VulDB GitHub Commit Analyzer
508 kredili kayıt · son 12 ayda 13 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2021-4297İstismar yok | trampgeek jobe Restapi.php runs_post Privilege Escalationjobe project · jobe · CWE-276 | Kritik9,8 | — | %0,6 | 1 Oca 2023 |
24İzleyin | CVE-2015-10006İstismar yok | admont28 Ingnovarq insertarSliderAjax.php cross site scriptingingnovarq project · ingnovarq · CWE-79 | Orta6,1 | — | %0,5 | 1 Oca 2023 |
30İzleyin | CVE-2013-10006İstismar yok | Ziftr primecoin bitcoinrpc.cpp HTTPAuthorized timing discrepancyziftrshop · primecoin · CWE-208 | Yüksek7,5 | — | %0,7 | 1 Oca 2023 |
24İzleyin | CVE-2010-10002İstismar yok | SimpleSAMLphp simplesamlphp-module-openid OpenID consumer.php cross site scriptingsimplesamlphp · simplesamlphp-module-openid · CWE-79 | Orta6,1 | — | %0,6 | 1 Oca 2023 |
24İzleyin | CVE-2018-25063İstismar yok | Zenoss Dashboard defaultportlets.js cross site scriptingzenoss · dashboard · CWE-79 | Orta6,1 | — | %0,5 | 1 Oca 2023 |
30İzleyin | CVE-2018-25062İstismar yok | flar2 ElementalX ipsec xfrm_user.c xfrm_dump_policy_done denial of serviceelementalx · elementalx · CWE-404 | Yüksek7,5 | — | %0,9 | 1 Oca 2023 |
39İzleyin | CVE-2014-125030İstismar yok | taoeffect Empress hard-coded passwordempress project · empress · CWE-259 | Kritik9,8 | — | %0,9 | 1 Oca 2023 |
30İzleyin | CVE-2018-25061İstismar yok | A vulnerability was found in rgb2hex up to 0.1.5.rgb2hex project · rgb2hex · CWE-1333 | Yüksek7,5 | — | %0,9 | 31 Ara 2022 |
39İzleyin | CVE-2017-20160İstismar yok | flitto express-param fetchParams.js parameter pollutionflitto · express-param · CWE-235 | Kritik9,8 | — | %0,8 | 31 Ara 2022 |
35İzleyin | CVE-2014-125028İstismar yok | valtech IDP Test Client main.py cross-site request forgeryvaltech · idp test clients · CWE-352 | Yüksek8,8 | — | %0,4 | 31 Ara 2022 |
24İzleyin | CVE-2014-125027İstismar yok | Yuna Scatari TBDev usersearch.php get_user_icons cross site scriptingtbdev project · tbdev · CWE-79 | Orta6,1 | — | %0,5 | 31 Ara 2022 |
24İzleyin | CVE-2017-20159İstismar yok | rf Keynote rumble.rb cross site scriptingkeynote project · keynote · CWE-79 | Orta6,1 | — | %0,7 | 31 Ara 2022 |
24İzleyin | CVE-2017-20158İstismar yok | vova07 Yii2 FileAPI Widget UploadAction.php run cross site scriptingyii2 fileapi widget project · yii2 fileapi widget · CWE-79 | Orta6,1 | — | %0,5 | 31 Ara 2022 |
39İzleyin | CVE-2017-20157İstismar yok | Ariadne Component Library Url.php server-side request forgeryariadne-cms · ariadne component library · CWE-918 | Kritik9,8 | — | %0,6 | 31 Ara 2022 |
40Planlayın | CVE-2017-20156İstismar yok | Exciting Printer Argument prepare_page.rb command injectionprinter project · printer · CWE-77 | Kritik9,8 | — | %2,1 | 31 Ara 2022 |
24İzleyin | CVE-2017-20155İstismar yok | Sterc Google Analytics Dashboard for MODX Internal Search widget.analytics.tpl cross site scriptingsterc · google analytics dashboard for modx · CWE-79 | Orta6,1 | — | %0,6 | 30 Ara 2022 |
30İzleyin | CVE-2017-20154İstismar yok | ghostlander Phoenixcoin main.cpp accept denial of servicephoenixcoin project · phoenixcoin · CWE-404 | Yüksek7,5 | — | %0,9 | 30 Ara 2022 |
39İzleyin | CVE-2022-4860İstismar yok | KBase Metrics methods_upload_user_stats.py upload_user_data sql injectionkbase · metrics · CWE-89 | Kritik9,8 | — | %0,6 | 30 Ara 2022 |
24İzleyin | CVE-2022-4859İstismar yok | Joget User Profile Menu UserProfileMenu.java submitForm cross site scriptingjoget · joget dx · CWE-79 | Orta6,1 | — | %0,5 | 30 Ara 2022 |
24İzleyin | CVE-2020-36638İstismar yok | Chris92de AdminServ adminserv.php cross site scriptingadminserv project · adminserv · CWE-79 | Orta6,1 | — | %0,5 | 30 Ara 2022 |
24İzleyin | CVE-2020-36637İstismar yok | Chris92de AdminServ adminserv.php cross site scriptingadminserv project · adminserv · CWE-79 | Orta6,1 | — | %0,5 | 30 Ara 2022 |
30İzleyin | CVE-2018-25060İstismar yok | Macaron csrf csrf.go missing secure attributego-macaron · csrf · CWE-614 | Yüksek7,5 | — | %0,5 | 30 Ara 2022 |
24İzleyin | CVE-2017-20153İstismar yok | aerouk imageserve cross site scriptingimageserve project · imageserve · CWE-79 | Orta6,1 | — | %0,6 | 30 Ara 2022 |
