Skip to content
OpenAdvisories

Vendor

Part-DB

13 known vulnerabilities.

Products

Part-DB-server 11 Part-DB 1 part-db/part-db 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.6
    CVE-2026-54630

    Part-DB: Authenticated RCE via .phar attachment upload served from public/media

    Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, the part attachment upload handler stores uploaded files under the web-served media directory using the client-supplied file extension, and its extension…

    Part-DB Part-DB-server
  • Critical 10.0
    CVE-2022-0848 Public exploit EPSS 35%

    OS Command Injection in part-db/part-db

    OS Command Injection in GitHub repository part-db/part-db prior to 0.5.11.

    Part-DB part-db/part-db