DB
Vendor
Dbgpt
13
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-51459 | DB Db-gpt Dbgpt | 6.5 | Jul 22 | File Upload vulnerability in agent.hub.controller.refresh_plugins in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary code via a malicious plugin ZIP file… |
| CVE-2025-51458 | DB Db-gpt Dbgpt | 6.5 | Jul 22 | SQL Injection in editor_sql_run and query_ex in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary SQL statements via crafted input passed to the… |
| CVE-2025-6772 | DB Db-gpt Dbgpt | 7.5 | Jun 27 | eosphoros-ai db-gpt import import_flow path traversal |
| CVE-2024-10830 | DB Db-gpt Dbgpt | 8.2 | Mar 20 | Path Traversal in eosphoros-ai/db-gpt |
| CVE-2024-10834 | DB Db-gpt Dbgpt | 9.1 | Mar 20 | Arbitrary File Write in eosphoros-ai/db-gpt |
| CVE-2024-10833 | DB Db-gpt Dbgpt | 9.1 | Mar 20 | Arbitrary File Write in eosphoros-ai/db-gpt |
| CVE-2024-10906 | DB Db-gpt Dbgpt | 8.1 | Mar 20 | Cross-Site Request Forgery (CSRF) in eosphoros-ai/db-gpt |
| CVE-2024-10829 | DB Db-gpt Dbgpt | 7.5 | Mar 20 | Denial of Service (DoS) via Multipart Boundary in eosphoros-ai/db-gpt |
| CVE-2024-10901 | DB Db-gpt Dbgpt | 9.8 | Mar 20 | Arbitrary File Write via DuckDB SQL Injection in eosphoros-ai/db-gpt |
| CVE-2024-10835 | DB Db-gpt Dbgpt | 9.8 | Mar 20 | Arbitrary File Write via SQL Injection in eosphoros-ai/db-gpt |
| CVE-2024-10902 | DB Db-gpt Dbgpt | 9.8 | Mar 20 | Arbitrary File Upload with Path Traversal in eosphoros-ai/db-gpt |
| CVE-2024-10831 | DB Db-gpt Dbgpt | 9.1 | Mar 20 | Arbitrary File Write through Absolute Path Traversal in eosphoros-ai/db-gpt |
| CVE-2025-0452 | DB Db-gpt Dbgpt | 8.2 | Mar 20 | Arbitrary File Deletion in eosphoros-ai/DB-GPT |