Advisories · Technology

David-Crty Databasement.

Every CVE that names David-Crty Databasement among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-121939 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

Databasement before 1.10.9 Account Takeover via OIDC Email Auto-Linking
- David-Crty Databasement
- Authentication bypass
Not analysed yet 4 Nov 2026
CVE-2026-111875 CVE record

CVSS 5.1 Medium

David-Crty Databasement Scheduled Restore SaveScheduledRestoreRequest.php authorization
- David-Crty Databasement
- Broken access control
Not analysed yet 18 Oct 2026
CVE-2026-108963 CVE record

CVSS 8.8 High

Argument injection in David-Crty databasement
- David-Crty databasement
- Command injection
Not analysed yet 11 Oct 2026
CVE-2026-103534 CVE record

CVSS 5.3 Medium

David-Crty databasement Snapshot Model snapshots SnapshotPolicy.view access control
- David-Crty databasement
- Privilege escalation
- Broken access control
Not analysed yet 1 Oct 2026
CVE-2026-103533 CVE record

CVSS 2.1 Low

David-Crty databasement database-servers API Endpoint RestoreRequest.php 511 path traversal
- David-Crty databasement
- Path traversal
Not analysed yet 1 Oct 2026
CVE-2026-95654 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Databasement before 1.7.14 Authorization Bypass via Stale Invitation Token
- David-Crty Databasement
- Broken access control
Not analysed yet 22 Sept 2026