GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,237
Erlang
31
GitHub Actions
20
Go
2,000
Maven
5,000+
npm
3,711
NuGet
661
pip
3,383
Pub
11
RubyGems
885
Rust
849
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
70 advisories
Filter by severity
An issue was discovered in OverIT Geocall before 8.0. An authenticated user who has the Test...
High
Unreviewed
CVE-2022-22834
was published
Mar 11, 2022
ALIN MDaemon Security Gateway through 8.5.0 allows XML Injection.
Moderate
Unreviewed
CVE-2022-25356
was published
Apr 6, 2022
A vulnerability in CLI of Cisco Firepower Threat Defense (FTD) Software could allow an...
High
Unreviewed
CVE-2022-20729
was published
May 4, 2022
D-Link DIR-865L has PHP File Inclusion in the router xml file.
High
Unreviewed
CVE-2013-4857
was published
May 5, 2022
An XML injection vulnerability in Junos OS CLI can allow a locally authenticated user to elevate...
High
Unreviewed
CVE-2017-10603
was published
May 13, 2022
SAP BusinessObjects Business Intelligence Platform (CMC Module), versions 4.10, 4.20 and 4.30,...
High
Unreviewed
CVE-2019-0268
was published
May 14, 2022
Knowledge Management (XMLForms) in SAP NetWeaver, versions 7.30, 7.31, 7.40 and 7.50 does not...
High
Unreviewed
CVE-2018-2477
was published
May 14, 2022
XML injection vulnerability exists in the file of DedeCMS V5.7 SP2 version, which can be utilized...
High
Unreviewed
CVE-2018-16785
was published
May 14, 2022
DedeCMS 5.7 SP2 allows XML injection, and resultant remote code execution, via a "<file type=...
High
Unreviewed
CVE-2018-16784
was published
May 14, 2022
Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18,...
High
Unreviewed
CVE-2008-5024
was published
May 14, 2022
Openpsa contains a XML Injection vulnerability in RSS file upload feature that can result in...
High
Unreviewed
CVE-2018-1000526
was published
May 14, 2022
XPath injection vulnerability in Epic MyChart allows remote attackers to access contents of an...
High
Unreviewed
CVE-2016-6272
was published
May 14, 2022
The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to conduct XML injection...
Critical
Unreviewed
CVE-2013-7429
was published
May 17, 2022
Microsec e-Szigno before 3.2.7.12 allows remote attackers to perform XML signature wrapping...
High
Unreviewed
CVE-2015-3931
was published
May 17, 2022
Netlock Mokka before 2.7.8.1204 allows remote attackers to perform XML signature wrapping attacks...
High
Unreviewed
CVE-2015-3932
was published
May 17, 2022
In Ambari 2.4.x (before 2.4.3) and Ambari 2.5.0, an authorized user of the Ambari Hive View may...
High
Unreviewed
CVE-2017-5654
was published
May 17, 2022
IBM BigFix Remote Control before 9.1.3 allows remote attackers to conduct XML injection attacks...
Moderate
Unreviewed
CVE-2016-2932
was published
May 17, 2022
The Zoom Client for Meetings (for Android, iOS, Linux, MacOS, and Windows) before version 5.10.0...
High
Unreviewed
CVE-2022-22784
was published
May 19, 2022
An issue was discovered on D-Link DIR-818LW devices from 2.05.B03 to 2.06B01 BETA. There is a...
High
Unreviewed
CVE-2019-12787
was published
May 24, 2022
Axway SecureTransport 5.x through 5.3 (or 5.x through 5.5 with certain API configuration) is...
Critical
Unreviewed
CVE-2019-14277
was published
May 24, 2022
NSA Ghidra through 9.0.4, when experimental mode is enabled, allows arbitrary code execution if...
Critical
Unreviewed
CVE-2019-16941
was published
May 24, 2022
IBM Security Directory Server 6.4.0 does not properly neutralize special elements that are used...
High
Unreviewed
CVE-2019-4539
was published
May 24, 2022
Due to missing input validation, SAP Financial Consolidation, before versions 10.0 and 10.1,...
Moderate
Unreviewed
CVE-2019-0370
was published
May 24, 2022
XML Language Server (aka lsp4xml) before 0.9.1, as used in Red Hat XML Language Support (aka...
High
Unreviewed
CVE-2019-18213
was published
May 24, 2022
ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation and execution via...
High
Unreviewed
CVE-2019-17323
was published
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API