Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: clidey Clear all filters
TI-2026-76157 CVE-2026-112005 · GHSA-ch4j-xm23-vmm2

Path traversal in WhoDB DuckDB query editor allows arbitrary file access

Priority HIGH 75

WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows remote attackers to read and write arbitrary host files by running DuckDB filesystem functions through the query editor.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00691 Published 2026-10-18 Fixed in 0.135.0 CWE-22
TI-2025-18503 CVE-2025-24786 · GHSA-9r4c-jwx3-3j76

Path traversal opening Sqlite3 database in WhoDB

Priority HIGH 82

WhoDB is an open source database management tool.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02728 Published 2025-02-06 Fixed in 0.45.0, 0.0.0-20250127172032-547336ac73c8 CWE-22