VulDB GitHub Commit Analyzer
507 kredili kayıt · son 12 ayda 12 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2026-14637İstismar yok | kirilkirkov Ecommerce-CodeIgniter-Bootstrap ShoppingCart.php getCartItems deserializationkirilkirkov · ecommerce-codeigniter-bootstrap · CWE-20 | Yüksek7,8 | — | %0,8 | 4 Tem 2026 |
21İzleyin | CVE-2026-14636İstismar yok | kirilkirkov Ecommerce-CodeIgniter-Bootstrap Vendor Image Manager AddProduct.php do_upload_others_images path traversalkirilkirkov · ecommerce-codeigniter-bootstrap · CWE-22 | Orta5,3 | — | %0,5 | 4 Tem 2026 |
22İzleyin | CVE-2026-14635İstismar yok | kirilkirkov Ecommerce-CodeIgniter-Bootstrap Vendor Multi-Image Endpoint AddProduct.php path traversalkirilkirkov · ecommerce-codeigniter-bootstrap · CWE-22 | Orta5,5 | — | %0,6 | 4 Tem 2026 |
8İzleyin | CVE-2026-14634İstismar yok | kirilkirkov Ecommerce-CodeIgniter-Bootstrap Subscribed Emails Admin MY_Controller.php checkForPostRequests cross site scriptingkirilkirkov · ecommerce-codeigniter-bootstrap · CWE-79 | Düşük2,1 | — | %0,5 | 4 Tem 2026 |
8İzleyin | CVE-2026-14633İstismar yok | kirilkirkov Ecommerce-CodeIgniter-Bootstrap Hidden REST API Endpoint set cross site scriptingkirilkirkov · ecommerce-codeigniter-bootstrap · CWE-79 | Düşük2,1 | — | %0,5 | 4 Tem 2026 |
8İzleyin | CVE-2026-14632İstismar yok | kirilkirkov Ecommerce-CodeIgniter-Bootstrap Trusted Backend MY_Controller.php setReferrer redirectkirilkirkov · ecommerce-codeigniter-bootstrap · CWE-601 | Düşük2,1 | — | %0,5 | 4 Tem 2026 |
8İzleyin | CVE-2026-5328İstismar yok | shsuishang modulithshop ProductItemDao ProductIndexServiceImpl.java listItem sql injectionshsuishang · modulithshop · CWE-74 | Düşük2,1 | — | %0,3 | 2 Nis 2026 |
21İzleyin | CVE-2026-3977İstismar yok | projectsend AJAX Endpoints authorizationCWE-862 | Orta5,3 | — | %0,4 | 12 Mar 2026 |
19İzleyin | CVE-2023-7333İstismar yok | bluelabsio records-mover Table Object sql injectionbluelabsio · records-mover · CWE-74 | Orta4,8 | — | %0,2 | 7 Oca 2026 |
9İzleyin | CVE-2024-14020İstismar yok | carboneio carbone Formatter input.js prototype pollutioncarboneio · carbone · CWE-94 | Düşük2,3 | — | %0,3 | 7 Oca 2026 |
20İzleyin | CVE-2023-7331İstismar yok | PKrystian Full-Stack-Bank User sql injectionpkrystian · full-stack-bank · CWE-74 | Orta5,1 | — | %0,2 | 31 Ara 2025 |
20İzleyin | CVE-2019-25262İstismar yok | elinicksic Razgover Chat Message send.php cross site scriptingelinicksic · razgover · CWE-79 | Orta5,1 | — | %0,3 | 31 Ara 2025 |
22İzleyin | CVE-2025-7107İstismar yok | SimStudioAI sim route.ts handleLocalFile path traversalsim · sim · CWE-22 | Orta5,5 | — | %0,9 | 6 Tem 2025 |
8İzleyin | CVE-2025-6466İstismar yok | ageerle ruoyi-ai SseServiceImpl.java upload unrestricted uploadageerle · ruoyi-ai · CWE-284 | Düşük2,1 | — | %0,4 | 22 Haz 2025 |
20İzleyin | CVE-2025-6283İstismar yok | xataio Xata Agent route.ts GET path traversalxata · agent · CWE-22 | Orta5,1 | — | %0,7 | 19 Haz 2025 |
