clidey

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

clidey records in CISA KEV

No clidey vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Whodb 2 records HIGH

Records

3 records

TI-2025-18503 CVE-2025-24786 · GHSA-9r4c-jwx3-3j76

Path traversal opening Sqlite3 database in WhoDB

HIGH 82

WhoDB is an open source database management tool.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02728 Published 2025-02-06 Fixed in 0.45.0, 0.0.0-20250127172032-547336ac73c8 CWE-22

TI-2025-18504 CVE-2025-24787 · GHSA-c7w4-9wv8-7x7c

Parameter injection in DB connection URIs leading to local file inclusion in WhoDB

HIGH 76

WhoDB is an open source database management tool.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00564 Published 2025-02-06 Fixed in 0.45.0, 0.0.0-20250127202645-8d67b767e005 CWE-943

TI-2026-76157 CVE-2026-112005 · GHSA-ch4j-xm23-vmm2

Path traversal in WhoDB DuckDB query editor allows arbitrary file access

HIGH 75

WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows remote attackers to read and write arbitrary host files by running DuckDB filesystem functions through the query editor.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00691 Published 2026-10-18 Fixed in 0.135.0 CWE-22

Open these records in search →

Critical	2
High	1
Medium	0
Low	0
No CVSS	0