VulDB GitHub Commit Analyzer

507 credited records · 12 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Credited records

Researchers

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2026-14637No exploit	kirilkirkov Ecommerce-CodeIgniter-Bootstrap ShoppingCart.php getCartItems deserializationkirilkirkov · ecommerce-codeigniter-bootstrap · CWE-20 Pre-auth Deserialization	High7.8	—	0.8%	Jul 4, 2026
21Monitor	CVE-2026-14636No exploit	kirilkirkov Ecommerce-CodeIgniter-Bootstrap Vendor Image Manager AddProduct.php do_upload_others_images path traversalkirilkirkov · ecommerce-codeigniter-bootstrap · CWE-22 Path traversal	Medium5.3	—	0.5%	Jul 4, 2026
22Monitor	CVE-2026-14635No exploit	kirilkirkov Ecommerce-CodeIgniter-Bootstrap Vendor Multi-Image Endpoint AddProduct.php path traversalkirilkirkov · ecommerce-codeigniter-bootstrap · CWE-22 Pre-auth Path traversal	Medium5.5	—	0.6%	Jul 4, 2026
8Monitor	CVE-2026-14634No exploit	kirilkirkov Ecommerce-CodeIgniter-Bootstrap Subscribed Emails Admin MY_Controller.php checkForPostRequests cross site scriptingkirilkirkov · ecommerce-codeigniter-bootstrap · CWE-79 Pre-auth XSS	Low2.1	—	0.5%	Jul 4, 2026
8Monitor	CVE-2026-14633No exploit	kirilkirkov Ecommerce-CodeIgniter-Bootstrap Hidden REST API Endpoint set cross site scriptingkirilkirkov · ecommerce-codeigniter-bootstrap · CWE-79 Pre-auth XSS	Low2.1	—	0.5%	Jul 4, 2026
8Monitor	CVE-2026-14632No exploit	kirilkirkov Ecommerce-CodeIgniter-Bootstrap Trusted Backend MY_Controller.php setReferrer redirectkirilkirkov · ecommerce-codeigniter-bootstrap · CWE-601 Pre-auth Open redirect	Low2.1	—	0.5%	Jul 4, 2026
8Monitor	CVE-2026-5328No exploit	shsuishang modulithshop ProductItemDao ProductIndexServiceImpl.java listItem sql injectionshsuishang · modulithshop · CWE-74 SQL injection	Low2.1	—	0.3%	Apr 2, 2026
21Monitor	CVE-2026-3977No exploit	projectsend AJAX Endpoints authorizationCWE-862 Broken access control (IDOR)	Medium5.3	—	0.4%	Mar 12, 2026
19Monitor	CVE-2023-7333No exploit	bluelabsio records-mover Table Object sql injectionbluelabsio · records-mover · CWE-74 SQL injection	Medium4.8	—	0.2%	Jan 7, 2026
9Monitor	CVE-2024-14020No exploit	carboneio carbone Formatter input.js prototype pollutioncarboneio · carbone · CWE-94 RCE Prototype pollution	Low2.3	—	0.3%	Jan 7, 2026
20Monitor	CVE-2023-7331No exploit	PKrystian Full-Stack-Bank User sql injectionpkrystian · full-stack-bank · CWE-74 SQL injection	Medium5.1	—	0.2%	Dec 31, 2025
20Monitor	CVE-2019-25262No exploit	elinicksic Razgover Chat Message send.php cross site scriptingelinicksic · razgover · CWE-79 XSS	Medium5.1	—	0.3%	Dec 31, 2025
22Monitor	CVE-2025-7107No exploit	SimStudioAI sim route.ts handleLocalFile path traversalsim · sim · CWE-22 Pre-auth Path traversal	Medium5.5	—	0.9%	Jul 6, 2025
8Monitor	CVE-2025-6466No exploit	ageerle ruoyi-ai SseServiceImpl.java upload unrestricted uploadageerle · ruoyi-ai · CWE-284 File upload Broken access control (IDOR)	Low2.1	—	0.4%	Jun 22, 2025
20Monitor	CVE-2025-6283No exploit	xataio Xata Agent route.ts GET path traversalxata · agent · CWE-22 Path traversal	Medium5.1	—	0.7%	Jun 19, 2025
