VulDB GitHub Commit Analyzer
508 credited records · 13 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2021-4297No exploit | trampgeek jobe Restapi.php runs_post Privilege Escalationjobe project · jobe · CWE-276 | Critical9.8 | — | 0.6% | Jan 1, 2023 |
24Monitor | CVE-2015-10006No exploit | admont28 Ingnovarq insertarSliderAjax.php cross site scriptingingnovarq project · ingnovarq · CWE-79 | Medium6.1 | — | 0.5% | Jan 1, 2023 |
30Monitor | CVE-2013-10006No exploit | Ziftr primecoin bitcoinrpc.cpp HTTPAuthorized timing discrepancyziftrshop · primecoin · CWE-208 | High7.5 | — | 0.7% | Jan 1, 2023 |
24Monitor | CVE-2010-10002No exploit | SimpleSAMLphp simplesamlphp-module-openid OpenID consumer.php cross site scriptingsimplesamlphp · simplesamlphp-module-openid · CWE-79 | Medium6.1 | — | 0.6% | Jan 1, 2023 |
24Monitor | CVE-2018-25063No exploit | Zenoss Dashboard defaultportlets.js cross site scriptingzenoss · dashboard · CWE-79 | Medium6.1 | — | 0.5% | Jan 1, 2023 |
30Monitor | CVE-2018-25062No exploit | flar2 ElementalX ipsec xfrm_user.c xfrm_dump_policy_done denial of serviceelementalx · elementalx · CWE-404 | High7.5 | — | 0.9% | Jan 1, 2023 |
39Monitor | CVE-2014-125030No exploit | taoeffect Empress hard-coded passwordempress project · empress · CWE-259 | Critical9.8 | — | 0.9% | Jan 1, 2023 |
30Monitor | CVE-2018-25061No exploit | A vulnerability was found in rgb2hex up to 0.1.5.rgb2hex project · rgb2hex · CWE-1333 | High7.5 | — | 1.0% | Dec 31, 2022 |
39Monitor | CVE-2017-20160No exploit | flitto express-param fetchParams.js parameter pollutionflitto · express-param · CWE-235 | Critical9.8 | — | 0.8% | Dec 31, 2022 |
35Monitor | CVE-2014-125028No exploit | valtech IDP Test Client main.py cross-site request forgeryvaltech · idp test clients · CWE-352 | High8.8 | — | 0.4% | Dec 31, 2022 |
24Monitor | CVE-2014-125027No exploit | Yuna Scatari TBDev usersearch.php get_user_icons cross site scriptingtbdev project · tbdev · CWE-79 | Medium6.1 | — | 0.5% | Dec 31, 2022 |
24Monitor | CVE-2017-20159No exploit | rf Keynote rumble.rb cross site scriptingkeynote project · keynote · CWE-79 | Medium6.1 | — | 0.7% | Dec 31, 2022 |
24Monitor | CVE-2017-20158No exploit | vova07 Yii2 FileAPI Widget UploadAction.php run cross site scriptingyii2 fileapi widget project · yii2 fileapi widget · CWE-79 | Medium6.1 | — | 0.5% | Dec 31, 2022 |
39Monitor | CVE-2017-20157No exploit | Ariadne Component Library Url.php server-side request forgeryariadne-cms · ariadne component library · CWE-918 | Critical9.8 | — | 0.7% | Dec 31, 2022 |
40Plan | CVE-2017-20156No exploit | Exciting Printer Argument prepare_page.rb command injectionprinter project · printer · CWE-77 | Critical9.8 | — | 2.0% | Dec 31, 2022 |
24Monitor | CVE-2017-20155No exploit | Sterc Google Analytics Dashboard for MODX Internal Search widget.analytics.tpl cross site scriptingsterc · google analytics dashboard for modx · CWE-79 | Medium6.1 | — | 0.6% | Dec 30, 2022 |
30Monitor | CVE-2017-20154No exploit | ghostlander Phoenixcoin main.cpp accept denial of servicephoenixcoin project · phoenixcoin · CWE-404 | High7.5 | — | 0.9% | Dec 30, 2022 |
39Monitor | CVE-2022-4860No exploit | KBase Metrics methods_upload_user_stats.py upload_user_data sql injectionkbase · metrics · CWE-89 | Critical9.8 | — | 0.6% | Dec 30, 2022 |
24Monitor | CVE-2022-4859No exploit | Joget User Profile Menu UserProfileMenu.java submitForm cross site scriptingjoget · joget dx · CWE-79 | Medium6.1 | — | 0.5% | Dec 30, 2022 |
24Monitor | CVE-2020-36638No exploit | Chris92de AdminServ adminserv.php cross site scriptingadminserv project · adminserv · CWE-79 | Medium6.1 | — | 0.5% | Dec 30, 2022 |
24Monitor | CVE-2020-36637No exploit | Chris92de AdminServ adminserv.php cross site scriptingadminserv project · adminserv · CWE-79 | Medium6.1 | — | 0.5% | Dec 30, 2022 |
30Monitor | CVE-2018-25060No exploit | Macaron csrf csrf.go missing secure attributego-macaron · csrf · CWE-614 | High7.5 | — | 0.5% | Dec 30, 2022 |
24Monitor | CVE-2017-20153No exploit | aerouk imageserve cross site scriptingimageserve project · imageserve · CWE-79 | Medium6.1 | — | 0.6% | Dec 30, 2022 |
