GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,036
Erlang
29
GitHub Actions
18
Go
1,848
Maven
5,000+
npm
3,582
NuGet
636
pip
3,165
Pub
10
RubyGems
850
Rust
803
Swift
34
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
103,025 advisories
Filter by severity
The Phlox PRO theme for WordPress is vulnerable to Reflected Cross-Site Scripting via search...
Moderate
Unreviewed
CVE-2024-6339
was published
Aug 21, 2024
The Smart Online Order for Clover plugin for WordPress is vulnerable to unauthorized loss of data...
Moderate
Unreviewed
CVE-2024-7032
was published
Aug 21, 2024
The LH Add Media From Url plugin for WordPress is vulnerable to Reflected Cross-Site Scripting...
Moderate
Unreviewed
CVE-2024-7090
was published
Aug 21, 2024
The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is...
Moderate
Unreviewed
CVE-2024-7651
was published
Aug 21, 2024
The OTA Sync Booking Engine Widget plugin for WordPress is vulnerable to Cross-Site Request...
Moderate
Unreviewed
CVE-2024-7647
was published
Aug 21, 2024
The Smart Online Order for Clover plugin for WordPress is vulnerable to unauthorized modification...
Moderate
Unreviewed
CVE-2024-7030
was published
Aug 21, 2024
The WP Testimonial Widget plugin for WordPress is vulnerable to unauthorized modification of data...
Moderate
Unreviewed
CVE-2024-7390
was published
Aug 21, 2024
The Responsive video plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...
Moderate
Unreviewed
CVE-2024-7629
was published
Aug 21, 2024
The Event Espresso 4 Decaf – Event Registration Event Ticketing plugin for WordPress is...
Moderate
Unreviewed
CVE-2024-6883
was published
Aug 21, 2024
The WordSurvey plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ...
Moderate
Unreviewed
CVE-2024-6767
was published
Aug 21, 2024
The Hide My Site plugin for WordPress is vulnerable to Sensitive Information Exposure in all...
Moderate
Unreviewed
CVE-2024-5880
was published
Aug 21, 2024
The Flamix: Bitrix24 and Contact Form 7 integrations plugin for WordPress is vulnerable to Full...
Moderate
Unreviewed
CVE-2024-6568
was published
Aug 21, 2024
A cross-site scripting (XSS) vulnerability in the component /index/index.html of YZNCMS v1.4.2...
Moderate
Unreviewed
CVE-2024-42939
was published
Aug 21, 2024
A vulnerability was found in Genexis Tilgin Home Gateway 322_AS0500-03_05_13_05. It has been...
Moderate
Unreviewed
CVE-2024-8022
was published
Aug 21, 2024
A vulnerability classified as critical has been found in chillzhuang SpringBlade 4.1.0. Affected...
Moderate
Unreviewed
CVE-2024-8023
was published
Aug 21, 2024
An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed...
Moderate
Unreviewed
CVE-2024-6337
was published
Aug 20, 2024
IBM Global Configuration Management 7.0.2 and 7.0.3 could allow an authenticated user to archive...
Moderate
Unreviewed
CVE-2024-41773
was published
Aug 20, 2024
An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server, allowing an...
Moderate
Unreviewed
CVE-2024-7711
was published
Aug 20, 2024
A vulnerability was found in demozx gf_cms 1.0/1.0.1. It has been classified as critical. This...
Moderate
Unreviewed
CVE-2024-8005
was published
Aug 20, 2024
A vulnerability was found in Go-Tribe gotribe-admin 1.0 and classified as problematic. Affected...
Moderate
Unreviewed
CVE-2024-8003
was published
Aug 20, 2024
A Cross-Site Request Forgery (CSRF) in the component edit_group.php of Warehouse Inventory System...
Moderate
Unreviewed
CVE-2024-42580
was published
Aug 20, 2024
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...
Moderate
Unreviewed
CVE-2024-42606
was published
Aug 20, 2024
Friendica 2024.03 is vulnerable to Cross Site Scripting (XSS) in settings/profile via the...
Moderate
Unreviewed
CVE-2024-39094
was published
Aug 20, 2024
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...
Moderate
Unreviewed
CVE-2024-42603
was published
Aug 20, 2024
7Twenty - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site...
Moderate
Unreviewed
CVE-2024-42335
was published
Aug 20, 2024
ProTip!
Advisories are also available from the
GraphQL API