Dbsyncer Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Dbsyncer Project records in CISA KEV

No Dbsyncer Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Dbsyncer 2 records HIGH

Records

2 records in Dbsyncer · all components

TI-2025-28744 CVE-2025-45237 · GHSA-3hrf-pq5f-6637

Incorrect access control in the component /config/download of DBSyncer v2.0.6 allows…

HIGH 72

Incorrect access control in the component /config/download of DBSyncer v2.0.6 allows attackers to access the JSON file containing sensitive account information, including the encrypted password.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0046 Published 2025-05-05 No fix listed CWE-284

TI-2025-28743 CVE-2025-45236 · GHSA-x4jf-gq5v-q6vw

A stored cross-site scripting (XSS) vulnerability in the Edit Profile feature of DBSyncer…

MEDIUM 58

A stored cross-site scripting (XSS) vulnerability in the Edit Profile feature of DBSyncer v2.0.6 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Nickname parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00273 Published 2025-05-05 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0