VulDB GitHub Commit Analyzer

508 credited records · 13 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Credited records

Researchers

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
23Monitor	CVE-2015-10129No exploit	planet-freo auth.inc.php comparisonsamwilson · planet-freo · CWE-697 Pre-auth	Medium5.9	—	0.6%	Feb 4, 2024
24Monitor	CVE-2016-15037No exploit	go4rayyan Scumblr Task cross site scriptinggo4rayyan · scumblr · CWE-79 Pre-auth XSS	Medium6.1	—	0.5%	Jan 21, 2024
24Monitor	CVE-2018-25097No exploit	Acumos Design Studio cross site scriptingacumos · design studio · CWE-79 Pre-auth XSS	Medium6.1	—	0.4%	Jan 2, 2024
18Monitor	CVE-2017-20188No exploit	Zimbra zm-ajax XFormItem.js XFormItem.prototype.setError cross site scriptingzimbra · zm-ajax · CWE-79 Pre-auth XSS	Medium4.7	—	0.3%	Jan 2, 2024
24Monitor	CVE-2015-10128No exploit	rt-prettyphoto Plugin rt-prettyphoto.php royal_prettyphoto_plugin_links cross site scriptingroyaltechbd · royal prettyphoto · CWE-79 Pre-auth XSS	Medium6.1	—	0.4%	Jan 2, 2024
35Monitor	CVE-2018-25096No exploit	MdAlAmin-aol Own Health Record logout.php cross-site request forgerypetrk94 · ownhealthrecord · CWE-352 Pre-auth CSRF	High8.8	—	0.3%	Dec 30, 2023
24Monitor	CVE-2015-10127No exploit	PlusCaptcha Plugin cross site scriptingbestwebsoft · pluscaptcha · CWE-79 Pre-auth XSS	Medium6.1	—	0.4%	Dec 26, 2023
24Monitor	CVE-2014-125109No exploit	BestWebSoft Portfolio Plugin bws_menu.php bws_add_menu_render cross site scriptingbestwebsoft · portfolio · CWE-79 Pre-auth XSS	Medium6.1	—	0.4%	Dec 26, 2023
35Monitor	CVE-2012-10017No exploit	BestWebSoft Portfolio Plugin cross-site request forgerybestwebsoft · portfolio · CWE-352 Pre-auth CSRF	High8.8	—	0.3%	Dec 26, 2023
30Monitor	CVE-2016-15036No exploit	Deis Workflow Manager race conditiondeis · workflow manager · CWE-362 Pre-auth Race condition	High7.5	—	0.3%	Dec 23, 2023
24Monitor	CVE-2014-125108No exploit	w3c online-spellchecker-py spellchecker cross site scriptingw3 · spell checker · CWE-79 Pre-auth XSS	Medium6.1	—	0.4%	Dec 23, 2023
24Monitor	CVE-2023-7076No exploit	slawkens MyAAC bugtracker.php cross site scriptingmy-aac · myaac · CWE-79 Pre-auth XSS	Medium6.1	—	0.4%	Dec 22, 2023
40Plan	CVE-2019-25158No exploit	pedroetb tts-api app.js onSpeechDone os command injectionpedroetb · tts-api · CWE-78 pre-auth RCE Command injection	Critical9.8	—	2.1%	Dec 19, 2023
21Monitor	CVE-2014-125107No exploit	Corveda PHPSandbox String protection mechanismcorveda · phpsandbox · CWE-693 Pre-auth	Medium5.3	—	0.7%	Dec 18, 2023
23Monitor	CVE-2023-6908No exploit	DFIRKuiper TAR Archive case_management.py unzip_file path traversaldfirkuiper · kuiper · CWE-22 Pre-auth Path traversal	Medium5.9	—	0.7%	Dec 18, 2023
24Monitor	CVE-2022-4957No exploit	librespeed speedtest stats.php cross site scriptinglibrespeed · speedtest · CWE-79 Pre-auth XSS	Medium6.1	—	0.5%	Dec 3, 2023
39Monitor	CVE-2020-36768No exploit	rl-institut NESP2 database.py sql injectionreiner-lemoine-institut · nesp2 · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.7%	Dec 3, 2023
30Monitor	CVE-2018-25094No exploit	ระบบบัญชีออนไลน์ Online Accounting System image.php path traversalkotchasan · online accounting system · CWE-24 Pre-auth Path traversal	High7.5	—	0.7%	Dec 3, 2023
24Monitor	CVE-2021-4431No exploit	msyk FMDataAPI FMDataAPI_Sample.php cross site scriptingmsyk · fmdataapi · CWE-79 Pre-auth XSS	Medium6.1	—	0.6%	Nov 7, 2023
24Monitor	CVE-2019-25156No exploit	dstar2018 Agency search.php cross site scriptingdstar2018 · agency · CWE-79 Pre-auth XSS	Medium6.1	—	0.5%	Nov 7, 2023
30Monitor	CVE-2021-4430No exploit	Ortus Solutions ColdBox Elixir ENV Variable defaultConfig.js information disclosureortussolutions · coldbox elixir · CWE-200 Pre-auth Info leak	High7.5	—	0.5%	Nov 6, 2023
39Monitor	CVE-2018-25093No exploit	Vaerys-Dawn DiscordSailv2 Tag access controlvaerys-dawn · discordsailv2 · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.4%	Nov 5, 2023
39Monitor	CVE-2018-25092No exploit	Vaerys-Dawn DiscordSailv2 Command Mention access controlvaerys-dawn · discordsailv2 · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.4%	Nov 5, 2023
39Monitor	CVE-2017-20187No exploit	Magnesium-PHP Base.php formatEmailString injectionfloriangaerber · magnesium-php · CWE-74 Pre-auth	Critical9.8	—	0.6%	Nov 5, 2023
35Monitor	CVE-2007-10003No exploit	The Hackers Diet Plugin HTTP POST Request ajax_blurb.php sql injectionwp-plugins · the hackers diet · CWE-89 SQL injection	High8.8	—	0.5%	Oct 29, 2023

