Read the docs

Part-DB

Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Part-DB records in CISA KEV

No Part-DB vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Part-db 3 records HIGH

Records

13 records

TI-2019-15485 CVE-2019-25432 · GHSA-2wwg-wcjv-q464

Part-DB 0.4 Authentication Bypass via login.php

Priority HIGH 77

Part-DB 0.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to login by injecting SQL syntax into authentication parameters.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00407 Published 2026-02-20 No fix listed CWE-89
TI-2022-00754 CVE-2022-0848 · GHSA-px7p-wv92-2466

OS Command Injection in part-db/part-db

Priority HIGH 68

OS Command Injection in GitHub repository part-db/part-db prior to 0.5.11.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.35436 Published 2022-03-04 Fixed in 0.5.11 CWE-78
TI-2023-11276 CVE-2023-26042

HTML/XSS injection possibilities in Part-DB

Priority LOW 30

Part-DB is an open source inventory management system for your electronic components.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0051 Published 2023-02-27 Fixed in 1.0.2 CWE-79
Open these records in search →