dbgpt kayıtları
dbgpt üreticisine ait 13 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 5
- Düzeltme kaydı olan
- %15,4
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3
- CWE-36 Absolute Path Traversal2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-73 External Control of File Name or Path2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
13 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-10902İstismar yok | Arbitrary File Upload with Path Traversal in eosphoros-ai/db-gptdbgpt · db-gpt · CWE-22 | Kritik9,8 | — | %1,3 | 20 Mar 2025 |
39İzleyin | CVE-2024-10835İstismar yok | Arbitrary File Write via SQL Injection in eosphoros-ai/db-gptdbgpt · db-gpt · CWE-89 | Kritik9,8 | — | %1,2 | 20 Mar 2025 |
39İzleyin | CVE-2024-10901İstismar yok | Arbitrary File Write via DuckDB SQL Injection in eosphoros-ai/db-gptdbgpt · db-gpt · CWE-434 | Kritik9,8 | — | %1,1 | 20 Mar 2025 |
36İzleyin | CVE-2024-10833İstismar yok | Arbitrary File Write in eosphoros-ai/db-gptdbgpt · db-gpt · CWE-36 | Kritik9,1 | — | %0,8 | 20 Mar 2025 |
36İzleyin | CVE-2024-10831İstismar yok | Arbitrary File Write through Absolute Path Traversal in eosphoros-ai/db-gptdbgpt · db-gpt · CWE-36 | Kritik9,1 | — | %0,8 | 20 Mar 2025 |
36İzleyin | CVE-2024-10834İstismar yok | Arbitrary File Write in eosphoros-ai/db-gptdbgpt · db-gpt · CWE-73 | Kritik9,1 | — | %0,6 | 20 Mar 2025 |
32İzleyin | CVE-2024-10830İstismar yok | Path Traversal in eosphoros-ai/db-gptdbgpt · db-gpt · CWE-22 | Yüksek8,2 | — | %0,7 | 20 Mar 2025 |
32İzleyin | CVE-2025-0452İstismar yok | Arbitrary File Deletion in eosphoros-ai/DB-GPTdbgpt · db-gpt · CWE-73 | Yüksek8,2 | — | %0,5 | 20 Mar 2025 |
32İzleyin | CVE-2024-10906İstismar yok | Cross-Site Request Forgery (CSRF) in eosphoros-ai/db-gptdbgpt · db-gpt · CWE-352 | Yüksek8,1 | — | %0,2 | 20 Mar 2025 |
30İzleyin | CVE-2024-10829Kavram kanıtı | Denial of Service (DoS) via Multipart Boundary in eosphoros-ai/db-gptdbgpt · db-gpt · CWE-835 | Yüksek7,5 | — | %0,7 | 20 Mar 2025 |
26İzleyin | CVE-2025-51459İstismar yok | File Upload vulnerability in agent.hub.controller.refresh_plugins in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary dbgpt · db-gpt · CWE-77 | Orta6,5 | — | %0,3 | 22 Tem 2025 |
26İzleyin | CVE-2025-51458Kavram kanıtı | SQL Injection in editor_sql_run and query_ex in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary SQL statements via crdbgpt · db-gpt · CWE-89 | Orta6,5 | — | %0,3 | 22 Tem 2025 |
22İzleyin | CVE-2025-6772İstismar yok | eosphoros-ai db-gpt import import_flow path traversaldbgpt · db-gpt · CWE-22 | Orta5,5 | — | %0,6 | 27 Haz 2025 |
- CVE-2024-1090239İzleyin
Arbitrary File Upload with Path Traversal in eosphoros-ai/db-gpt
KritikCVSS 9,8İstismar yokEPSS %1dbgpt · db-gpt20 Mar 2025
- CVE-2024-1083539İzleyin
Arbitrary File Write via SQL Injection in eosphoros-ai/db-gpt
KritikCVSS 9,8İstismar yokEPSS %1dbgpt · db-gpt20 Mar 2025
- CVE-2024-1090139İzleyin
Arbitrary File Write via DuckDB SQL Injection in eosphoros-ai/db-gpt
KritikCVSS 9,8İstismar yokEPSS %1dbgpt · db-gpt20 Mar 2025
- CVE-2024-1083336İzleyin
Arbitrary File Write in eosphoros-ai/db-gpt
KritikCVSS 9,1İstismar yokEPSS %1dbgpt · db-gpt20 Mar 2025
- CVE-2024-1083136İzleyin
Arbitrary File Write through Absolute Path Traversal in eosphoros-ai/db-gpt
KritikCVSS 9,1İstismar yokEPSS %1dbgpt · db-gpt20 Mar 2025
- CVE-2024-1083436İzleyin
Arbitrary File Write in eosphoros-ai/db-gpt
KritikCVSS 9,1İstismar yokEPSS %1dbgpt · db-gpt20 Mar 2025
- CVE-2024-1083032İzleyin
Path Traversal in eosphoros-ai/db-gpt
YüksekCVSS 8,2İstismar yokEPSS %1dbgpt · db-gpt20 Mar 2025
- CVE-2025-045232İzleyin
Arbitrary File Deletion in eosphoros-ai/DB-GPT
YüksekCVSS 8,2İstismar yokEPSS %1dbgpt · db-gpt20 Mar 2025
- CVE-2024-1090632İzleyin
Cross-Site Request Forgery (CSRF) in eosphoros-ai/db-gpt
YüksekCVSS 8,1İstismar yokEPSS %0dbgpt · db-gpt20 Mar 2025
- CVE-2024-1082930İzleyin
Denial of Service (DoS) via Multipart Boundary in eosphoros-ai/db-gpt
YüksekCVSS 7,5Kavram kanıtıEPSS %1dbgpt · db-gpt20 Mar 2025
- CVE-2025-5145926İzleyin
File Upload vulnerability in agent.hub.controller.refresh_plugins in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary
OrtaCVSS 6,5İstismar yokEPSS %0dbgpt · db-gpt22 Tem 2025
- CVE-2025-5145826İzleyin
SQL Injection in editor_sql_run and query_ex in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary SQL statements via cr
OrtaCVSS 6,5Kavram kanıtıEPSS %0dbgpt · db-gpt22 Tem 2025
- CVE-2025-677222İzleyin
eosphoros-ai db-gpt import import_flow path traversal
OrtaCVSS 5,5İstismar yokEPSS %1dbgpt · db-gpt27 Haz 2025