Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,750
Erlang
35
GitHub Actions
29
Go
2,323
Maven
5,000+
npm
3,956
NuGet
712
pip
3,739
Pub
12
RubyGems
921
Rust
973
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

1,956 advisories

Loading
File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()`... High Unreviewed
CVE-2011-10007 was published Jun 5, 2025
ASUS RT-AX55 v3.0.0.4.386.51598 was discovered to contain an authenticated command injection... High Unreviewed
CVE-2023-39780 was published Sep 11, 2023
An OS Command Injection issue exists in wivia 5 all versions. If this vulnerability is exploited,... High Unreviewed
CVE-2025-41385 was published May 30, 2025
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote... High Unreviewed
CVE-2022-37878 was published Sep 21, 2022
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote... High Unreviewed
CVE-2022-37880 was published Sep 21, 2022
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote... High Unreviewed
CVE-2022-37882 was published Sep 21, 2022
A vulnerability, which was classified as critical, has been found in Tenda AC8, AC10 and AC18 16... High Unreviewed
CVE-2025-0528 was published Jan 17, 2025
On MOBOTIX P3 cameras before MX-V4.7.2.18 and Mx6 cameras before MX-V5.2.0.61, the tcpdump... High Unreviewed
CVE-2023-34873 was published May 23, 2025
Unsanitized input when setting a locale file leads to shell injection in mIPC camera firmware 5.3... High Unreviewed
CVE-2022-40785 was published Sep 27, 2022
eCharge Hardy Barth cPH2 index.php Command Injection Remote Code Execution Vulnerability. This... High Unreviewed
CVE-2025-3883 was published May 22, 2025
eCharge Hardy Barth cPH2 nwcheckexec.php dest Command Injection Remote Code Execution... High Unreviewed
CVE-2025-3882 was published May 22, 2025
eCharge Hardy Barth cPH2 check_req.php ntp Command Injection Remote Code Execution Vulnerability.... High Unreviewed
CVE-2025-3881 was published May 22, 2025
The vCenter Server contains an authenticated command-execution vulnerability. A malicious actor... High Unreviewed
CVE-2025-41225 was published May 20, 2025
Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG... High Unreviewed
CVE-2022-41751 was published Oct 17, 2022
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions with... High Unreviewed
CVE-2025-40582 was published May 13, 2025
Cellopoint Cellos v4.1.10 Build 20190922 does not validate URL inputted properly. With the cookie... High Unreviewed
CVE-2020-17384 was published May 24, 2022
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can... High Unreviewed
CVE-2025-32821 was published May 7, 2025
A vulnerability in the web-based management interface of the Wireless LAN Controller feature of... High Unreviewed
CVE-2025-20186 was published May 7, 2025
D-Link DIR-816 A2 1.10 B05 was discovered to contain multiple command injection vulnerabilities... High Unreviewed
CVE-2022-42999 was published Oct 27, 2022
The remote upgrade feature in Guardzilla GZ180 devices allow command injection via a crafted new... High Unreviewed
CVE-2018-18600 was published May 13, 2022
Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its... High Unreviewed
CVE-2024-0166 was published Feb 12, 2024
/cgi-bin/activate.cgi on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows... High Unreviewed
CVE-2020-10826 was published May 24, 2022
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.... High Unreviewed
CVE-2022-37898 was published Dec 12, 2022
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.... High Unreviewed
CVE-2022-37899 was published Dec 12, 2022
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.... High Unreviewed
CVE-2022-37901 was published Dec 12, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database