GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,335
Erlang
31
GitHub Actions
22
Go
2,096
Maven
5,000+
npm
3,762
NuGet
678
pip
3,448
Pub
12
RubyGems
892
Rust
882
Swift
37
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
1,383 advisories
Filter by severity
The Import WP – Export and Import CSV and XML files to WordPress plugin for WordPress is...
High
Unreviewed
CVE-2024-13562
was published
Jan 25, 2025
IBM Spectrum Virtualize 8.5, under certain circumstances, could disclose sensitive credential...
High
Unreviewed
CVE-2023-27870
was published
May 11, 2023
An issue was identified in Kibana where a user without access to Fleet can view Elastic Agent...
High
Unreviewed
CVE-2024-43707
was published
Jan 23, 2025
An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2,...
High
Unreviewed
CVE-2017-5521
was published
May 17, 2022
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that...
High
Unreviewed
CVE-2024-12142
was published
Jan 17, 2025
Information exposure in the PMB platform affecting versions 4.2.13 and earlier. This...
High
Unreviewed
CVE-2025-0472
was published
Jan 16, 2025
Exposure of sensitive information to an unauthorized actor vulnerability in Web Server in...
High
Unreviewed
CVE-2022-22680
was published
Feb 8, 2022
The OpenVPN module in Synology DiskStation Manager (DSM) 4.3-3810 update 1 has a hardcoded root...
High
Unreviewed
CVE-2014-2264
was published
May 17, 2022
Insertion of sensitive information into sent data vulnerability in synorelayd in Synology...
High
Unreviewed
CVE-2021-26566
was published
May 24, 2022
Exposure of sensitive information to an unauthorized actor vulnerability in webapi component in...
High
Unreviewed
CVE-2021-29086
was published
May 24, 2022
Information disclosure due to uninitialized variable.
High
Unreviewed
CVE-2017-18306
was published
Nov 26, 2024
WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 fails to validate user sessions, allowing...
High
Unreviewed
CVE-2023-45912
was published
Oct 18, 2023
An attacker can arbitrarily craft malicious DDS Participants (or ROS 2 Nodes) with valid...
High
Unreviewed
CVE-2023-24012
was published
Jan 9, 2025
An attacker can arbitrarily craft malicious DDS Participants (or ROS 2 Nodes) with valid...
High
Unreviewed
CVE-2023-24011
was published
Jan 9, 2025
An attacker can arbitrarily craft malicious DDS Participants (or ROS 2 Nodes) with valid...
High
Unreviewed
CVE-2023-24010
was published
Jan 9, 2025
Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
High
Unreviewed
CVE-2024-47922
was published
Dec 30, 2024
A Password in Configuration File issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0...
High
Unreviewed
CVE-2017-7923
was published
May 17, 2022
The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member...
High
Unreviewed
CVE-2024-8326
was published
Dec 17, 2024
An OData injection vulnerability exists in the BIG-IP Next Central Manager API (URI). Note:...
High
Unreviewed
CVE-2024-21793
was published
May 8, 2024
An SQL injection vulnerability exists in the BIG-IP Next Central Manager API (URI). Note:...
High
Unreviewed
CVE-2024-26026
was published
May 8, 2024
A race condition was addressed with additional validation. This issue is fixed in macOS Sonoma 14...
High
Unreviewed
CVE-2024-23235
was published
Mar 8, 2024
Zohocorp ManageEngine Analytics Plus versions below 6100 are vulnerable to authenticated...
High
Unreviewed
CVE-2024-52323
was published
Nov 27, 2024
Information disclosure possible while audio playback.
High
Unreviewed
CVE-2017-18307
was published
Nov 26, 2024
An exposure of sensitive information vulnerability has been reported to affect QNAP AI Core. If...
High
Unreviewed
CVE-2024-38647
was published
Nov 22, 2024
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HertzBeat.
...
High
Unreviewed
CVE-2024-45791
was published
Nov 18, 2024
ProTip!
Advisories are also available from the
GraphQL API