20Monitor	CVE-2025-6166No exploit	frdel Agent-Zero image_get.py image_get path traversalagent-zero · agent-zero · CWE-22 Path traversal	Medium5.1	—	0.6%	Jun 17, 2025
21Monitor	CVE-2025-6152No exploit	Steel Browser files.routes.ts handleFileUpload path traversalsteel · browser · CWE-22 Path traversal	Medium5.3	—	0.6%	Jun 16, 2025
27Monitor	CVE-2017-20197No exploit	propanetank Roommate-Bill-Tracking login.php sql injectionpropanetank · roommate-bill-tracking · CWE-74 Pre-auth SQL injection	Medium6.9	—	0.4%	Apr 9, 2025
27Monitor	CVE-2025-3202No exploit	ageerle ruoyi-ai SysNoticeController.java improper authorizationageerle · ruoyi-ai · CWE-266 Pre-auth	Medium6.9	—	0.5%	Apr 3, 2025
27Monitor	CVE-2025-3199No exploit	ageerle ruoyi-ai API Interface SysModelController.java improper authorizationpandarobot · ruoyi ai · CWE-266 Pre-auth	Medium6.9	—	0.6%	Apr 3, 2025
21Monitor	CVE-2018-25106No exploit	webuidesigning NebulaX Theme Legacy.php nebula_send_to_hubspot sql injectionwebuidesigning · nebulax theme · CWE-74 SQL injection	Medium5.3	—	0.4%	Dec 23, 2024
21Monitor	CVE-2024-12895No exploit	TreasureHuntGame TreasureHunt checkflag.php console_log sql injectiontreasurehuntgame · treasurehunt · CWE-74 SQL injection	Medium5.3	—	0.6%	Dec 22, 2024
21Monitor	CVE-2024-12894No exploit	TreasureHuntGame TreasureHunt acesso.php sql injectiontreasurehuntgame · treasurehunt · CWE-74 SQL injection	Medium5.3	—	0.6%	Dec 22, 2024
20Monitor	CVE-2017-20195No exploit	LUNAD3v AreaLoad request.php sql injectionlunad3v · areaload · CWE-89 SQL injection	Medium5.1	—	0.3%	Oct 29, 2024
21Monitor	CVE-2018-25104No exploit	CoinGate Plugin Payment callback.php postProcess logic errorCWE-840	Medium5.3	—	0.4%	Oct 17, 2024

CVE-2026-14637
31Monitor
kirilkirkov Ecommerce-CodeIgniter-Bootstrap ShoppingCart.php getCartItems deserialization
HighCVSS 7.8No exploitEPSS 1%
- Pre-auth
- Deserialization
kirilkirkov · ecommerce-codeigniter-bootstrapJul 4, 2026
CVE-2026-14636
21Monitor
kirilkirkov Ecommerce-CodeIgniter-Bootstrap Vendor Image Manager AddProduct.php do_upload_others_images path traversal
MediumCVSS 5.3No exploitEPSS 0%
- Path traversal
kirilkirkov · ecommerce-codeigniter-bootstrapJul 4, 2026
CVE-2026-14635
22Monitor
kirilkirkov Ecommerce-CodeIgniter-Bootstrap Vendor Multi-Image Endpoint AddProduct.php path traversal
MediumCVSS 5.5No exploitEPSS 1%
- Pre-auth
- Path traversal
kirilkirkov · ecommerce-codeigniter-bootstrapJul 4, 2026
CVE-2026-14634
8Monitor
kirilkirkov Ecommerce-CodeIgniter-Bootstrap Subscribed Emails Admin MY_Controller.php checkForPostRequests cross site scripting
LowCVSS 2.1No exploitEPSS 0%
- Pre-auth
- XSS
kirilkirkov · ecommerce-codeigniter-bootstrapJul 4, 2026
CVE-2026-14633
8Monitor
kirilkirkov Ecommerce-CodeIgniter-Bootstrap Hidden REST API Endpoint set cross site scripting
LowCVSS 2.1No exploitEPSS 0%
- Pre-auth
- XSS
kirilkirkov · ecommerce-codeigniter-bootstrapJul 4, 2026
CVE-2026-14632
8Monitor
kirilkirkov Ecommerce-CodeIgniter-Bootstrap Trusted Backend MY_Controller.php setReferrer redirect
LowCVSS 2.1No exploitEPSS 0%
- Pre-auth
- Open redirect
kirilkirkov · ecommerce-codeigniter-bootstrapJul 4, 2026
CVE-2026-5328
8Monitor
