[ Vendor · 6 CVEs ]
vrana
CVEs affecting vrana published in the last 30 days, plus any vrana CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-109347 | 12 Oct 2026 | CVSS 7.2 | vrana adminerAdminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite users to bypass ATTACH and VACUUM INTO… | |
| CVE-2026-100695 | 26 Sep 2026 | CVSS 6.1 | vrana adminerAdminer before 6.0.2 contains a cross-site scripting vulnerability where the CONNECTION_ID() database result is interpolated into JavaScript without… | |
| CVE-2026-100696 | 26 Sep 2026 | CVSS 5.8 | vrana adminerAdminer 4.16.0 through 6.0.1 contain a pre-authentication Server-Side Request Forgery (SSRF) vulnerability in the optional Elasticsearch driver… | |
| CVE-2026-100697 | 26 Sep 2026 | CVSS 8.6 | vrana adminerAdminer 6.0.0 through 6.0.1, when the official ClickHouse driver plugin (plugins/drivers/clickhouse.php, rewritten in 6.0.0) is loaded, is vulnerable… | |
| CVE-2026-100698 | 26 Sep 2026 | CVSS 5.8 | vrana adminerAdminer 5.5.1 through 6.0.1 improperly parses the login 'server' string in the host_port() function in adminer/include/functions.inc.php. The port… | |
| CVE-2021-21311 | 11 Feb 2021 | CVSS 7.2 | Adminer Server-Side Request ForgeryAdminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request… | ExploitedFix |