Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,303
Erlang
31
GitHub Actions
21
Go
2,072
Maven
5,000+
npm
3,744
NuGet
669
pip
3,430
Pub
12
RubyGems
892
Rust
880
Swift
36
Unreviewed advisories
All unreviewed
5,000+

4,034 advisories

Loading
Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2,... Moderate Unreviewed
CVE-2024-28005 was published Mar 28, 2024
SAP BusinessObjects Business Intelligence Platform allows an authenticated user with restricted... Moderate Unreviewed
CVE-2025-0060 was published Jan 14, 2025
MonicaHQ v4.1.1 was discovered to contain an authenticated Client-Side Injection vulnerability... Moderate Unreviewed
CVE-2024-54997 was published Jan 10, 2025
MonicaHQ v4.1.2 was discovered to contain a Client-Side Injection vulnerability via the last_name... Moderate Unreviewed
CVE-2024-54999 was published Jan 13, 2025
In Code-Projects Online Car Rental System 1.0, the file upload feature does not validate file... Moderate Unreviewed
CVE-2024-57487 was published Jan 13, 2025
There is a MEDIUM severity vulnerability affecting CPython. The email module didn’t properly... Moderate Unreviewed
CVE-2024-6923 was published Aug 1, 2024
A vulnerability was found in PbootCMS up to 3.2.3. It has been classified as critical. This... Moderate Unreviewed
CVE-2024-12789 was published Dec 19, 2024
The administrator is able to configure an insecure captive portal script High Unreviewed
CVE-2024-9132 was published Jan 11, 2025
An issue was discovered in Opsview Monitor Agent 6.8. An unauthenticated remote attacker can call... Critical Unreviewed
CVE-2023-28354 was published Jan 10, 2025
XWiki Commons missing escaping of `{` in Velocity escapetool allows remote code execution Critical
CVE-2024-31996 was published for org.xwiki.commons:xwiki-commons-velocity (Maven) Apr 10, 2024
An issue was discovered in South River Technologies TitanFTP NextGen server that allows for a... High Unreviewed
CVE-2023-27744 was published Jun 2, 2023
XWiki Platform: Remote code execution from account via SearchSuggestSourceSheet Critical
CVE-2024-31465 was published for org.xwiki.platform:xwiki-platform-search-ui (Maven) Apr 10, 2024
Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2-... High Unreviewed
CVE-2024-30962 was published Dec 6, 2024
Reportlab vulnerable to remote code execution High
CVE-2023-33733 was published for reportlab (pip) Jun 5, 2023
m3t3kh4n
An authenticated arbitrary file upload vulnerability in the component /module_admin/upload.php of... High Unreviewed
CVE-2024-53564 was published Dec 2, 2024
File Upload Bypass was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary... Critical Unreviewed
CVE-2024-50660 was published Jan 7, 2025
Server-Side Template Injection (SSTI) was found in AdPortal 3.0.39 allows a remote attacker to... Critical Unreviewed
CVE-2024-50658 was published Jan 7, 2025
There is an HTML injection vulnerability in Esri Portal for ArcGIS <=11.0 that may allow a remote... Moderate Unreviewed
CVE-2024-25706 was published Apr 4, 2024
The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution in all... Critical Unreviewed
CVE-2024-11635 was published Jan 8, 2025
The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution, Arbitrary... Critical Unreviewed
CVE-2024-11613 was published Jan 8, 2025
Vulnerability of improper access control in the home screen widget module Impact: Successful... Moderate Unreviewed
CVE-2024-56448 was published Jan 8, 2025
A vulnerability was found in code-projects Online Book Shop 1.0 and classified as problematic.... Moderate Unreviewed
CVE-2025-0295 was published Jan 7, 2025
Improper Control of Generation of Code ('Code Injection') vulnerability in Smackcoders WP... Critical Unreviewed
CVE-2024-56278 was published Jan 7, 2025
The Post Saint: ChatGPT, GPT4, DALL-E, Stable Diffusion, Pexels, Dezgo AI Text & Image Generator... High Unreviewed
CVE-2024-12471 was published Jan 7, 2025
The The Design for Contact Form 7 Style WordPress Plugin – CF7 WOW Styler plugin for WordPress is... Moderate Unreviewed
CVE-2024-12419 was published Jan 7, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database