shsuishang modulithshop ProductItemDao ProductIndexServiceImpl.java listItem sql injection
LowCVSS 2.1No exploitEPSS 0%
- SQL injection
shsuishang · modulithshopApr 2, 2026
CVE-2026-3977
21Monitor
projectsend AJAX Endpoints authorization
MediumCVSS 5.3No exploitEPSS 0%
- Broken access control (IDOR)
Mar 12, 2026
CVE-2023-7333
19Monitor
bluelabsio records-mover Table Object sql injection
MediumCVSS 4.8No exploitEPSS 0%
- SQL injection
bluelabsio · records-moverJan 7, 2026
CVE-2024-14020
9Monitor
carboneio carbone Formatter input.js prototype pollution
LowCVSS 2.3No exploitEPSS 0%
- RCE
- Prototype pollution
carboneio · carboneJan 7, 2026
CVE-2023-7331
20Monitor
PKrystian Full-Stack-Bank User sql injection
MediumCVSS 5.1No exploitEPSS 0%
- SQL injection
pkrystian · full-stack-bankDec 31, 2025
CVE-2019-25262
20Monitor
elinicksic Razgover Chat Message send.php cross site scripting
MediumCVSS 5.1No exploitEPSS 0%
- XSS
elinicksic · razgoverDec 31, 2025
CVE-2025-7107
22Monitor
SimStudioAI sim route.ts handleLocalFile path traversal
MediumCVSS 5.5No exploitEPSS 1%
- Pre-auth
- Path traversal
sim · simJul 6, 2025
CVE-2025-6466
8Monitor
ageerle ruoyi-ai SseServiceImpl.java upload unrestricted upload
LowCVSS 2.1No exploitEPSS 0%
- File upload
- Broken access control (IDOR)
ageerle · ruoyi-aiJun 22, 2025
CVE-2025-6283
20Monitor
xataio Xata Agent route.ts GET path traversal
MediumCVSS 5.1No exploitEPSS 1%
- Path traversal
xata · agentJun 19, 2025
CVE-2025-6166
20Monitor
frdel Agent-Zero image_get.py image_get path traversal
MediumCVSS 5.1No exploitEPSS 1%
- Path traversal
agent-zero · agent-zeroJun 17, 2025
CVE-2025-6152
21Monitor
Steel Browser files.routes.ts handleFileUpload path traversal
MediumCVSS 5.3No exploitEPSS 1%
- Path traversal
steel · browserJun 16, 2025
CVE-2017-20197
27Monitor
propanetank Roommate-Bill-Tracking login.php sql injection
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
- SQL injection
propanetank · roommate-bill-trackingApr 9, 2025
CVE-2025-3202
27Monitor
ageerle ruoyi-ai SysNoticeController.java improper authorization
MediumCVSS 6.9No exploitEPSS 1%
- Pre-auth
ageerle · ruoyi-aiApr 3, 2025
CVE-2025-3199
27Monitor
ageerle ruoyi-ai API Interface SysModelController.java improper authorization
MediumCVSS 6.9No exploitEPSS 1%
- Pre-auth
pandarobot · ruoyi aiApr 3, 2025
CVE-2018-25106
21Monitor
webuidesigning NebulaX Theme Legacy.php nebula_send_to_hubspot sql injection
MediumCVSS 5.3No exploitEPSS 0%
- SQL injection
webuidesigning · nebulax themeDec 23, 2024
CVE-2024-12895
21Monitor
TreasureHuntGame TreasureHunt checkflag.php console_log sql injection
MediumCVSS 5.3No exploitEPSS 1%
- SQL injection
treasurehuntgame · treasurehuntDec 22, 2024
CVE-2024-12894
21Monitor
TreasureHuntGame TreasureHunt acesso.php sql injection
MediumCVSS 5.3No exploitEPSS 1%
- SQL injection
treasurehuntgame · treasurehuntDec 22, 2024
CVE-2017-20195
20Monitor
LUNAD3v AreaLoad request.php sql injection
MediumCVSS 5.1No exploitEPSS 0%
- SQL injection
lunad3v · arealoadOct 29, 2024
CVE-2018-25104
21Monitor
CoinGate Plugin Payment callback.php postProcess logic error
MediumCVSS 5.3No exploitEPSS 0%
Oct 17, 2024