Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,248
Erlang
31
GitHub Actions
21
Go
2,017
Maven
5,000+
npm
3,722
NuGet
662
pip
3,400
Pub
11
RubyGems
890
Rust
857
Swift
36
Unreviewed advisories
All unreviewed
5,000+

3,007 advisories

Loading
The Product Table for WooCommerce by CodeAstrology (wooproducttable.com) plugin for WordPress is... Moderate Unreviewed
CVE-2024-10813 was published Nov 23, 2024
The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is... Moderate Unreviewed
CVE-2024-10606 was published Nov 23, 2024
A vulnerability was found in 3Scale. There is no auth mechanism to see a PDF invoice of a... Moderate Unreviewed
CVE-2024-9671 was published Oct 9, 2024
The com.uaudio.bsd.helper service, responsible for handling privileged operations, fails to... High Unreviewed
CVE-2024-8272 was published Nov 25, 2024
An issue was discovered in Zammad before 6.3.0. An authenticated agent could perform a remote... Moderate Unreviewed
CVE-2024-33667 was published Apr 26, 2024
Dell Wyse Management Suite, version WMS 4.4 and prior, contain a Missing Authorization... Moderate Unreviewed
CVE-2024-49596 was published Nov 26, 2024
The Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress is vulnerable to... Critical Unreviewed
CVE-2024-10542 was published Nov 26, 2024
The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable... Moderate Unreviewed
CVE-2024-10579 was published Nov 26, 2024
The Ultimate YouTube Video & Shorts Player With Vimeo plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2024-11354 was published Nov 26, 2024
The My Contador lesr plugin for WordPress is vulnerable to unauthorized access of data due to a... Moderate Unreviewed
CVE-2024-11334 was published Nov 26, 2024
In applyCustomDescription of SaveUi.java, there is a possible way to view images belonging to a... Low Unreviewed
CVE-2024-0037 was published Feb 16, 2024
The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to privilege... High Unreviewed
CVE-2024-9941 was published Nov 23, 2024
An issue has been discovered in GitLab CE/EE affecting all versions from 8.12 before 17.4.5, 17.5... High Unreviewed
CVE-2024-8114 was published Nov 26, 2024
The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable... Moderate Unreviewed
CVE-2024-10580 was published Nov 27, 2024
In Network Adapter Service, there is a possible missing permission check. This could lead to... Moderate Unreviewed
CVE-2023-52352 was published Apr 8, 2024
The Image Alt Text plugin for WordPress is vulnerable to unauthorized modification of data| due... Moderate Unreviewed
CVE-2024-11918 was published Nov 28, 2024
In checkPermissions of RecognitionService.java, there is a possible permissions bypass due to a... High Unreviewed
CVE-2017-13316 was published Nov 27, 2024
Missing Authorization vulnerability in AutoQuiz AI Quiz allows Accessing Functionality Not... Moderate Unreviewed
CVE-2024-53708 was published Dec 2, 2024
Missing Authorization vulnerability in E-goi Smart Marketing SMS and Newsletters Forms allows... Moderate Unreviewed
CVE-2024-53784 was published Dec 2, 2024
VMware Cloud Director contains an Improper Privilege Management vulnerability. An... Moderate Unreviewed
CVE-2024-22272 was published Jun 27, 2024
Restricted Views backed objects (OSV1) could be bypassed under specific circumstances due to a... Moderate Unreviewed
CVE-2024-49581 was published Dec 2, 2024
The IdeaPush plugin for WordPress is vulnerable to unauthorized modification of data due to a... Moderate Unreviewed
CVE-2024-11844 was published Dec 3, 2024
An issue was discovered in Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware... High Unreviewed
CVE-2024-53938 was published Dec 3, 2024
The Eleblog – Elementor Blog And Magazine Addons plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2024-10663 was published Dec 4, 2024
The Knowledge Base documentation & wiki plugin – BasePress Docs plugin for WordPress is... Moderate Unreviewed
CVE-2024-10664 was published Dec 4, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database