GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,237
Erlang
31
GitHub Actions
20
Go
2,000
Maven
5,000+
npm
3,711
NuGet
661
pip
3,383
Pub
11
RubyGems
885
Rust
849
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
3,339 advisories
Filter by severity
The The Request a Quote for WooCommerce and Elementor – Get a Quote Button – Product Enquiry Form...
High
Unreviewed
CVE-2024-11034
was published
Nov 23, 2024
Possible Command injection Vulnerability
in iManager has been discovered in
OpenText™ iManager 3...
High
Unreviewed
CVE-2021-38117
was published
Nov 22, 2024
There exists a code execution vulnerability in the Car App Android Jetpack Library. In the...
High
Unreviewed
CVE-2024-10382
was published
Nov 20, 2024
Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Supsystic...
Critical
Unreviewed
CVE-2024-52434
was published
Nov 18, 2024
Pega Platform versions 6.x to Infinity 24.1.1 are affected by an issue with Improper Control of...
Critical
Unreviewed
CVE-2024-10094
was published
Nov 20, 2024
Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Saso...
Critical
Unreviewed
CVE-2024-52427
was published
Nov 18, 2024
The The WooCommerce Product Table Lite plugin for WordPress is vulnerable to arbitrary shortcode...
High
Unreviewed
CVE-2024-10899
was published
Nov 20, 2024
PyMOL 2.5.0 contains a vulnerability in its "Run Script" function, which allows the execution of...
Critical
Unreviewed
CVE-2024-50636
was published
Nov 12, 2024
An issue in Zimbra Collaboration ZCS v.8.8.15 and v.9.0 allows an attacker to execute arbitrary...
Critical
Unreviewed
CVE-2023-29382
was published
Jul 6, 2023
Insecure Permissions vulnerability in Micro-star International MSI Center Pro 2.1.37.0 allows a...
High
Unreviewed
CVE-2024-50804
was published
Nov 18, 2024
Jpress until v5.1.1 has arbitrary file uploads on the windows platform, and the construction of...
Critical
Unreviewed
CVE-2024-50919
was published
Nov 18, 2024
An issue was discovered in Veritas NetBackup before 10.5. This only applies to NetBackup...
High
Unreviewed
CVE-2024-52945
was published
Nov 18, 2024
The The WPB Popup for Contact Form 7 – Showing The Contact Form 7 Popup on Button Click – CF7...
High
Unreviewed
CVE-2024-11038
was published
Nov 19, 2024
The The GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in...
High
Unreviewed
CVE-2024-11036
was published
Nov 19, 2024
The The Uix Slideshow plugin for WordPress is vulnerable to arbitrary shortcode execution in all...
High
Unreviewed
CVE-2024-9839
was published
Nov 16, 2024
The The Drop Shadow Boxes plugin for WordPress is vulnerable to arbitrary shortcode execution in...
Moderate
Unreviewed
CVE-2024-10262
was published
Nov 16, 2024
HEVC Video Extensions Remote Code Execution Vulnerability.
High
Unreviewed
CVE-2022-21917
was published
Jan 12, 2022
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability. This CVE ID is unique...
Moderate
Unreviewed
CVE-2022-21928
was published
Jan 12, 2022
Microsoft Exchange Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE...
Critical
Unreviewed
CVE-2022-21846
was published
Jan 12, 2022
Microsoft Word Remote Code Execution Vulnerability.
High
Unreviewed
CVE-2022-21842
was published
Jan 12, 2022
Microsoft SharePoint Server Remote Code Execution Vulnerability.
High
Unreviewed
CVE-2022-21837
was published
Jan 12, 2022
In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This...
High
Unreviewed
CVE-2024-30202
was published
Mar 25, 2024
Windows Geolocation Service Remote Code Execution Vulnerability.
High
Unreviewed
CVE-2022-21878
was published
Jan 12, 2022
Windows Security Center API Remote Code Execution Vulnerability.
High
Unreviewed
CVE-2022-21874
was published
Jan 12, 2022
Microsoft Office Remote Code Execution Vulnerability.
High
Unreviewed
CVE-2022-21840
was published
Jan 12, 2022
ProTip!
Advisories are also available from the
GraphQL API