Skip to content
Noroxi

VulDB GitHub Commit Analyzer

508 credited records · 13 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for VulDB GitHub Commit Analyzer

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Credited records

Researchers
  • CVE-2021-4297
    39Monitor

    trampgeek jobe Restapi.php runs_post Privilege Escalation

    CriticalCVSS 9.8No exploitEPSS 0%

    jobe project · jobeJan 1, 2023

  • admont28 Ingnovarq insertarSliderAjax.php cross site scripting

    MediumCVSS 6.1No exploitEPSS 0%

    ingnovarq project · ingnovarqJan 1, 2023

  • Ziftr primecoin bitcoinrpc.cpp HTTPAuthorized timing discrepancy

    HighCVSS 7.5No exploitEPSS 0%

    ziftrshop · primecoinJan 1, 2023

  • SimpleSAMLphp simplesamlphp-module-openid OpenID consumer.php cross site scripting

    MediumCVSS 6.1No exploitEPSS 0%

    simplesamlphp · simplesamlphp-module-openidJan 1, 2023

  • Zenoss Dashboard defaultportlets.js cross site scripting

    MediumCVSS 6.1No exploitEPSS 0%

    zenoss · dashboardJan 1, 2023

  • flar2 ElementalX ipsec xfrm_user.c xfrm_dump_policy_done denial of service

    HighCVSS 7.5No exploitEPSS 0%

    elementalx · elementalxJan 1, 2023

  • taoeffect Empress hard-coded password

    CriticalCVSS 9.8No exploitEPSS 0%

    empress project · empressJan 1, 2023

  • A vulnerability was found in rgb2hex up to 0.1.5.

    HighCVSS 7.5No exploitEPSS 1%

    rgb2hex project · rgb2hexDec 31, 2022

  • flitto express-param fetchParams.js parameter pollution

    CriticalCVSS 9.8No exploitEPSS 0%

    flitto · express-paramDec 31, 2022

  • valtech IDP Test Client main.py cross-site request forgery

    HighCVSS 8.8No exploitEPSS 0%

    valtech · idp test clientsDec 31, 2022

  • Yuna Scatari TBDev usersearch.php get_user_icons cross site scripting

    MediumCVSS 6.1No exploitEPSS 0%

    tbdev project · tbdevDec 31, 2022

  • rf Keynote rumble.rb cross site scripting

    MediumCVSS 6.1No exploitEPSS 0%

    keynote project · keynoteDec 31, 2022

  • vova07 Yii2 FileAPI Widget UploadAction.php run cross site scripting

    MediumCVSS 6.1No exploitEPSS 0%

    yii2 fileapi widget project · yii2 fileapi widgetDec 31, 2022

  • Ariadne Component Library Url.php server-side request forgery

    CriticalCVSS 9.8No exploitEPSS 0%

    ariadne-cms · ariadne component libraryDec 31, 2022

  • Exciting Printer Argument prepare_page.rb command injection

    CriticalCVSS 9.8No exploitEPSS 2%

    printer project · printerDec 31, 2022

  • Sterc Google Analytics Dashboard for MODX Internal Search widget.analytics.tpl cross site scripting

    MediumCVSS 6.1No exploitEPSS 0%

    sterc · google analytics dashboard for modxDec 30, 2022

  • ghostlander Phoenixcoin main.cpp accept denial of service

    HighCVSS 7.5No exploitEPSS 0%

    phoenixcoin project · phoenixcoinDec 30, 2022

  • CVE-2022-4860
    39Monitor

    KBase Metrics methods_upload_user_stats.py upload_user_data sql injection

    CriticalCVSS 9.8No exploitEPSS 0%

    kbase · metricsDec 30, 2022

  • CVE-2022-4859
    24Monitor

    Joget User Profile Menu UserProfileMenu.java submitForm cross site scripting

    MediumCVSS 6.1No exploitEPSS 0%

    joget · joget dxDec 30, 2022

  • Chris92de AdminServ adminserv.php cross site scripting

    MediumCVSS 6.1No exploitEPSS 0%

    adminserv project · adminservDec 30, 2022

  • Chris92de AdminServ adminserv.php cross site scripting

    MediumCVSS 6.1No exploitEPSS 0%

    adminserv project · adminservDec 30, 2022

  • Macaron csrf csrf.go missing secure attribute

    HighCVSS 7.5No exploitEPSS 0%

    go-macaron · csrfDec 30, 2022

  • aerouk imageserve cross site scripting

    MediumCVSS 6.1No exploitEPSS 0%

    imageserve project · imageserveDec 30, 2022

  • aerouk imageserve File viewer.php path traversal

    HighCVSS 7.5No exploitEPSS 0%

    imageserve project · imageserveDec 30, 2022

  • iText RUPS XfaFile.java xml external entity reference

    CriticalCVSS 9.8No exploitEPSS 0%

    itextpdf · rupsDec 30, 2022