20İzleyin | CVE-2025-6166İstismar yok | frdel Agent-Zero image_get.py image_get path traversalagent-zero · agent-zero · CWE-22 | Orta5,1 | — | %0,6 | 17 Haz 2025 |
21İzleyin | CVE-2025-6152İstismar yok | Steel Browser files.routes.ts handleFileUpload path traversalsteel · browser · CWE-22 | Orta5,3 | — | %0,6 | 16 Haz 2025 |
27İzleyin | CVE-2017-20197İstismar yok | propanetank Roommate-Bill-Tracking login.php sql injectionpropanetank · roommate-bill-tracking · CWE-74 | Orta6,9 | — | %0,4 | 9 Nis 2025 |
27İzleyin | CVE-2025-3202İstismar yok | ageerle ruoyi-ai SysNoticeController.java improper authorizationageerle · ruoyi-ai · CWE-266 | Orta6,9 | — | %0,5 | 3 Nis 2025 |
27İzleyin | CVE-2025-3199İstismar yok | ageerle ruoyi-ai API Interface SysModelController.java improper authorizationpandarobot · ruoyi ai · CWE-266 | Orta6,9 | — | %0,6 | 3 Nis 2025 |
21İzleyin | CVE-2018-25106İstismar yok | webuidesigning NebulaX Theme Legacy.php nebula_send_to_hubspot sql injectionwebuidesigning · nebulax theme · CWE-74 | Orta5,3 | — | %0,4 | 23 Ara 2024 |
21İzleyin | CVE-2024-12895İstismar yok | TreasureHuntGame TreasureHunt checkflag.php console_log sql injectiontreasurehuntgame · treasurehunt · CWE-74 | Orta5,3 | — | %0,6 | 22 Ara 2024 |
21İzleyin | CVE-2024-12894İstismar yok | TreasureHuntGame TreasureHunt acesso.php sql injectiontreasurehuntgame · treasurehunt · CWE-74 | Orta5,3 | — | %0,6 | 22 Ara 2024 |
20İzleyin | CVE-2017-20195İstismar yok | LUNAD3v AreaLoad request.php sql injectionlunad3v · areaload · CWE-89 | Orta5,1 | — | %0,3 | 29 Eki 2024 |
21İzleyin | CVE-2018-25104İstismar yok | CoinGate Plugin Payment callback.php postProcess logic errorCWE-840 | Orta5,3 | — | %0,4 | 17 Eki 2024 |
- CVE-2026-1463731İzleyin
kirilkirkov Ecommerce-CodeIgniter-Bootstrap ShoppingCart.php getCartItems deserialization
YüksekCVSS 7,8İstismar yokEPSS %1kirilkirkov · ecommerce-codeigniter-bootstrap4 Tem 2026
- CVE-2026-1463621İzleyin
kirilkirkov Ecommerce-CodeIgniter-Bootstrap Vendor Image Manager AddProduct.php do_upload_others_images path traversal
OrtaCVSS 5,3İstismar yokEPSS %0kirilkirkov · ecommerce-codeigniter-bootstrap4 Tem 2026
- CVE-2026-1463522İzleyin
kirilkirkov Ecommerce-CodeIgniter-Bootstrap Vendor Multi-Image Endpoint AddProduct.php path traversal
OrtaCVSS 5,5İstismar yokEPSS %1kirilkirkov · ecommerce-codeigniter-bootstrap4 Tem 2026
- CVE-2026-146348İzleyin
kirilkirkov Ecommerce-CodeIgniter-Bootstrap Subscribed Emails Admin MY_Controller.php checkForPostRequests cross site scripting
DüşükCVSS 2,1İstismar yokEPSS %0kirilkirkov · ecommerce-codeigniter-bootstrap4 Tem 2026
- CVE-2026-146338İzleyin
kirilkirkov Ecommerce-CodeIgniter-Bootstrap Hidden REST API Endpoint set cross site scripting
DüşükCVSS 2,1İstismar yokEPSS %0kirilkirkov · ecommerce-codeigniter-bootstrap4 Tem 2026
- CVE-2026-146328İzleyin
kirilkirkov Ecommerce-CodeIgniter-Bootstrap Trusted Backend MY_Controller.php setReferrer redirect
