Database Proxy
Approved changes feed: RSS · Atom
cpe:2.3:a:heimdall_data:database_proxy:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Heimdall Data (dea2ea1c-1f9a-55ab-926b-ac29c644645b) |
|---|---|
| Product | Database Proxy (fb7e0c6d-3cb2-5b6a-ad94-4beba36c6360) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-12357 |
vulnerable | 2026-09-16 04:32:51.606324 |
Heimdall Data Database Proxy generateFileContent CRLF Injection Remote Code Execution Vulnerability
HIGH (7.2)
Heimdall Data Database Proxy generateFileContent CRLF Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Heimdall Data Database Proxy. Authentication is required to exploit this vulnerability.
The specific flaw exists within the generateFileContent function. The issue results from the lack of proper neutralization of CRLF sequences. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-29251.
Published: 2026-07-29T19:04:58.457Z
Updated: 2026-07-29T19:35:52.202Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12486 |
vulnerable | 2026-06-08 07:04:30.314338 |
Heimdall Data Database Proxy Cross-Site Scripting Remote Code Execution Vulnerability
HIGH (8.8)
Heimdall Data Database Proxy Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Heimdall Data Database Proxy. Minimal user interaction is required to exploit this vulnerability.
The specific flaw exists within the handling of the database event logs. The issue results from the lack of proper validation of user-supplied data, which can lead to the injection of arbitrary script. An attacker can leverage this vulnerability to interact with the application in the context of the target user. Was ZDI-CAN-24755.
Published: 2025-11-06T20:12:54.400Z
Updated: 2025-11-06T20:26:19.171Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.