CVE Program partner

larry_cashdollar

Larry Cashdollar

API
CVEs, 365 days286 all time, 17 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationLarry Cashdollar
RoleCNA
TypeResearcher
Reports tomitre
ScopeThird-party products he researches that are not in another CNA’s scope.
Advisorieshttp://www.vapidlabs.com/

Latest CVEs · RSS

  • CVE-2026-22755 2026-01-13 · CVSS 9.3
    Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Vivotek Affected device model numbers are FD8365, FD8365v2,
  • CVE-2025-12592 2025-11-19 · CVSS 9.3
    Legacy Vivotek Device firmware uses default credetials for the root and user login accounts.
  • CVE-2022-40721 2022-10-03
    Arbitrary file upload vulnerability in php uploader
  • CVE-2020-8521 2020-07-07
    SQL injection with start and length parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql
  • CVE-2020-8520 2020-07-07
    SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql
  • CVE-2020-8519 2020-07-07
    SQL injection with the search parameter in Records.php for phpzag live add edit delete data tables records with ajax php mysql
  • CVE-2019-8293 2019-12-23
    Due to a logic error in the code, upload-image-with-ajax v1.0 allows arbitrary files to be uploaded to the web root allowing code execution.
  • CVE-2019-8288 2019-10-01
    Vulnerability in Online Store v1.0, Stored XSS in user_view.php where adidas_member_user variable is not sanitized.
  • CVE-2019-8292 2019-10-01
    Online Store System v1.0 delete_product.php doesn't check to see if a user authtenticated or has administrative rights allowing arbitrary product deletion.
  • CVE-2019-8291 2019-10-01
    Online Store System v1.0 delete_file.php doesn't check to see if a user has administrative rights nor does it check for path traversal.
  • CVE-2019-8289 2019-10-01
    Vulnerability in Online Store v1.0, stored XSS in admin/user_view.php adidas_member_email variable
  • CVE-2019-8290 2019-10-01
    Vulnerability in Online Store v1.0, The registration form requirements for the member email format can be bypassed by posting directly to sent_register.php allo
  • CVE-2015-4615 2019-02-15
    Vulnerability in Easy2map-photos WordPress Plugin v1.09 allows SQL Injection via unsanitized mapTemplateName, mapName, mapSettingsXML, parentCSSXML, photoCSSXML
  • CVE-2013-2565 2019-02-15
    A vulnerability in Mambo CMS v4.6.5 where the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root path of the webserver.
  • CVE-2015-4617 2019-02-15
    Vulnerability in Easy2map-photos WordPress Plugin v1.09 MapPinImageUpload.php and MapPinIconSave.php allows path traversal when specifying file names creating f
  • CVE-2013-5654 2019-02-15
    Vulnerability in YingZhi Python Programming Language v1.9 allows arbitrary anonymous uploads to the phone's storage
  • CVE-2013-2516 2019-02-15
    Vulnerability in FileUtils v0.7, Ruby Gem Fileutils <= v0.7 Command Injection vulnerability in user supplied url variable that is passed to the shell.
  • CVE-2018-1002008 2018-12-03
    There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to expl
  • CVE-2018-1002007 2018-12-03
    There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to expl
  • CVE-2018-1002006 2018-12-03
    These vulnerabilities require administrative privileges to exploit. There is an XSS vulnerability in integration-contact-form.html.php:14: via POST request vari
  • CVE-2018-1002005 2018-12-03
    These vulnerabilities require administrative privileges to exploit. There is an XSS vulnerability in bft_list.html.php:43: via the filter_signup_date parameter.
  • CVE-2018-1002004 2018-12-03
    There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to expl
  • CVE-2018-1002003 2018-12-03
    There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to expl
  • CVE-2018-1002002 2018-12-03
    There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to expl
  • CVE-2018-1002001 2018-12-03
    There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to expl

All CVE Program partners