30Monitor | CVE-2017-20152No exploit | aerouk imageserve File viewer.php path traversalimageserve project · imageserve · CWE-22 | High7.5 | — | 0.9% | Dec 30, 2022 |
39Monitor | CVE-2017-20151No exploit | iText RUPS XfaFile.java xml external entity referenceitextpdf · rups · CWE-611 | Critical9.8 | — | 0.8% | Dec 30, 2022 |
- CVE-2021-429739Monitor
trampgeek jobe Restapi.php runs_post Privilege Escalation
CriticalCVSS 9.8No exploitEPSS 0%jobe project · jobeJan 1, 2023
- CVE-2015-1000624Monitor
admont28 Ingnovarq insertarSliderAjax.php cross site scripting
MediumCVSS 6.1No exploitEPSS 0%ingnovarq project · ingnovarqJan 1, 2023
- CVE-2013-1000630Monitor
Ziftr primecoin bitcoinrpc.cpp HTTPAuthorized timing discrepancy
HighCVSS 7.5No exploitEPSS 0%ziftrshop · primecoinJan 1, 2023
- CVE-2010-1000224Monitor
SimpleSAMLphp simplesamlphp-module-openid OpenID consumer.php cross site scripting
MediumCVSS 6.1No exploitEPSS 0%simplesamlphp · simplesamlphp-module-openidJan 1, 2023
- CVE-2018-2506324Monitor
Zenoss Dashboard defaultportlets.js cross site scripting
MediumCVSS 6.1No exploitEPSS 0%zenoss · dashboardJan 1, 2023
- CVE-2018-2506230Monitor
flar2 ElementalX ipsec xfrm_user.c xfrm_dump_policy_done denial of service
HighCVSS 7.5No exploitEPSS 0%elementalx · elementalxJan 1, 2023
- CVE-2014-12503039Monitor
taoeffect Empress hard-coded password
CriticalCVSS 9.8No exploitEPSS 0%empress project · empressJan 1, 2023
- CVE-2018-2506130Monitor
A vulnerability was found in rgb2hex up to 0.1.5.
HighCVSS 7.5No exploitEPSS 1%rgb2hex project · rgb2hexDec 31, 2022
- CVE-2017-2016039Monitor
flitto express-param fetchParams.js parameter pollution
CriticalCVSS 9.8No exploitEPSS 0%flitto · express-paramDec 31, 2022
- CVE-2014-12502835Monitor
valtech IDP Test Client main.py cross-site request forgery
HighCVSS 8.8No exploitEPSS 0%valtech · idp test clientsDec 31, 2022
- CVE-2014-12502724Monitor
Yuna Scatari TBDev usersearch.php get_user_icons cross site scripting
MediumCVSS 6.1No exploitEPSS 0%tbdev project · tbdevDec 31, 2022
- CVE-2017-2015924Monitor
rf Keynote rumble.rb cross site scripting
MediumCVSS 6.1No exploitEPSS 0%keynote project · keynoteDec 31, 2022
- CVE-2017-2015824Monitor
vova07 Yii2 FileAPI Widget UploadAction.php run cross site scripting
MediumCVSS 6.1No exploitEPSS 0%yii2 fileapi widget project · yii2 fileapi widgetDec 31, 2022
- CVE-2017-2015739Monitor
Ariadne Component Library Url.php server-side request forgery
CriticalCVSS 9.8No exploitEPSS 0%ariadne-cms · ariadne component libraryDec 31, 2022
- CVE-2017-2015640Plan
Exciting Printer Argument prepare_page.rb command injection
CriticalCVSS 9.8No exploitEPSS 2%printer project · printerDec 31, 2022
- CVE-2017-2015524Monitor
Sterc Google Analytics Dashboard for MODX Internal Search widget.analytics.tpl cross site scripting
MediumCVSS 6.1No exploitEPSS 0%sterc · google analytics dashboard for modxDec 30, 2022
- CVE-2017-2015430Monitor
ghostlander Phoenixcoin main.cpp accept denial of service
HighCVSS 7.5No exploitEPSS 0%phoenixcoin project · phoenixcoinDec 30, 2022
- CVE-2022-486039Monitor
KBase Metrics methods_upload_user_stats.py upload_user_data sql injection
CriticalCVSS 9.8No exploitEPSS 0%kbase · metricsDec 30, 2022
- CVE-2022-485924Monitor
Joget User Profile Menu UserProfileMenu.java submitForm cross site scripting
MediumCVSS 6.1No exploitEPSS 0%joget · joget dxDec 30, 2022
- CVE-2020-3663824Monitor
Chris92de AdminServ adminserv.php cross site scripting
MediumCVSS 6.1No exploitEPSS 0%adminserv project · adminservDec 30, 2022
- CVE-2020-3663724Monitor
Chris92de AdminServ adminserv.php cross site scripting
MediumCVSS 6.1No exploitEPSS 0%adminserv project · adminservDec 30, 2022
- CVE-2018-2506030Monitor
Macaron csrf csrf.go missing secure attribute
HighCVSS 7.5No exploitEPSS 0%go-macaron · csrfDec 30, 2022
- CVE-2017-2015324Monitor
aerouk imageserve cross site scripting
MediumCVSS 6.1No exploitEPSS 0%imageserve project · imageserveDec 30, 2022
- CVE-2017-2015230Monitor
aerouk imageserve File viewer.php path traversal
HighCVSS 7.5No exploitEPSS 0%imageserve project · imageserveDec 30, 2022
- CVE-2017-2015139Monitor
iText RUPS XfaFile.java xml external entity reference
CriticalCVSS 9.8No exploitEPSS 0%itextpdf · rupsDec 30, 2022