VulDB GitHub Commit Analyzer
508 credited records · 13 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2016-15026No exploit | 3breadt dd-plist xml external entity referencedd-plist project · dd-plist · CWE-611 | High7.8 | — | 0.5% | Feb 20, 2023 |
24Monitor | CVE-2016-15025No exploit | generator-hottowel 404 Error _app.js cross site scriptinggenerator-hottowel project · generator-hottowel · CWE-79 | Medium6.1 | — | 0.5% | Feb 20, 2023 |
24Monitor | CVE-2015-10080No exploit | NREL api-umbrella-web Admin Data Table cross site scriptingnrel · api umbrella · CWE-79 | Medium6.1 | — | 0.4% | Feb 20, 2023 |
24Monitor | CVE-2014-125088No exploit | qt-users-jp silk header.qml cross site scriptingqt-users · silk · CWE-79 | Medium6.1 | — | 0.4% | Feb 20, 2023 |
39Monitor | CVE-2012-10008No exploit | uakfdotb oneapp sql injectiononeapp project · oneapp · CWE-89 | Critical9.8 | — | 0.6% | Feb 20, 2023 |
22Monitor | CVE-2016-15024No exploit | doomsider shadow denial of servicedoomsider shadow project · doomsider shadow · CWE-404 | Medium5.5 | — | 0.2% | Feb 19, 2023 |
39Monitor | CVE-2014-125087No exploit | java-xmlbuilder xml external entity referencejava-xmlbuilder project · java-xmlbuilder · CWE-611 | Critical9.8 | — | 1.2% | Feb 19, 2023 |
24Monitor | CVE-2012-10007No exploit | madgicweb BuddyStream Plugin ShareBox.php cross site scriptingbuddystream project · buddystream · CWE-79 | Medium6.1 | — | 0.5% | Feb 19, 2023 |
24Monitor | CVE-2015-10079No exploit | juju2143 WalrusIRC parser.js parseLinks cross site scriptingwalrusirc project · walrusirc · CWE-79 | Medium6.1 | — | 0.5% | Feb 13, 2023 |
24Monitor | CVE-2022-4905No exploit | UDX Stateless Media Plugin class-settings.php setup_wizard_interface cross site scriptingudx · stateless media plugin · CWE-79 | Medium6.1 | — | 0.6% | Feb 13, 2023 |
30Monitor | CVE-2020-36661No exploit | Kong lua-multipart multipart.lua is_header redoskonghq · multipart · CWE-1333 | High7.5 | — | 0.9% | Feb 12, 2023 |
30Monitor | CVE-2019-25103No exploit | simple-markdown simple-markdown.js redoskhanacademy · simple-markdown · CWE-1333 | High7.5 | — | 0.9% | Feb 12, 2023 |
30Monitor | CVE-2019-25102No exploit | simple-markdown simple-markdown.js redoskhanacademy · simple-markdown · CWE-1333 | High7.5 | — | 1.0% | Feb 12, 2023 |
24Monitor | CVE-2015-10078No exploit | atwellpub Resend Welcome Email Plugin resend-welcome-email.php send_welcome_email_url cross site scriptingresend welcome email project · resend welcome email · CWE-79 | Medium6.1 | — | 0.6% | Feb 12, 2023 |
32Monitor | CVE-2022-4903No exploit | CodenameOne implicit intent for sensitive communicationcodenameone · codename one · CWE-927 | High8.1 | — | 0.6% | Feb 10, 2023 |
39Monitor | CVE-2015-10077No exploit | webbuilders-group silverstripe-kapost-bridge KapostService.php getPreview sql injectionwebbuildersgroup · silverstripe-kapost-bridge · CWE-89 | Critical9.8 | — | 0.6% | Feb 10, 2023 |
39Monitor | CVE-2015-10076No exploit | dimtion Shaarlier Tag TagsSource.java createTag sql injectionshaarlier project · shaarlier · CWE-89 | Critical9.8 | — | 0.6% | Feb 9, 2023 |
39Monitor | CVE-2011-10003No exploit | XpressEngine Update Query sql injectionxpressengine · xpressengine · CWE-89 | Critical9.8 | — | 0.6% | Feb 7, 2023 |
24Monitor | CVE-2015-10075No exploit | Custom-Content-Width custom-content-width.php register_settings cross site scriptingcustom-content-width project · custom-content-width · CWE-79 | Medium6.1 | — | 0.5% | Feb 7, 2023 |
24Monitor | CVE-2015-10074No exploit | OpenSeaMap online_chart index.php init cross site scriptingopenseamap · online chart · CWE-79 | Medium6.1 | — | 0.5% | Feb 7, 2023 |
24Monitor | CVE-2017-20177No exploit | WangGuard Plugin WGG User List wangguard-user-info.php wangguard_users_info cross site scriptingwangguard project · wangguard · CWE-79 | Medium6.1 | — | 0.6% | Feb 6, 2023 |
38Monitor | CVE-2015-10073No exploit | tinymighty WikiSEO Meta Property Tag WikiSEO.body.php modifyHTML cross site scriptingtinymighty · wikiseo · CWE-79 | Critical9.6 | — | 0.8% | Feb 6, 2023 |
24Monitor | CVE-2022-4902No exploit | eXo Chat Application Mention ExoChatMessageComposer.vue cross site scriptingexoplatform · chat application · CWE-79 | Medium6.1 | — | 0.5% | Feb 6, 2023 |
17Monitor | CVE-2020-36660No exploit | paxswill EVE Ship Replacement Program User Information api.py information disclosureeve ship replacement program project · eve ship replacement program · CWE-200 | Medium4.3 | — | 0.6% | Feb 6, 2023 |
