VulDB GitHub Commit Analyzer
508 credited records · 13 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
24Monitor | CVE-2014-125092No exploit | MaxButtons Plugin maxbuttons-button.php maxbuttons_strip_px cross site scriptingmaxfoundry · maxbuttons · CWE-79 | Medium6.1 | — | 0.5% | Mar 5, 2023 |
21Monitor | CVE-2006-10001No exploit | Subscribe to Comments Plugin subscribe-to-comments.php cross site scriptingmarkjaquith · subscribe to comments · CWE-79 | Medium5.4 | — | 0.6% | Mar 5, 2023 |
24Monitor | CVE-2022-4927No exploit | ualbertalib NEOSDiscovery _refworks.html.erb reverse tabnabbingualberta · neosdiscovery · CWE-1022 | Medium6.1 | — | 0.4% | Mar 5, 2023 |
40Plan | CVE-2021-4329No exploit | json-logic-js logic.js command injectionjson-logic-js project · json-logic-js · CWE-77 | Critical9.8 | — | 2.2% | Mar 5, 2023 |
24Monitor | CVE-2015-10089No exploit | flame.js cross site scriptingflame.js project · flame.js · CWE-79 | Medium6.1 | — | 0.4% | Mar 5, 2023 |
39Monitor | CVE-2008-10003No exploit | iGamingModules flashgames game.php sql injectionflashgames project · flashgames · CWE-89 | Critical9.8 | — | 0.6% | Mar 4, 2023 |
24Monitor | CVE-2008-10002No exploit | cfire24 ajaxlife cross site scriptingajaxlife project · ajaxlife · CWE-79 | Medium6.1 | — | 0.5% | Mar 4, 2023 |
39Monitor | CVE-2014-125091No exploit | codepeople cp-polls Plugin cp-admin-int-message-list.inc.php sql injectioncodepeople · polls cp · CWE-89 | Critical9.8 | — | 0.7% | Mar 4, 2023 |
24Monitor | CVE-2014-125090No exploit | Media Downloader Plugin getfile.php dl_file_resumable cross site scriptingmedia downloader project · media downloader · CWE-79 | Medium6.1 | — | 0.5% | Mar 4, 2023 |
24Monitor | CVE-2020-36665No exploit | Artesãos SEOTools TwitterCards.php eachValue redirectseotool project · seotool · CWE-601 | Medium6.1 | — | 0.5% | Mar 4, 2023 |
24Monitor | CVE-2020-36664No exploit | Artesãos SEOTools SEOMeta.php setTitle redirectseotool project · seotool · CWE-601 | Medium6.1 | — | 0.6% | Mar 4, 2023 |
24Monitor | CVE-2020-36663No exploit | Artesãos SEOTools OpenGraph.php makeTag redirectseotool project · seotool · CWE-601 | Medium6.1 | — | 0.6% | Mar 4, 2023 |
39Monitor | CVE-2015-10086No exploit | OpenCycleCompass server-php login.php sql injectionserver-php project · server-php · CWE-89 | Critical9.8 | — | 0.6% | Feb 27, 2023 |
24Monitor | CVE-2019-25105No exploit | dro.pm fileman.php cross site scriptingdro.pm project · dro.pm · CWE-79 | Medium6.1 | — | 0.4% | Feb 26, 2023 |
24Monitor | CVE-2021-4325No exploit | NHN TOAST UI Chart Legend cross site scriptingnhncloud · toast ui chart · CWE-79 | Medium6.1 | — | 0.5% | Feb 21, 2023 |
39Monitor | CVE-2017-20179No exploit | InSTEDD Pollit tour_controller.rb TourController Privilege Escalationinstedd · pollit | Critical9.8 | — | 0.7% | Feb 21, 2023 |
30Monitor | CVE-2017-20178No exploit | Codiad process.php saveJSON information disclosurecodiad · codiad · CWE-200 | High7.5 | — | 0.6% | Feb 21, 2023 |
30Monitor | CVE-2015-10085No exploit | GoPistolet MTA denial of servicegopistolet project · gopistolet · CWE-404 | High7.5 | — | 0.9% | Feb 21, 2023 |
39Monitor | CVE-2015-10084No exploit | irontec klear-library BaseController.php _prepareWhere sql injectionirontec · klear-library · CWE-89 | Critical9.8 | — | 0.6% | Feb 21, 2023 |
39Monitor | CVE-2015-10083No exploit | harrystech Dynosaur-Rails application_controller.rb basic_auth improper authenticationharrys · dynosaur-rails · CWE-287 | Critical9.8 | — | 1.0% | Feb 21, 2023 |
39Monitor | CVE-2015-10082No exploit | UIKit0 libplist XML xplist.c plist_from_xml xml external entity referencelibimobiledevice · libplist · CWE-611 | Critical9.8 | — | 0.7% | Feb 21, 2023 |
24Monitor | CVE-2014-125089No exploit | cention-chatserver InternalChatProtocol.fe _formatBody cross site scriptingcention-chatserver project · cention-chatserver · CWE-79 | Medium6.1 | — | 0.4% | Feb 20, 2023 |
30Monitor | CVE-2019-25104No exploit | rtcwcoop Team Command ai_cast_script.c AICast_ScriptLoad denial of servicertcwcoop · rtcwcoop · CWE-404 | High7.5 | — | 1.1% | Feb 20, 2023 |
24Monitor | CVE-2016-15027No exploit | meta4creations Post Duplicator Plugin notices.php mtphr_post_duplicator_notice cross site scriptingmetaphorcreations · post duplicator · CWE-79 | Medium6.1 | — | 0.6% | Feb 20, 2023 |
