Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,150
Erlang
30
GitHub Actions
19
Go
1,952
Maven
5,000+
npm
3,684
NuGet
650
pip
3,305
Pub
11
RubyGems
879
Rust
830
Swift
35
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

231,833 advisories

Loading
TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection... Critical Unreviewed
CVE-2023-34215 was published Aug 17, 2023
A vulnerability has been identified in the ioLogik 4000 Series (ioLogik E4200) firmware versions... Moderate Unreviewed
CVE-2023-4227 was published Aug 24, 2023
A vulnerability that allows for unauthorized access has been discovered in MXsecurity versions... High Unreviewed
CVE-2023-39981 was published Sep 2, 2023
TN-5900 Series firmware version v3.3 and prior is vulnerable to improper-authentication... High Unreviewed
CVE-2023-33237 was published Aug 17, 2023
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and... Critical Unreviewed
CVE-2023-33239 was published Aug 17, 2023
SchedMD Slurm before 24.05.4 has Incorrect Authorization. A mistake in authentication handling in... Unknown Unreviewed
CVE-2024-48936 was published Oct 28, 2024
Use of potentially dangerous function issue exists in Chatwork Desktop Application (Windows)... Moderate Unreviewed
CVE-2024-50307 was published Oct 28, 2024
The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to arbitrary PHP Code... High Unreviewed
CVE-2024-9162 was published Oct 28, 2024
TN-5900 Series firmware versions v3.3 and prior are vulnerable to command-injection vulnerability... Critical Unreviewed
CVE-2023-34213 was published Aug 17, 2023
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and... Critical Unreviewed
CVE-2023-34214 was published Aug 17, 2023
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and... Critical Unreviewed
CVE-2023-33238 was published Aug 17, 2023
The PKCS#7 parser in OpenVPN 3 Core Library versions through 3.8.3 did not properly validate the... Moderate Unreviewed
CVE-2023-6247 was published Feb 29, 2024
The Fatal Error Notify WordPress plugin before 1.5.3 does not have authorisation and CSRF checks... Moderate Unreviewed
CVE-2023-7202 was published Feb 27, 2024
Cross Site Scripting (XSS) vulnerability in the Simple Student Attendance System v.1.0 allows a... Moderate Unreviewed
CVE-2023-51802 was published Feb 29, 2024
The eHRD CTMS from Sunnet has an Authentication Bypass vulnerability, allowing unauthenticated... High Unreviewed
CVE-2024-10438 was published Oct 28, 2024
In the Linux kernel, the following vulnerability has been resolved: uprobe: avoid out-of-bounds... Unknown Unreviewed
CVE-2024-50067 was published Oct 28, 2024
A vulnerability was found in didi Super-Jacoco 1.0. It has been declared as critical. This... Moderate Unreviewed
CVE-2024-10435 was published Oct 28, 2024
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Low Unreviewed
CVE-2024-23843 was published Oct 28, 2024
The eHDR CTMS from Sunnet has a SQL Injection vulnerability, allowing unauthenticated remote... Critical Unreviewed
CVE-2024-10440 was published Oct 28, 2024
A vulnerability was found in Tenda AC1206 up to 20241027. It has been classified as critical.... High Unreviewed
CVE-2024-10434 was published Oct 28, 2024
The eHRD CTMS from Sunnet has an Insecure Direct Object Reference (IDOR) vulnerability, allowing... Moderate Unreviewed
CVE-2024-10439 was published Oct 28, 2024
In tmu_get_pi of tmu.c, there is a possible out of bounds read due to improper input validation.... Moderate Unreviewed
CVE-2024-29755 was published Apr 5, 2024
Cross-site request forgery vulnerability in multiple printers and scanners which implement Web... Moderate Unreviewed
CVE-2024-22475 was published Mar 18, 2024
The Font Farsi WordPress plugin through 1.6.6 does not sanitise and escape some of its settings,... Moderate Unreviewed
CVE-2024-1752 was published Apr 8, 2024
The Responsive Gallery Grid WordPress plugin before 2.3.11 does not sanitise and escape some of... Moderate Unreviewed
CVE-2024-1664 was published Apr 9, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database