CVE-2015-10129
23Monitor
planet-freo auth.inc.php comparison
MediumCVSS 5.9No exploitEPSS 0%
- Pre-auth
samwilson · planet-freoFeb 4, 2024
CVE-2016-15037
24Monitor
go4rayyan Scumblr Task cross site scripting
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
go4rayyan · scumblrJan 21, 2024
CVE-2018-25097
24Monitor
Acumos Design Studio cross site scripting
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
acumos · design studioJan 2, 2024
CVE-2017-20188
18Monitor
Zimbra zm-ajax XFormItem.js XFormItem.prototype.setError cross site scripting
MediumCVSS 4.7No exploitEPSS 0%
- Pre-auth
- XSS
zimbra · zm-ajaxJan 2, 2024
CVE-2015-10128
24Monitor
rt-prettyphoto Plugin rt-prettyphoto.php royal_prettyphoto_plugin_links cross site scripting
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
royaltechbd · royal prettyphotoJan 2, 2024
CVE-2018-25096
35Monitor
MdAlAmin-aol Own Health Record logout.php cross-site request forgery
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
petrk94 · ownhealthrecordDec 30, 2023
CVE-2015-10127
24Monitor
PlusCaptcha Plugin cross site scripting
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
bestwebsoft · pluscaptchaDec 26, 2023
CVE-2014-125109
24Monitor
BestWebSoft Portfolio Plugin bws_menu.php bws_add_menu_render cross site scripting
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
bestwebsoft · portfolioDec 26, 2023
CVE-2012-10017
35Monitor
BestWebSoft Portfolio Plugin cross-site request forgery
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
bestwebsoft · portfolioDec 26, 2023
CVE-2016-15036
30Monitor
Deis Workflow Manager race condition
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Race condition
deis · workflow managerDec 23, 2023
CVE-2014-125108
24Monitor
w3c online-spellchecker-py spellchecker cross site scripting
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
w3 · spell checkerDec 23, 2023
CVE-2023-7076
24Monitor
slawkens MyAAC bugtracker.php cross site scripting
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
my-aac · myaacDec 22, 2023
CVE-2019-25158
40Plan
pedroetb tts-api app.js onSpeechDone os command injection
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
- Command injection
pedroetb · tts-apiDec 19, 2023
CVE-2014-125107
21Monitor
Corveda PHPSandbox String protection mechanism
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
corveda · phpsandboxDec 18, 2023
CVE-2023-6908
23Monitor
DFIRKuiper TAR Archive case_management.py unzip_file path traversal
MediumCVSS 5.9No exploitEPSS 0%
- Pre-auth
- Path traversal
dfirkuiper · kuiperDec 18, 2023
CVE-2022-4957
24Monitor
librespeed speedtest stats.php cross site scripting
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
librespeed · speedtestDec 3, 2023
CVE-2020-36768
39Monitor
rl-institut NESP2 database.py sql injection
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
reiner-lemoine-institut · nesp2Dec 3, 2023
CVE-2018-25094
30Monitor
ระบบบัญชีออนไลน์ Online Accounting System image.php path traversal
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Path traversal
kotchasan · online accounting systemDec 3, 2023
CVE-2021-4431
24Monitor
msyk FMDataAPI FMDataAPI_Sample.php cross site scripting
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
msyk · fmdataapiNov 7, 2023
CVE-2019-25156
24Monitor
dstar2018 Agency search.php cross site scripting
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
dstar2018 · agencyNov 7, 2023
CVE-2021-4430
30Monitor
Ortus Solutions ColdBox Elixir ENV Variable defaultConfig.js information disclosure
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
ortussolutions · coldbox elixirNov 6, 2023
CVE-2018-25093
39Monitor
Vaerys-Dawn DiscordSailv2 Tag access control
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
vaerys-dawn · discordsailv2Nov 5, 2023
CVE-2018-25092
39Monitor
Vaerys-Dawn DiscordSailv2 Command Mention access control
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
vaerys-dawn · discordsailv2Nov 5, 2023
CVE-2017-20187
39Monitor
Magnesium-PHP Base.php formatEmailString injection
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
floriangaerber · magnesium-phpNov 5, 2023
CVE-2007-10003
35Monitor
The Hackers Diet Plugin HTTP POST Request ajax_blurb.php sql injection
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
wp-plugins · the hackers dietOct 29, 2023