GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,262
Erlang
31
GitHub Actions
21
Go
2,030
Maven
5,000+
npm
3,732
NuGet
662
pip
3,409
Pub
12
RubyGems
891
Rust
865
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
38 advisories
Filter by severity
Snap One OvrC Pro devices versions 7.2 and prior do not validate firmware...
Critical
Unreviewed
CVE-2023-28386
was published
May 22, 2023
Affected devices beacon to eCharge cloud infrastructure asking if there are any command they...
Critical
Unreviewed
CVE-2024-11666
was published
Nov 25, 2024
Insufficient Verification of Data Authenticity vulnerability in Mitsubishi Electric Corporation...
Critical
Unreviewed
CVE-2023-4699
was published
Nov 6, 2023
The `fetch()` API and navigation incorrectly shared the same cache, as the cache key did not...
Critical
Unreviewed
CVE-2024-1554
was published
Feb 20, 2024
AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity.
Critical
Unreviewed
CVE-2023-28863
was published
Apr 18, 2023
In PHPJabbers Cleaning Business Software 1.0, lack of verification when changing an email address...
Critical
Unreviewed
CVE-2023-36139
was published
Aug 4, 2023
In PHP Jabbers Class Scheduling System 1.0, lack of verification when changing an email address...
Critical
Unreviewed
CVE-2023-36134
was published
Aug 4, 2023
Controller may be loaded with malicious firmware which could enable remote code execution
Critical
Unreviewed
CVE-2023-25178
was published
Jul 13, 2023
The CMS Commander plugin for WordPress is vulnerable to authorization bypass due to the use of an...
Critical
Unreviewed
CVE-2023-3325
was published
Jun 20, 2023
The Wordapp plugin for WordPress is vulnerable to authorization bypass due to an use of...
Critical
Unreviewed
CVE-2023-2987
was published
May 31, 2023
BlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authenticity check for uploaded...
Critical
Unreviewed
CVE-2023-27748
was published
Apr 13, 2023
FreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is...
Critical
Unreviewed
CVE-2019-11235
was published
May 24, 2022
All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior’s web portal is...
Critical
Unreviewed
CVE-2022-3703
was published
Jul 6, 2023
A CWE-287: Improper Authentication vulnerability exists that could cause an attacker to...
Critical
Unreviewed
CVE-2022-0715
was published
Mar 10, 2022
Lack of root file system integrity checking in Fortinet FortiManager VM application images of all...
Critical
Unreviewed
CVE-2019-6695
was published
May 24, 2022
A remote code execution vulnerability was discovered on Western Digital My Cloud devices where an...
Critical
Unreviewed
CVE-2022-22994
was published
Jan 29, 2022
An arbitrary file download and execution vulnerability was found in the VideoOffice X2.9 and...
Critical
Unreviewed
CVE-2020-7878
was published
Dec 29, 2021
Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and...
Critical
Unreviewed
CVE-2015-3956
was published
May 13, 2022
JFrog Artifactory Pro 6.5.9 has Incorrect Access Control.
Critical
Unreviewed
CVE-2018-19971
was published
May 13, 2022
The Domino web agent in CA Single Sign-On (aka SSO, formerly SiteMinder) R6, R12.0 before SP3...
Critical
Unreviewed
CVE-2015-6853
was published
May 13, 2022
The non-Domino web agents in CA Single Sign-On (aka SSO, formerly SiteMinder) R6, R12.0 before...
Critical
Unreviewed
CVE-2015-6854
was published
May 13, 2022
HashiCorp Boundary up to 0.10.1 did not properly perform data integrity checks to ensure the...
Critical
Unreviewed
CVE-2022-36130
was published
Sep 2, 2022
The npm ci command in npm 7.x and 8.x through 8.1.3 proceeds with an installation even if...
Critical
Unreviewed
CVE-2021-43616
was published
May 24, 2022
Insufficient Verification of Data Authenticity in Nagios Fusion 4.1.8 and earlier and Nagios XI 5...
Critical
Unreviewed
CVE-2020-28900
was published
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API