VulDB GitHub Commit Analyzer

508 credited records · 13 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Credited records

Researchers

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
21Monitor	CVE-2018-25104No exploit	CoinGate Plugin Payment callback.php postProcess logic errorCWE-840	Medium5.3	—	0.4%	Oct 17, 2024
8Monitor	CVE-2023-7279No exploit	Secure Systems Engineering Connaisseur Delegation Name targets_schema.json redossecuresystems · connaisseur · CWE-1333 Denial of service	Low2.1	—	0.5%	Sep 2, 2024
21Monitor	CVE-2020-36830No exploit	nescalante urlregex Backtracking index.js redosnescalante · urlregex · CWE-1333 Denial of service	Medium5.3	—	0.8%	Sep 2, 2024
21Monitor	CVE-2016-15039No exploit	mhuertos phpLDAPadmin ajax_functions.js makeHttpRequest request smugglingmhuertos · phpldapadmin · CWE-444	Medium5.3	—	0.4%	Jul 10, 2024
19Monitor	CVE-2022-4969No exploit	bwoodsend rockhopper Binary Parser ragged_array.c count_rows buffer overflowbwoodsend · rockhopper · CWE-120 Memory safety	Medium4.8	—	0.2%	May 27, 2024
25Monitor	CVE-2023-1000No exploit	cyanomiko dcnnt-py Notification notifications.py main command injectioncyanomiko · dcnnt-py · CWE-77 RCE Command injection	Medium6.3	—	1.3%	Apr 27, 2024
14Monitor	CVE-2018-25101No exploit	l2c2technologies Koha opac-MARCdetail.pl cross site scriptingl2c2technologies · koha · CWE-79 XSS	Low3.5	—	0.5%	Apr 21, 2024
14Monitor	CVE-2015-10132No exploit	Thimo Grauerholz WP-Spreadplugin spreadplugin.php cross site scriptingthimo grauerholz · wp-spreadplugin · CWE-79 XSS	Low3.5	—	0.5%	Apr 21, 2024
14Monitor	CVE-2014-125111No exploit	namithjawahar Wp-Insert cross site scriptingnamithjawahar · wp-insert · CWE-79 XSS	Low3.5	—	0.4%	Apr 8, 2024
24Monitor	CVE-2011-10006No exploit	GamerZ WP-PostRatings wp-postratings.php cross site scriptinglesterchan · wp-postratings · CWE-79 Pre-auth XSS	Medium6.1	—	0.4%	Apr 8, 2024
21Monitor	CVE-2021-4438No exploit	kyivstarteam react-native-sms-user-consent SmsUserConsentModule.kt registerReceiver improper export of android application componentskyivstar · react native sms user consent · CWE-926	Medium5.3	—	0.3%	Apr 7, 2024
14Monitor	CVE-2022-4966No exploit	sequentech admin-console Election Description cross site scriptingsequentech · admin-console · CWE-79 XSS	Low3.5	—	0.5%	Apr 1, 2024
14Monitor	CVE-2014-125110No exploit	wp-file-upload Plugin wfu_ajaxactions.php wfu_ajax_action_callback cross site scriptingCWE-79 XSS	Low3.5	—	0.5%	Mar 31, 2024
14Monitor	CVE-2020-36828No exploit	DiscuzX install_function.php show_next_step cross site scriptingCWE-79 XSS	Low3.5	—	0.5%	Mar 31, 2024
14Monitor	CVE-2017-20191No exploit	Zimbra zm-admin-ajax Form Textbox Field Error XFormItem.js XFormItem.prototype.setError cross site scriptingzimbra · zm-admin-ajax · CWE-79 XSS	Low3.5	—	0.5%	Mar 31, 2024
14Monitor	CVE-2015-10131No exploit	chrisy TFO Graphviz Plugin tfo-graphviz-admin.php admin_page cross site scriptingchrisy · tfo graphviz plugin · CWE-79 XSS	Low3.5	—	0.5%	Mar 31, 2024
