Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,224
Erlang
31
GitHub Actions
19
Go
1,990
Maven
5,000+
npm
3,706
NuGet
661
pip
3,336
Pub
11
RubyGems
884
Rust
845
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

9,937 advisories

Loading
The CM Table Of Contents WordPress plugin before 1.2.3 does not have CSRF check in place when... Low Unreviewed
CVE-2024-5030 was published Nov 18, 2024
Hathway Skyworth Router CM5100-511 v4.1.1.24 was discovered to store sensitive information about... Low Unreviewed
CVE-2024-46383 was published Nov 15, 2024
A Cross-Site Scripting (XSS) vulnerability in phpipam/phpipam versions prior to 1.4.7 allows... Low Unreviewed
CVE-2022-1226 was published Nov 15, 2024
A SQL Injection vulnerability was found in /admin/add_content.php in kashipara E-learning... Low Unreviewed
CVE-2024-50826 was published Nov 14, 2024
A SQL Injection vulnerability was found in /admin/calendar_of_events.php in kashipara E-learning... Low Unreviewed
CVE-2024-50830 was published Nov 14, 2024
A SQL Injection was found in /admin/admin_user.php in kashipara E-learning Management System... Low Unreviewed
CVE-2024-50831 was published Nov 14, 2024
A SQL Injection vulnerability was found in /admin/school_year.php in kashipara E-learning... Low Unreviewed
CVE-2024-50825 was published Nov 14, 2024
A SQL Injection vulnerability was found in /admin/edit_department.php in kashipara E-learning... Low Unreviewed
CVE-2024-50828 was published Nov 14, 2024
A SQL Injection vulnerability was found in /admin/edit_subject.php in kashipara E-learning... Low Unreviewed
CVE-2024-50829 was published Nov 14, 2024
A SQL Injection vulnerability was found in /admin/add_subject.php in kashipara E-learning... Low Unreviewed
CVE-2024-50827 was published Nov 14, 2024
A SQL Injection vulnerability was found in /admin/login.php in kashipara E-learning Management... Low Unreviewed
CVE-2024-50823 was published Nov 14, 2024
A SQL Injection vulnerability was found in /admin/class.php in kashipara E-learning Management... Low Unreviewed
CVE-2024-50824 was published Nov 14, 2024
HCL Connections is vulnerable to a broken access control vulnerability that may allow an... Low Unreviewed
CVE-2024-42188 was published Nov 14, 2024
A SQL Injection vulnerability was found in /admin/edit_class.php in kashipara E-learning... Low Unreviewed
CVE-2024-50832 was published Nov 14, 2024
A SQL Injection vulnerability was found in /login.php in KASHIPARA E-learning Management System... Low Unreviewed
CVE-2024-50833 was published Nov 14, 2024
A SQL Injection was found in /admin/teachers.php in KASHIPARA E-learning Management System... Low Unreviewed
CVE-2024-50834 was published Nov 14, 2024
A SQL Injection vulnerability was found in /admin/edit_student.php in KASHIPARA E-learning... Low Unreviewed
CVE-2024-50835 was published Nov 14, 2024
An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.3 before 17... Low Unreviewed
CVE-2024-9633 was published Nov 14, 2024
Client use of server error message in PostgreSQL allows a server not trusted under current SSL or... Low Unreviewed
CVE-2024-10977 was published Nov 14, 2024
IBM Security ReaQta 3.12 is vulnerable to cross-site scripting. This vulnerability allows a... Low Unreviewed
CVE-2024-45099 was published Nov 14, 2024
Protection mechanism failure in the SPP for some Intel(R) Xeon(R) processor family (E-Core) may... Low Unreviewed
CVE-2024-38660 was published Nov 13, 2024
Out-of-bounds write in some Intel(R) SGX SDK software may allow an authenticated user to... Low Unreviewed
CVE-2024-34776 was published Nov 13, 2024
Improper Input Validation in some Intel(R) VROC software before version 8.6.0.2003 may allow an... Low Unreviewed
CVE-2024-32485 was published Nov 13, 2024
Out-of-bounds read for some OpenCL(TM) software may allow an authenticated user to potentially... Low Unreviewed
CVE-2024-32667 was published Nov 13, 2024
NULL pointer dereference in some Intel(R) VPL software before version 24.1.4 may allow an... Low Unreviewed
CVE-2024-28030 was published Nov 13, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database