Lucene search
K

23 matches found

Tenable Nessus
Tenable Nessus
added 2026/02/10 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-25892

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adminer is open-source database management software. Adminer v5.4.1 and earlier has a version check mechanism where adminer.org sends signed version info via...

7.5CVSS5.8AI score0.04457EPSS
Exploits1References2
NVD
NVD
added 2026/02/09 10:16 p.m.2 views

CVE-2026-25892

Adminer is open-source database management software. Adminer v5.4.1 and earlier has a version check mechanism where adminer.org sends signed version info via JavaScript postMessage, which the browser then POSTs to ?script=version. This endpoint lacks origin validation and accepts POST data from a...

7.5CVSS0.04457EPSS
Exploits1References3
Debian CVE
Debian CVE
added 2026/02/09 9:26 p.m.2 views

CVE-2026-25892

Adminer is open-source database management software. Adminer v5.4.1 and earlier has a version check mechanism where adminer.org sends signed version info via JavaScript postMessage, which the browser then POSTs to ?script=version. This endpoint lacks origin validation and accepts POST data from a...

7.5CVSS5.6AI score0.04457EPSS
Exploits1
GithubExploit
GithubExploit
added 2025/11/27 7:36 p.m.162 views

Exploit for CVE-2021-43008

CVE-2021-43008 — Vulnérabilité Adminer Lecture arbi...

7.5CVSS7.1AI score0.84736EPSS
Exploits4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-49502

Malicious code in bioql PyPI...

6.9CVSS6.3AI score0.00273EPSS
Exploits0References1
CISA
CISA
added 2025/09/29 12:0 p.m.6 views

CISA Adds Five Known Exploited Vulnerabilities to Catalog

CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2021-21311link is external Adminer Server-Side Request Forgery Vulnerability CVE-2025-20352link is external Cisco IOS and IOS XE Software SNMP Denial of Servic...

10CVSS8.1AI score0.94113EPSS
In wildExploits75References10
Tenable Nessus
Tenable Nessus
added 2025/09/02 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-43960

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adminer 4.8.1, when using Monolog for logging, allows a Denial of Service memory consumption via a crafted serialized payload e.g., using s:1000000000, leading ...

8.6CVSS5.8AI score0.00508EPSS
Exploits2References3
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2018-7667

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adminer through 4.3.1 has SSRF via the server parameter. CVE-2018-7667 Note that Nessus relies on the presence of the package as reported by the vendor...

9.8CVSS8.2AI score0.16927EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/26 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2021-43008

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Access Control in Adminer versions 1.12.0 to 4.6.2 fixed in version 4.6.3 allows an attacker to achieve Arbitrary File Read on the remote server by...

7.5CVSS7.2AI score0.84736EPSS
Exploits4References2
CNNVD
CNNVD
added 2025/08/25 12:0 a.m.3 views

Adminer 安全漏洞

Adminer is an open source WordPress plugin for Adminer. It allows WordPress administrators to quickly perform database management. A security vulnerability exists in Adminer version 4.8.1, which stems from improper handling of specially serialized payloads when logging with Monolog, and could lea...

8.6CVSS6.6AI score0.00508EPSS
Exploits2References6
RedhatCVE
RedhatCVE
added 2025/05/22 7:9 p.m.9 views

CVE-2021-21311

Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers e.g. adminer.php are affected. This is fixed in version 4.7.9...

7.2CVSS6.7AI score0.94113EPSS
Exploits3References1
CVE
CVE
added 2024/06/21 2:28 p.m.90 views

CVE-2023-45197

The CVE-2023-45197 entry concerns Adminer and AdminerEvo where the file-upload plugin allows uploading a file with a table name of “..” to the Adminer directory root, enabling an attacker to guess the filename and execute it. Affected software: Adminer and AdminerEvo (Adminer is no longer support...

9.8CVSS9.5AI score0.00449EPSS
Exploits0References2Affected Software1
Github Security Blog
Github Security Blog
added 2024/06/07 10:19 p.m.14 views

Adminer file disclosure vulnerability

Adminer script versions up to 4.6.2 contains file disclosure vulnerability...

6.9AI score
Exploits0References4Affected Software1
CNNVD
CNNVD
added 2024/02/27 12:0 a.m.2 views

Subrion CMS Security Vulnerability

Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into websites and supports a variety of extensions plug-ins and more. A security vulnerability exists in Subrion CMS version 4.2.1, which stems from a cross-site scripting XSS vulnerabilit...

6.1CVSS5.8AI score0.00245EPSS
Exploits0References2
VulnCheck KEV
VulnCheck KEV
added 2022/05/04 12:0 a.m.2 views

VulnCheck KEV: CVE-2021-21311

Adminer contains a server-side request forgery vulnerability that, when exploited, allows a remote attacker to obtain potentially sensitive information...

7.2CVSS7.2AI score0.94113EPSS
Exploits3References1
CNNVD
CNNVD
added 2022/04/05 12:0 a.m.1 views

SOURCEFORGE Adminer安全漏洞

SOURCEFORGE Adminer is an application from the American SOURCEFORGE community. It provides database management in a single PHP file. A security vulnerability exists in Adminer version 4.6.2 and prior versions that stems from the presence of improper access control. An attacker can exploit the...

7.5CVSS7.5AI score0.84736EPSS
Exploits4References11
Positive Technologies
Positive Technologies
added 2022/03/24 12:0 a.m.2 views

PT-2022-11760 · Adminer · Adminer

Name of the Vulnerable Software and Affected Versions: Adminer versions 1.12.0 through 4.6.2 Description: The issue allows an attacker to achieve arbitrary file read on a remote server by requesting Adminer to connect to a remote MySQL database, due to improper access control. Recommendations: Fo...

7.5CVSS7.3AI score0.84736EPSS
Exploits4References23
Tenable Nessus
Tenable Nessus
added 2021/07/27 12:0 a.m.27 views

Adminer < 4.4.0 Server-Side Request Forgery

The version of Adminer installed on the remote host suffers from a Server-Side Request Forgery SSRF flaw via the server parameter which may permit clients to make onward connections to arbitrary systems/ports & can be used to potentially bypass firewalls to identify internal resource and perform...

9.8CVSS7.5AI score0.16927EPSS
Exploits1References2
CNVD
CNVD
added 2021/05/21 12:0 a.m.7 views

Unspecified Vulnerability in SOURCEFORGE Adminer

SOURCEFORGE Adminer is an application from the American SOURCEFORGE community. Provides database management in a single PHP file. A security vulnerability exists in Adminer versions 4.6.1 through 4.8.0, which stems from Adminer's use of the pdo extension to communicate with the database, and...

7.5CVSS6.6AI score0.29507EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/05/19 12:0 a.m.2 views

SOURCEFORGE Adminer 跨站脚本漏洞

SOURCEFORGE Adminer is an application from the American SOURCEFORGE community. Provides database management in a single PHP file. A security vulnerability exists in Adminer versions 4.6.1 through 4.8.0, which stems from Adminer's use of the pdo extension to communicate with the database, and...

7.5CVSS5.6AI score0.29507EPSS
Exploits1References5
Rows per page
Query Builder