30İzleyin | CVE-2017-20152İstismar yok | aerouk imageserve File viewer.php path traversalimageserve project · imageserve · CWE-22 | Yüksek7,5 | — | %0,9 | 30 Ara 2022 |
39İzleyin | CVE-2017-20151İstismar yok | iText RUPS XfaFile.java xml external entity referenceitextpdf · rups · CWE-611 | Kritik9,8 | — | %0,7 | 30 Ara 2022 |
- CVE-2021-429739İzleyin
trampgeek jobe Restapi.php runs_post Privilege Escalation
KritikCVSS 9,8İstismar yokEPSS %0jobe project · jobe1 Oca 2023
- CVE-2015-1000624İzleyin
admont28 Ingnovarq insertarSliderAjax.php cross site scripting
OrtaCVSS 6,1İstismar yokEPSS %0ingnovarq project · ingnovarq1 Oca 2023
- CVE-2013-1000630İzleyin
Ziftr primecoin bitcoinrpc.cpp HTTPAuthorized timing discrepancy
YüksekCVSS 7,5İstismar yokEPSS %0ziftrshop · primecoin1 Oca 2023
- CVE-2010-1000224İzleyin
SimpleSAMLphp simplesamlphp-module-openid OpenID consumer.php cross site scripting
OrtaCVSS 6,1İstismar yokEPSS %0simplesamlphp · simplesamlphp-module-openid1 Oca 2023
- CVE-2018-2506324İzleyin
Zenoss Dashboard defaultportlets.js cross site scripting
OrtaCVSS 6,1İstismar yokEPSS %0zenoss · dashboard1 Oca 2023
- CVE-2018-2506230İzleyin
flar2 ElementalX ipsec xfrm_user.c xfrm_dump_policy_done denial of service
YüksekCVSS 7,5İstismar yokEPSS %0elementalx · elementalx1 Oca 2023
- CVE-2014-12503039İzleyin
taoeffect Empress hard-coded password
KritikCVSS 9,8İstismar yokEPSS %0empress project · empress1 Oca 2023
- CVE-2018-2506130İzleyin
A vulnerability was found in rgb2hex up to 0.1.5.
YüksekCVSS 7,5İstismar yokEPSS %0rgb2hex project · rgb2hex31 Ara 2022
- CVE-2017-2016039İzleyin
flitto express-param fetchParams.js parameter pollution
KritikCVSS 9,8İstismar yokEPSS %0flitto · express-param31 Ara 2022
- CVE-2014-12502835İzleyin
valtech IDP Test Client main.py cross-site request forgery
YüksekCVSS 8,8İstismar yokEPSS %0valtech · idp test clients31 Ara 2022
- CVE-2014-12502724İzleyin
Yuna Scatari TBDev usersearch.php get_user_icons cross site scripting
OrtaCVSS 6,1İstismar yokEPSS %0tbdev project · tbdev31 Ara 2022
- CVE-2017-2015924İzleyin
rf Keynote rumble.rb cross site scripting
OrtaCVSS 6,1İstismar yokEPSS %0keynote project · keynote31 Ara 2022
- CVE-2017-2015824İzleyin
vova07 Yii2 FileAPI Widget UploadAction.php run cross site scripting
OrtaCVSS 6,1İstismar yokEPSS %0yii2 fileapi widget project · yii2 fileapi widget31 Ara 2022
- CVE-2017-2015739İzleyin
Ariadne Component Library Url.php server-side request forgery
KritikCVSS 9,8İstismar yokEPSS %0ariadne-cms · ariadne component library31 Ara 2022
- CVE-2017-2015640Planlayın
Exciting Printer Argument prepare_page.rb command injection
KritikCVSS 9,8İstismar yokEPSS %2printer project · printer31 Ara 2022
- CVE-2017-2015524İzleyin
Sterc Google Analytics Dashboard for MODX Internal Search widget.analytics.tpl cross site scripting
OrtaCVSS 6,1İstismar yokEPSS %0sterc · google analytics dashboard for modx30 Ara 2022
- CVE-2017-2015430İzleyin
ghostlander Phoenixcoin main.cpp accept denial of service
YüksekCVSS 7,5İstismar yokEPSS %0phoenixcoin project · phoenixcoin30 Ara 2022
- CVE-2022-486039İzleyin
KBase Metrics methods_upload_user_stats.py upload_user_data sql injection
KritikCVSS 9,8İstismar yokEPSS %0kbase · metrics30 Ara 2022
- CVE-2022-485924İzleyin
Joget User Profile Menu UserProfileMenu.java submitForm cross site scripting
OrtaCVSS 6,1İstismar yokEPSS %0joget · joget dx30 Ara 2022
- CVE-2020-3663824İzleyin
Chris92de AdminServ adminserv.php cross site scripting
OrtaCVSS 6,1İstismar yokEPSS %0adminserv project · adminserv30 Ara 2022
- CVE-2020-3663724İzleyin
Chris92de AdminServ adminserv.php cross site scripting
OrtaCVSS 6,1İstismar yokEPSS %0adminserv project · adminserv30 Ara 2022
- CVE-2018-2506030İzleyin
Macaron csrf csrf.go missing secure attribute
YüksekCVSS 7,5İstismar yokEPSS %0go-macaron · csrf30 Ara 2022
- CVE-2017-2015324İzleyin
aerouk imageserve cross site scripting
OrtaCVSS 6,1İstismar yokEPSS %0imageserve project · imageserve30 Ara 2022
- CVE-2017-2015230İzleyin
aerouk imageserve File viewer.php path traversal
YüksekCVSS 7,5İstismar yokEPSS %0imageserve project · imageserve30 Ara 2022
- CVE-2017-2015139İzleyin
iText RUPS XfaFile.java xml external entity reference
KritikCVSS 9,8İstismar yokEPSS %0itextpdf · rups30 Ara 2022