Skip to content
OpenAdvisories

Vendor

David-Crty

6 known vulnerabilities.

Products

databasement 6
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.1
    CVE-2026-121939

    Databasement before 1.10.9 Account Takeover via OIDC Email Auto-Linking

    Databasement before 1.10.9 contains an authentication bypass vulnerability in OAuthService::findOrCreateLocalUser() that links OIDC identities to local users by email without checking email_verified. Attackers can register an identity provider account with a …

    David-Crty databasement
  • High 8.8
    CVE-2026-108963

    databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a dat…

    David-Crty databasement
  • High 7.4
    CVE-2026-95654

    Databasement before 1.7.14 Authorization Bypass via Stale Invitation Token

    Databasement before 1.7.14 validates invitation tokens only when the acceptance page loads, caching the authorization decision without re-checking token validity during acceptance. Attackers with a leaked or forwarded invitation link can load the page while p…

    David-Crty databasement