35Monitor | CVE-2015-10081No exploit | arnoldle submitByMailPlugin edit_list.php cross-site request forgerysubmitbymailplugin project · submitbymailplugin · CWE-352 | High8.8 | — | 0.3% | Feb 20, 2023 |
- CVE-2014-12509224Monitor
MaxButtons Plugin maxbuttons-button.php maxbuttons_strip_px cross site scripting
MediumCVSS 6.1No exploitEPSS 0%maxfoundry · maxbuttonsMar 5, 2023
- CVE-2006-1000121Monitor
Subscribe to Comments Plugin subscribe-to-comments.php cross site scripting
MediumCVSS 5.4No exploitEPSS 0%markjaquith · subscribe to commentsMar 5, 2023
- CVE-2022-492724Monitor
ualbertalib NEOSDiscovery _refworks.html.erb reverse tabnabbing
MediumCVSS 6.1No exploitEPSS 0%ualberta · neosdiscoveryMar 5, 2023
- CVE-2021-432940Plan
json-logic-js logic.js command injection
CriticalCVSS 9.8No exploitEPSS 2%json-logic-js project · json-logic-jsMar 5, 2023
- CVE-2015-1008924Monitor
flame.js cross site scripting
MediumCVSS 6.1No exploitEPSS 0%flame.js project · flame.jsMar 5, 2023
- CVE-2008-1000339Monitor
iGamingModules flashgames game.php sql injection
CriticalCVSS 9.8No exploitEPSS 0%flashgames project · flashgamesMar 4, 2023
- CVE-2008-1000224Monitor
cfire24 ajaxlife cross site scripting
MediumCVSS 6.1No exploitEPSS 0%ajaxlife project · ajaxlifeMar 4, 2023
- CVE-2014-12509139Monitor
codepeople cp-polls Plugin cp-admin-int-message-list.inc.php sql injection
CriticalCVSS 9.8No exploitEPSS 0%codepeople · polls cpMar 4, 2023
- CVE-2014-12509024Monitor
Media Downloader Plugin getfile.php dl_file_resumable cross site scripting
MediumCVSS 6.1No exploitEPSS 0%media downloader project · media downloaderMar 4, 2023
- CVE-2020-3666524Monitor
Artesãos SEOTools TwitterCards.php eachValue redirect
MediumCVSS 6.1No exploitEPSS 0%seotool project · seotoolMar 4, 2023
- CVE-2020-3666424Monitor
Artesãos SEOTools SEOMeta.php setTitle redirect
MediumCVSS 6.1No exploitEPSS 0%seotool project · seotoolMar 4, 2023
- CVE-2020-3666324Monitor
Artesãos SEOTools OpenGraph.php makeTag redirect
MediumCVSS 6.1No exploitEPSS 0%seotool project · seotoolMar 4, 2023
- CVE-2015-1008639Monitor
OpenCycleCompass server-php login.php sql injection
CriticalCVSS 9.8No exploitEPSS 0%server-php project · server-phpFeb 27, 2023
- CVE-2019-2510524Monitor
dro.pm fileman.php cross site scripting
MediumCVSS 6.1No exploitEPSS 0%dro.pm project · dro.pmFeb 26, 2023
- CVE-2021-432524Monitor
NHN TOAST UI Chart Legend cross site scripting
MediumCVSS 6.1No exploitEPSS 0%nhncloud · toast ui chartFeb 21, 2023
- CVE-2017-2017939Monitor
InSTEDD Pollit tour_controller.rb TourController Privilege Escalation
CriticalCVSS 9.8No exploitEPSS 0%instedd · pollitFeb 21, 2023
- CVE-2017-2017830Monitor
Codiad process.php saveJSON information disclosure
HighCVSS 7.5No exploitEPSS 0%codiad · codiadFeb 21, 2023
- CVE-2015-1008530Monitor
GoPistolet MTA denial of service
HighCVSS 7.5No exploitEPSS 0%gopistolet project · gopistoletFeb 21, 2023
- CVE-2015-1008439Monitor
irontec klear-library BaseController.php _prepareWhere sql injection
CriticalCVSS 9.8No exploitEPSS 0%irontec · klear-libraryFeb 21, 2023
- CVE-2015-1008339Monitor
harrystech Dynosaur-Rails application_controller.rb basic_auth improper authentication
CriticalCVSS 9.8No exploitEPSS 1%harrys · dynosaur-railsFeb 21, 2023
- CVE-2015-1008239Monitor
UIKit0 libplist XML xplist.c plist_from_xml xml external entity reference
CriticalCVSS 9.8No exploitEPSS 0%libimobiledevice · libplistFeb 21, 2023
- CVE-2014-12508924Monitor
cention-chatserver InternalChatProtocol.fe _formatBody cross site scripting
MediumCVSS 6.1No exploitEPSS 0%cention-chatserver project · cention-chatserverFeb 20, 2023
- CVE-2019-2510430Monitor
rtcwcoop Team Command ai_cast_script.c AICast_ScriptLoad denial of service
HighCVSS 7.5No exploitEPSS 1%rtcwcoop · rtcwcoopFeb 20, 2023
- CVE-2016-1502724Monitor
meta4creations Post Duplicator Plugin notices.php mtphr_post_duplicator_notice cross site scripting
MediumCVSS 6.1No exploitEPSS 0%metaphorcreations · post duplicatorFeb 20, 2023
- CVE-2015-1008135Monitor
arnoldle submitByMailPlugin edit_list.php cross-site request forgery
HighCVSS 8.8No exploitEPSS 0%submitbymailplugin project · submitbymailpluginFeb 20, 2023