21Monitor	CVE-2024-3081No exploit	EasyCorp EasyAdmin Autocomplete autocomplete.js cross site scriptingeasycorp · easyadmin · CWE-79 XSS	Medium5.4	—	0.5%	Mar 29, 2024
39Monitor	CVE-2024-3078No exploit	Qdrant Full Snapshot REST API snapshots.rs path traversalqdrant · qdrant · CWE-22 Pre-auth Path traversal	Critical9.8	—	0.9%	Mar 29, 2024
14Monitor	CVE-2020-36826No exploit	AwesomestCode LiveBot parseMessage.js parseSend cross site scriptingawesomestcode · livebot · CWE-79 XSS	Low3.5	—	0.4%	Mar 25, 2024
21Monitor	CVE-2020-36825No exploit	cyberaz0r WebRAT api.php download_file unrestricted uploadcyberaz0r · webrat · CWE-434 File upload	Medium5.3	—	0.5%	Mar 24, 2024
39Monitor	CVE-2022-4963No exploit	Folio Spring Module Core Schema Name HibernateSchemaService.java dropSchema sql injectionfolio · spring module core · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.6%	Mar 20, 2024
26Monitor	CVE-2021-4437No exploit	dbartholomae lambda-middleware frameguard JSON Mime-Type JsonDeserializer.ts redosdbartholomae · lambda-middleware · CWE-1333 Pre-auth Deserialization Denial of service	Medium6.5	—	0.4%	Feb 12, 2024
14Monitor	CVE-2024-1433No exploit	KDE Plasma Workspace Theme File eventpluginsmanager.cpp enabledPlugins path traversalkde · plasma-workspace · CWE-22 Pre-auth Path traversal	Low3.7	—	0.8%	Feb 11, 2024
30Monitor	CVE-2018-25098No exploit	blockmason credit-protocol UCAC CreditProtocol.sol executeUcacTx denial of serviceblockmason · credit-protocol · CWE-404 Pre-auth Denial of service	High7.5	—	0.9%	Feb 4, 2024
39Monitor	CVE-2019-25159No exploit	mpedraza2020 Intranet del Monterroso cargos.php sql injectionmpedraza2020 · intranet del monterroso · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.5%	Feb 4, 2024

CVE-2018-25104
21Monitor
CoinGate Plugin Payment callback.php postProcess logic error
MediumCVSS 5.3No exploitEPSS 0%
Oct 17, 2024
CVE-2023-7279
8Monitor
Secure Systems Engineering Connaisseur Delegation Name targets_schema.json redos
LowCVSS 2.1No exploitEPSS 1%
- Denial of service
securesystems · connaisseurSep 2, 2024
CVE-2020-36830
21Monitor
nescalante urlregex Backtracking index.js redos
MediumCVSS 5.3No exploitEPSS 1%
- Denial of service
nescalante · urlregexSep 2, 2024
CVE-2016-15039
21Monitor
mhuertos phpLDAPadmin ajax_functions.js makeHttpRequest request smuggling
MediumCVSS 5.3No exploitEPSS 0%
mhuertos · phpldapadminJul 10, 2024
CVE-2022-4969
19Monitor
bwoodsend rockhopper Binary Parser ragged_array.c count_rows buffer overflow
MediumCVSS 4.8No exploitEPSS 0%
- Memory safety
bwoodsend · rockhopperMay 27, 2024
CVE-2023-1000
25Monitor
cyanomiko dcnnt-py Notification notifications.py main command injection
MediumCVSS 6.3No exploitEPSS 1%
- RCE
- Command injection
cyanomiko · dcnnt-pyApr 27, 2024
CVE-2018-25101
14Monitor
l2c2technologies Koha opac-MARCdetail.pl cross site scripting
LowCVSS 3.5No exploitEPSS 0%
- XSS
l2c2technologies · kohaApr 21, 2024
CVE-2015-10132
14Monitor
Thimo Grauerholz WP-Spreadplugin spreadplugin.php cross site scripting
LowCVSS 3.5No exploitEPSS 0%
- XSS
thimo grauerholz · wp-spreadpluginApr 21, 2024
CVE-2014-125111
14Monitor
namithjawahar Wp-Insert cross site scripting