24Monitor | CVE-2017-20176No exploit | ciubotaru share-on-diaspora new_window.php cross site scriptingshare on diaspora project · share on diaspora · CWE-79 | Medium6.1 | — | 0.5% | Feb 6, 2023 |
- CVE-2016-1502631Monitor
3breadt dd-plist xml external entity reference
HighCVSS 7.8No exploitEPSS 0%dd-plist project · dd-plistFeb 20, 2023
- CVE-2016-1502524Monitor
generator-hottowel 404 Error _app.js cross site scripting
MediumCVSS 6.1No exploitEPSS 0%generator-hottowel project · generator-hottowelFeb 20, 2023
- CVE-2015-1008024Monitor
NREL api-umbrella-web Admin Data Table cross site scripting
MediumCVSS 6.1No exploitEPSS 0%nrel · api umbrellaFeb 20, 2023
- CVE-2014-12508824Monitor
qt-users-jp silk header.qml cross site scripting
MediumCVSS 6.1No exploitEPSS 0%qt-users · silkFeb 20, 2023
- CVE-2012-1000839Monitor
uakfdotb oneapp sql injection
CriticalCVSS 9.8No exploitEPSS 0%oneapp project · oneappFeb 20, 2023
- CVE-2016-1502422Monitor
doomsider shadow denial of service
MediumCVSS 5.5No exploitEPSS 0%doomsider shadow project · doomsider shadowFeb 19, 2023
- CVE-2014-12508739Monitor
java-xmlbuilder xml external entity reference
CriticalCVSS 9.8No exploitEPSS 1%java-xmlbuilder project · java-xmlbuilderFeb 19, 2023
- CVE-2012-1000724Monitor
madgicweb BuddyStream Plugin ShareBox.php cross site scripting
MediumCVSS 6.1No exploitEPSS 0%buddystream project · buddystreamFeb 19, 2023
- CVE-2015-1007924Monitor
juju2143 WalrusIRC parser.js parseLinks cross site scripting
MediumCVSS 6.1No exploitEPSS 0%walrusirc project · walrusircFeb 13, 2023
- CVE-2022-490524Monitor
UDX Stateless Media Plugin class-settings.php setup_wizard_interface cross site scripting
MediumCVSS 6.1No exploitEPSS 0%udx · stateless media pluginFeb 13, 2023
- CVE-2020-3666130Monitor
Kong lua-multipart multipart.lua is_header redos
HighCVSS 7.5No exploitEPSS 0%konghq · multipartFeb 12, 2023
- CVE-2019-2510330Monitor
simple-markdown simple-markdown.js redos
HighCVSS 7.5No exploitEPSS 0%khanacademy · simple-markdownFeb 12, 2023
- CVE-2019-2510230Monitor
simple-markdown simple-markdown.js redos
HighCVSS 7.5No exploitEPSS 1%khanacademy · simple-markdownFeb 12, 2023
- CVE-2015-1007824Monitor
atwellpub Resend Welcome Email Plugin resend-welcome-email.php send_welcome_email_url cross site scripting
MediumCVSS 6.1No exploitEPSS 0%resend welcome email project · resend welcome emailFeb 12, 2023
- CVE-2022-490332Monitor
CodenameOne implicit intent for sensitive communication
HighCVSS 8.1No exploitEPSS 0%codenameone · codename oneFeb 10, 2023
- CVE-2015-1007739Monitor
webbuilders-group silverstripe-kapost-bridge KapostService.php getPreview sql injection
CriticalCVSS 9.8No exploitEPSS 0%webbuildersgroup · silverstripe-kapost-bridgeFeb 10, 2023
- CVE-2015-1007639Monitor
dimtion Shaarlier Tag TagsSource.java createTag sql injection
CriticalCVSS 9.8No exploitEPSS 0%shaarlier project · shaarlierFeb 9, 2023
- CVE-2011-1000339Monitor
XpressEngine Update Query sql injection
CriticalCVSS 9.8No exploitEPSS 0%xpressengine · xpressengineFeb 7, 2023
- CVE-2015-1007524Monitor
Custom-Content-Width custom-content-width.php register_settings cross site scripting
MediumCVSS 6.1No exploitEPSS 0%custom-content-width project · custom-content-widthFeb 7, 2023
- CVE-2015-1007424Monitor
OpenSeaMap online_chart index.php init cross site scripting
MediumCVSS 6.1No exploitEPSS 0%openseamap · online chartFeb 7, 2023
- CVE-2017-2017724Monitor
WangGuard Plugin WGG User List wangguard-user-info.php wangguard_users_info cross site scripting
MediumCVSS 6.1No exploitEPSS 0%wangguard project · wangguardFeb 6, 2023
- CVE-2015-1007338Monitor
tinymighty WikiSEO Meta Property Tag WikiSEO.body.php modifyHTML cross site scripting
CriticalCVSS 9.6No exploitEPSS 0%tinymighty · wikiseoFeb 6, 2023
- CVE-2022-490224Monitor
eXo Chat Application Mention ExoChatMessageComposer.vue cross site scripting
MediumCVSS 6.1No exploitEPSS 0%exoplatform · chat applicationFeb 6, 2023
- CVE-2020-3666017Monitor
paxswill EVE Ship Replacement Program User Information api.py information disclosure
MediumCVSS 4.3No exploitEPSS 0%eve ship replacement program project · eve ship replacement programFeb 6, 2023
- CVE-2017-2017624Monitor
ciubotaru share-on-diaspora new_window.php cross site scripting
MediumCVSS 6.1No exploitEPSS 0%share on diaspora project · share on diasporaFeb 6, 2023