GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,757
Erlang
35
GitHub Actions
29
Go
2,327
Maven
5,000+
npm
3,960
NuGet
712
pip
3,741
Pub
12
RubyGems
921
Rust
973
Swift
38
Unreviewed advisories
All unreviewed
5,000+
281,289 advisories
Filter by severity
An improper input validation discovered in
Avaya Call Management System
could allow an...
Critical
Unreviewed
CVE-2025-1041
was published
Jun 10, 2025
A vulnerability was found in Open5GS up to 2.7.3. It has been declared as problematic. Affected...
Moderate
Unreviewed
CVE-2025-5935
was published
Jun 10, 2025
The Abandoned Cart Pro for WooCommerce plugin contains an authenticated arbitrary file upload...
High
Unreviewed
CVE-2025-4387
was published
Jun 10, 2025
A vulnerability was found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713 and classified as...
High
Unreviewed
CVE-2025-5911
was published
Jun 10, 2025
A vulnerability has been found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713 and classified as...
High
Unreviewed
CVE-2025-5910
was published
Jun 10, 2025
A vulnerability classified as critical has been found in code-projects Laundry System 1.0. This...
Moderate
Unreviewed
CVE-2025-5906
was published
Jun 10, 2025
A vulnerability, which was classified as critical, was found in TOTOLINK EX1200T up to 4.1.2cu...
High
Unreviewed
CVE-2025-5909
was published
Jun 10, 2025
SAP S/4HANA (Bank Account Application) does not perform necessary authorization checks. This...
Moderate
Unreviewed
CVE-2025-42991
was published
Jun 10, 2025
SAP MDM Server Read function allows an attacker to send specially crafted packets which could...
High
Unreviewed
CVE-2025-42995
was published
Jun 10, 2025
Under certain conditions, SAP Business Objects Business Intelligence Platform allows an...
Low
Unreviewed
CVE-2025-42988
was published
Jun 10, 2025
The security settings in the SAP Business One Integration Framework are not adequately checked,...
Moderate
Unreviewed
CVE-2025-42998
was published
Jun 10, 2025
A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T up to 4.1...
High
Unreviewed
CVE-2025-5908
was published
Jun 10, 2025
SAP S/4HANA Manage Central Purchase Contract does not perform necessary authorization checks for...
Moderate
Unreviewed
CVE-2025-42984
was published
Jun 10, 2025
A vulnerability classified as critical was found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713...
High
Unreviewed
CVE-2025-5907
was published
Jun 10, 2025
RFC inbound processing�does not perform necessary authorization checks for an authenticated user,...
Critical
Unreviewed
CVE-2025-42989
was published
Jun 10, 2025
SAP MDM Server ReadString function allows an attacker to send specially crafted packets which...
High
Unreviewed
CVE-2025-42994
was published
Jun 10, 2025
Unprotected SAPUI5 applications allow an attacker with basic privileges to inject malicious HTML...
Low
Unreviewed
CVE-2025-42990
was published
Jun 10, 2025
Due to a missing authorization check vulnerability in SAP S/4HANA (Enterprise Event Enablement),...
Moderate
Unreviewed
CVE-2025-42993
was published
Jun 10, 2025
SAP Manage Processing Rules (For Bank Statement) allows an attacker with basic privileges to edit...
Moderate
Unreviewed
CVE-2025-42987
was published
Jun 10, 2025
SAP MDM Server allows an attacker to gain control of existing client sessions and execute certain...
Moderate
Unreviewed
CVE-2025-42996
was published
Jun 10, 2025
SAP GRC allows a non-administrative user to access and initiate transaction which could allow...
High
Unreviewed
CVE-2025-42982
was published
Jun 10, 2025
SAP Business Warehouse and SAP Plug-In Basis allows an authenticated attacker to drop arbitrary...
High
Unreviewed
CVE-2025-42983
was published
Jun 10, 2025
Due to a Cross-Site Scripting vulnerability in SAP NetWeaver (ABAP Keyword Documentation), an...
Moderate
Unreviewed
CVE-2025-31325
was published
Jun 10, 2025
SAP NetWeaver Visual Composer contains a Directory Traversal vulnerability caused by insufficient...
High
Unreviewed
CVE-2025-42977
was published
Jun 10, 2025
ProTip!
Advisories are also available from the
GraphQL API