LowCVSS 3.5No exploitEPSS 0%
- XSS
namithjawahar · wp-insertApr 8, 2024
CVE-2011-10006
24Monitor
GamerZ WP-PostRatings wp-postratings.php cross site scripting
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
lesterchan · wp-postratingsApr 8, 2024
CVE-2021-4438
21Monitor
kyivstarteam react-native-sms-user-consent SmsUserConsentModule.kt registerReceiver improper export of android application components
MediumCVSS 5.3No exploitEPSS 0%
kyivstar · react native sms user consentApr 7, 2024
CVE-2022-4966
14Monitor
sequentech admin-console Election Description cross site scripting
LowCVSS 3.5No exploitEPSS 0%
- XSS
sequentech · admin-consoleApr 1, 2024
CVE-2014-125110
14Monitor
wp-file-upload Plugin wfu_ajaxactions.php wfu_ajax_action_callback cross site scripting
LowCVSS 3.5No exploitEPSS 0%
- XSS
Mar 31, 2024
CVE-2020-36828
14Monitor
DiscuzX install_function.php show_next_step cross site scripting
LowCVSS 3.5No exploitEPSS 0%
- XSS
Mar 31, 2024
CVE-2017-20191
14Monitor
Zimbra zm-admin-ajax Form Textbox Field Error XFormItem.js XFormItem.prototype.setError cross site scripting
LowCVSS 3.5No exploitEPSS 0%
- XSS
zimbra · zm-admin-ajaxMar 31, 2024
CVE-2015-10131
14Monitor
chrisy TFO Graphviz Plugin tfo-graphviz-admin.php admin_page cross site scripting
LowCVSS 3.5No exploitEPSS 0%
- XSS
chrisy · tfo graphviz pluginMar 31, 2024
CVE-2024-3081
21Monitor
EasyCorp EasyAdmin Autocomplete autocomplete.js cross site scripting
MediumCVSS 5.4No exploitEPSS 1%
- XSS
easycorp · easyadminMar 29, 2024
CVE-2024-3078
39Monitor
Qdrant Full Snapshot REST API snapshots.rs path traversal
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Path traversal
qdrant · qdrantMar 29, 2024
CVE-2020-36826
14Monitor
AwesomestCode LiveBot parseMessage.js parseSend cross site scripting
LowCVSS 3.5No exploitEPSS 0%
- XSS
awesomestcode · livebotMar 25, 2024
CVE-2020-36825
21Monitor
cyberaz0r WebRAT api.php download_file unrestricted upload
MediumCVSS 5.3No exploitEPSS 0%
- File upload
cyberaz0r · webratMar 24, 2024
CVE-2022-4963
39Monitor
Folio Spring Module Core Schema Name HibernateSchemaService.java dropSchema sql injection
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
folio · spring module coreMar 20, 2024
CVE-2021-4437
26Monitor
dbartholomae lambda-middleware frameguard JSON Mime-Type JsonDeserializer.ts redos
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- Deserialization
- Denial of service
dbartholomae · lambda-middlewareFeb 12, 2024
CVE-2024-1433
14Monitor
KDE Plasma Workspace Theme File eventpluginsmanager.cpp enabledPlugins path traversal
LowCVSS 3.7No exploitEPSS 1%
- Pre-auth
- Path traversal
kde · plasma-workspaceFeb 11, 2024
CVE-2018-25098
30Monitor
blockmason credit-protocol UCAC CreditProtocol.sol executeUcacTx denial of service
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
blockmason · credit-protocolFeb 4, 2024
CVE-2019-25159
39Monitor
mpedraza2020 Intranet del Monterroso cargos.php sql injection
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
mpedraza2020 · intranet del monterrosoFeb 4, 2024