| Bug | bookworm | trixie | forky | sid | Description |
|---|
| CVE-2026-63771 | vulnerable | vulnerable (no DSA) | fixed | fixed | Adminer before 5.4.3 contains a cookie injection vulnerability that al ... |
| CVE-2026-56706 | vulnerable | vulnerable | fixed | fixed | Adminer before 5.4.3 uses a CSRF token scheme that transmits both the ... |
| CVE-2026-56705 | vulnerable | vulnerable | fixed | fixed | Adminer before 5.4.3 fails to sanitize the server field before constru ... |
| CVE-2026-56704 | vulnerable | vulnerable | fixed | fixed | Adminer before 5.4.3 inserts unsanitized database server version strin ... |
| CVE-2026-56703 | vulnerable | vulnerable | fixed | fixed | Adminer before 5.4.3 contains a remote code execution vulnerability in ... |
| CVE-2026-56702 | vulnerable | vulnerable | fixed | fixed | Adminer versions before 5.4.3 contain an unrestricted file upload vuln ... |
| CVE-2026-34968 | vulnerable | vulnerable | fixed | fixed | Adminer before 5.4.3 contains an arbitrary file deletion vulnerability ... |
| CVE-2026-34967 | vulnerable | vulnerable | fixed | fixed | Adminer versions 5.3.0 through 5.4.2 with the sql-log plugin enabled c ... |
| CVE-2026-34964 | vulnerable | vulnerable | fixed | fixed | Adminer before 5.5.0 contains a server-side request forgery vulnerabil ... |
| CVE-2026-34959 | vulnerable | vulnerable | fixed | fixed | Adminer 4.6.0 before 5.5.0 prepends the client-supplied X-Forwarded-Pr ... |
| CVE-2026-16434 | vulnerable | vulnerable | fixed | fixed | Adminer 4.6.0 through 5.5.0 (fixed in 5.5.1) contains an incomplete fi ... |
| CVE-2026-15686 | vulnerable | vulnerable (no DSA) | fixed | fixed | Adminer multi_query Incorrect Check of Function Return Value Remote Co ... |
| CVE-2023-45196 | vulnerable (no DSA) | fixed | fixed | fixed | Adminer and AdminerEvo allow an unauthenticated remote attacker to cau ... |
| CVE-2023-45195 | vulnerable (no DSA) | fixed | fixed | fixed | Adminer and AdminerEvo are vulnerable to SSRF via database connection ... |