Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Bumsys Project

First CVE: Jan 26, 2023Active for: 3 yearsTotal CVEs: 8

Bumsys Project maintains a single web application product that, despite modest volume, occupies a position among the more prominent entities tracked in the vulnerability landscape. The recurring weakness classes—SQL injection, cross-site scripting, cross-site request forgery, PHP remote file inclusion, and external file path control—reflect common input-handling and request-validation gaps endemic to web applications, and the vendor's disclosures frequently acquire public exploit tooling. Current severity, exploitation activity, and exposure counts are shown alongside this summary.

FAUCET AI Generated
8
Total CVEs
More Total CVEs than 90% of tracked vendors
8.0
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 99% of tracked vendors
7.3
Avg CVSS Score
Higher Avg CVSS Score than 55% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Bumsys Project over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jan 26, 2023
3 years ago
Most Recent CVE
May 22, 2023
1,159 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (8 CVEs).

8 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2023-0455HIGH
Unrestricted Upload of File with Dangerous Type in GitHub repository unilogies/bumsys prior to v1.0.3-beta.
Jan 26, 20238.841NOYES
CVE-2023-2554HIGH
External Control of File Name or Path in GitHub repository unilogies/bumsys prior to 2.2.0.
May 5, 20237.238NONO
CVE-2023-1362MEDIUM
Improper Restriction of Rendered UI Layers or Frames in GitHub repository unilogies/bumsys prior to v2.0.2.
Mar 13, 20236.131NOYES
CVE-2023-2551HIGH
PHP Remote File Inclusion in GitHub repository unilogies/bumsys prior to 2.1.1.
May 5, 20238.829NONO
CVE-2023-2832HIGH
SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0.
May 22, 20237.223NONO
CVE-2023-1361MEDIUM
SQL Injection in GitHub repository unilogies/bumsys prior to v2.0.2.
Mar 13, 20236.523NONO
CVE-2023-2552HIGH
Cross-Site Request Forgery (CSRF) in GitHub repository unilogies/bumsys prior to 2.1.1.
May 5, 20238.822NONO
CVE-2023-2553MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository unilogies/bumsys prior to 2.2.0.
May 5, 20235.420NONO
View all 8 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products8 CVEs
38%
63%
Severity distribution among all CVEs352,294 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network8 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low8 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None5 (62.5%)
Unknown0 (0.0%)
Required3 (37.5%)
Privileges Required
Low4 (50.0%)
High2 (25.0%)
None2 (25.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (8 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
1 CVE
12.5% of CVEs· 97th percentile
ExploitDB
1 CVE
12.5% of CVEs· 76th percentile

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Bumsys Project.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Bumsys Project — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Bumsys Project's Products

View all 1 CNAs →

Top CWEs