Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,780
Erlang
36
GitHub Actions
29
Go
2,344
Maven
5,000+
npm
3,973
NuGet
719
pip
3,770
Pub
12
RubyGems
923
Rust
978
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

100,546 advisories

Loading
VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the... High Unreviewed
CVE-2024-46330 was published Sep 26, 2024
VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the... High Unreviewed
CVE-2024-46329 was published Sep 26, 2024
VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain hardcoded credentials for several... High Unreviewed
CVE-2024-46328 was published Sep 26, 2024
Incorrect Authorization vulnerability in National Keep Cyber Security Services CyberMath allows... High Unreviewed
CVE-2024-7108 was published Sep 26, 2024
Vulnerability in Clibo Manager v1.1.9.1 that could allow an attacker to execute an stored Cross... High Unreviewed
CVE-2024-9198 was published Sep 26, 2024
The Advanced File Manager plugin for WordPress is vulnerable to Local JavaScript File Inclusion... High Unreviewed
CVE-2024-8704 was published Sep 26, 2024
The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads via the ... High Unreviewed
CVE-2024-8126 was published Sep 26, 2024
The WordPress Visitors plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a... High Unreviewed
CVE-2022-4541 was published Sep 26, 2024
The Jupiter X Core plugin for WordPress is vulnerable to authentication bypass in all versions up... High Unreviewed
CVE-2024-7781 was published Sep 26, 2024
User interface (UI) misrepresentation of critical information issue exists in multiple Home... High Unreviewed
CVE-2024-47045 was published Sep 26, 2024
Inclusion of functionality from untrusted control sphere vulnerability in OpenSSL DLL component... High Unreviewed
CVE-2022-49038 was published Sep 26, 2024
Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in vss... High Unreviewed
CVE-2023-52946 was published Sep 26, 2024
An arbitrary file deletion vulnerability exists in PaperCut NG/MF, specifically affecting Windows... High Unreviewed
CVE-2024-8404 was published Sep 26, 2024
A vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined Access ... High Unreviewed
CVE-2024-20480 was published Sep 25, 2024
A vulnerability in the implementation of the IPv4 fragmentation reassembly code in Cisco IOS XE... High Unreviewed
CVE-2024-20467 was published Sep 25, 2024
A vulnerability in the Protocol Independent Multicast (PIM) feature of Cisco IOS XE Software... High Unreviewed
CVE-2024-20464 was published Sep 25, 2024
A vulnerability in the process that classifies traffic that is going to the Unified Threat... High Unreviewed
CVE-2024-20455 was published Sep 25, 2024
Gigastone TR1 Travel Router R101 v1.0.2 is vulnerable to Command Injection. This allows an... High Unreviewed
CVE-2024-44678 was published Sep 25, 2024
An issue in TheGreenBow Windows Standard VPN Client 6.87.108 (and older), Windows Enterprise VPN... High Unreviewed
CVE-2024-45750 was published Sep 25, 2024
An issue was discovered in AdaCore ada_web_services 20.0 allows an attacker to escalate... High Unreviewed
CVE-2024-41708 was published Sep 25, 2024
A vulnerability in the Resource Reservation Protocol (RSVP) feature of Cisco IOS Software and... High Unreviewed
CVE-2024-20433 was published Sep 25, 2024
A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an... High Unreviewed
CVE-2024-20437 was published Sep 25, 2024
A vulnerability in the SSH server of Cisco Catalyst Center, formerly Cisco DNA Center, could... High Unreviewed
CVE-2024-20350 was published Sep 25, 2024
A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service... High Unreviewed
CVE-2024-20436 was published Sep 25, 2024
Directory Traversal vulnerability in Centro de Tecnologia da Informaco Renato Archer InVesalius3... High Unreviewed
CVE-2024-44825 was published Sep 25, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database