DüşükCVSS 2,1İstismar yokEPSS %0kirilkirkov · ecommerce-codeigniter-bootstrap4 Tem 2026
- CVE-2026-53288İzleyin
shsuishang modulithshop ProductItemDao ProductIndexServiceImpl.java listItem sql injection
DüşükCVSS 2,1İstismar yokEPSS %0shsuishang · modulithshop2 Nis 2026
- CVE-2026-397721İzleyin
projectsend AJAX Endpoints authorization
OrtaCVSS 5,3İstismar yokEPSS %012 Mar 2026
- CVE-2023-733319İzleyin
bluelabsio records-mover Table Object sql injection
OrtaCVSS 4,8İstismar yokEPSS %0bluelabsio · records-mover7 Oca 2026
- CVE-2024-140209İzleyin
carboneio carbone Formatter input.js prototype pollution
DüşükCVSS 2,3İstismar yokEPSS %0carboneio · carbone7 Oca 2026
- CVE-2023-733120İzleyin
PKrystian Full-Stack-Bank User sql injection
OrtaCVSS 5,1İstismar yokEPSS %0pkrystian · full-stack-bank31 Ara 2025
- CVE-2019-2526220İzleyin
elinicksic Razgover Chat Message send.php cross site scripting
OrtaCVSS 5,1İstismar yokEPSS %0elinicksic · razgover31 Ara 2025
- CVE-2025-710722İzleyin
SimStudioAI sim route.ts handleLocalFile path traversal
OrtaCVSS 5,5İstismar yokEPSS %1sim · sim6 Tem 2025
- CVE-2025-64668İzleyin
ageerle ruoyi-ai SseServiceImpl.java upload unrestricted upload
DüşükCVSS 2,1İstismar yokEPSS %0ageerle · ruoyi-ai22 Haz 2025
- CVE-2025-628320İzleyin
xataio Xata Agent route.ts GET path traversal
OrtaCVSS 5,1İstismar yokEPSS %1xata · agent19 Haz 2025
- CVE-2025-616620İzleyin
frdel Agent-Zero image_get.py image_get path traversal
OrtaCVSS 5,1İstismar yokEPSS %1agent-zero · agent-zero17 Haz 2025
- CVE-2025-615221İzleyin
Steel Browser files.routes.ts handleFileUpload path traversal
OrtaCVSS 5,3İstismar yokEPSS %1steel · browser16 Haz 2025
- CVE-2017-2019727İzleyin
propanetank Roommate-Bill-Tracking login.php sql injection
OrtaCVSS 6,9İstismar yokEPSS %0propanetank · roommate-bill-tracking9 Nis 2025
- CVE-2025-320227İzleyin
ageerle ruoyi-ai SysNoticeController.java improper authorization
OrtaCVSS 6,9İstismar yokEPSS %1ageerle · ruoyi-ai3 Nis 2025
- CVE-2025-319927İzleyin
ageerle ruoyi-ai API Interface SysModelController.java improper authorization
OrtaCVSS 6,9İstismar yokEPSS %1pandarobot · ruoyi ai3 Nis 2025
- CVE-2018-2510621İzleyin
webuidesigning NebulaX Theme Legacy.php nebula_send_to_hubspot sql injection
OrtaCVSS 5,3İstismar yokEPSS %0webuidesigning · nebulax theme23 Ara 2024
- CVE-2024-1289521İzleyin
TreasureHuntGame TreasureHunt checkflag.php console_log sql injection
OrtaCVSS 5,3İstismar yokEPSS %1treasurehuntgame · treasurehunt22 Ara 2024
- CVE-2024-1289421İzleyin
TreasureHuntGame TreasureHunt acesso.php sql injection
OrtaCVSS 5,3İstismar yokEPSS %1treasurehuntgame · treasurehunt22 Ara 2024
- CVE-2017-2019520İzleyin
LUNAD3v AreaLoad request.php sql injection
OrtaCVSS 5,1İstismar yokEPSS %0lunad3v · areaload29 Eki 2024
- CVE-2018-2510421İzleyin
CoinGate Plugin Payment callback.php postProcess logic error
OrtaCVSS 5,3İstismar yokEPSS %017 Eki 2024