Crty/databasement/pull/511 of the file app/Http/Requests/Api/V1/RestoreRequest.php of the component database-servers API Endpoint. The manipulation of the argument schemaname result...

4.3CVSS4.4AI score0.0029EPSS
SaveExploits0References10
CVE
CVE
•added 2026/10/01 2:45 a.m.•19 views

CVE-2026-103533

A path traversal vulnerability exists in the database-servers API Endpoint of David-Crty databasement versions up to 1.7.1 . The flaw is located in the app/Http/Requests/Api/V1/RestoreRequest.php file and stems from the improper handling of the schema_name argument. An attacker can potentially la...

4.3CVSS4.4AI score0.0029EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/10/01 2:45 a.m.•13 views

EUVD-2026-90463

A vulnerability was found in David-Crty databasement up to 1.7.1. This impacts the function https:/github.com/David-Crty/databasement/pull/511 of the file app/Http/Requests/Api/V1/RestoreRequest.php of the component database-servers API Endpoint. The manipulation of the argument schemaname result...

4.3CVSS4.4AI score0.0029EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2026/10/01 2:45 a.m.•46 views

CVE-2026-103533 David-Crty databasement database-servers API Endpoint RestoreRequest.php 511 path traversal

A vulnerability was found in David-Crty databasement up to 1.7.1. This impacts the function https:/github.com/David-Crty/databasement/pull/511 of the file app/Http/Requests/Api/V1/RestoreRequest.php of the component database-servers API Endpoint. The manipulation of the argument schemaname result...

4.3CVSS0.0029EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/10/01 12:00 a.m.•9 views

PT-2026-103662

A vulnerability was found in David-Crty databasement up to 1.7.1. This impacts the function https:/github.com/David-Crty/databasement/pull/511 of the file app/Http/Requests/Api/V1/RestoreRequest.php of the component database-servers API Endpoint. The manipulation of the argument schema name resul...

4.3CVSS4.4AI score0.0029EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/01 12:00 a.m.•20 views

CVE-2026-103534: Improper Access Control

A vulnerability was determined in David-Crty databasement up to 1.7.1. Affected is the function SnapshotPolicy.viewAny/SnapshotPolicy.view of the file /api/v1/snapshots of the component Snapshot Model. This manipulation causes improper access controls. Remote exploitation of the attack is possibl...

6.5CVSS6AI score0.00209EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/01 12:00 a.m.•9 views

CVE-2026-103533: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was found in David-Crty databasement up to 1.7.1. This impacts the function https:/github.com/David-Crty/databasement/pull/511 of the file app/Http/Requests/Api/V1/RestoreRequest.php of the component database-servers API Endpoint. The manipulation of the argument schemaname result...

4.3CVSS4.4AI score0.0029EPSS
SaveExploits0References2
Rows per page
Query Builder