GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,466
Erlang
33
GitHub Actions
23
Go
2,166
Maven
5,000+
npm
3,830
NuGet
696
pip
3,507
Pub
12
RubyGems
909
Rust
904
Swift
38
Unreviewed advisories
All unreviewed
5,000+
3,670 advisories
Filter by severity
A flaw in Gliffy results in broken authentication through the reset functionality of the...
Moderate
Unreviewed
CVE-2024-5174
was published
Feb 24, 2025
A vulnerability exists in ChurchCRM 5.13.0 that allows an attacker to execute arbitrary...
High
Unreviewed
CVE-2025-1024
was published
Feb 19, 2025
The administrative web interface of a Netgear C7800 Router running firmware version 6.01.07 (and...
Critical
Unreviewed
CVE-2022-41545
was published
Feb 18, 2025
A vulnerability in the TP-Link Archer c20 router with firmware version V6.6_230412 and earlier...
Critical
Unreviewed
CVE-2024-57049
was published
Feb 18, 2025
A vulnerability in the Netgear DGN2200 router with firmware version v1.0.0.46 and earlier permits...
High
Unreviewed
CVE-2024-57046
was published
Feb 18, 2025
A vulnerability in the D-Link DIR-859 router with firmware version A3 1.05 and earlier permits...
Critical
Unreviewed
CVE-2024-57045
was published
Feb 18, 2025
A vulnerability in the TP-Link WR840N v6 router with firmware version 0.9.1 4.16 and earlier...
Critical
Unreviewed
CVE-2024-57050
was published
Feb 18, 2025
A vulnerability exists in ChurchCRM 5.13.0 and prior that allows an attacker to hijack a user's...
High
Unreviewed
CVE-2025-0981
was published
Feb 18, 2025
Logic vulnerability in the mobile application (com.transsion.carlcare) may lead to the risk of...
Critical
Unreviewed
CVE-2025-1298
was published
Feb 14, 2025
The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to...
High
Unreviewed
CVE-2024-13528
was published
Feb 12, 2025
An issue in the SharedConfig class of Telegram Android APK v.11.7.0 allows a physically proximate...
Moderate
Unreviewed
CVE-2024-54916
was published
Feb 12, 2025
Logsign Unified SecOps Platform Authentication Bypass Vulnerability. This vulnerability allows...
Critical
Unreviewed
CVE-2025-1044
was published
Feb 11, 2025
Windows Remote Desktop Configuration Service Tampering Vulnerability
Moderate
Unreviewed
CVE-2025-21349
was published
Feb 11, 2025
An improper authentication in Fortinet FortiClientMac 7.0.11 through 7.2.4 allows attacker to...
Moderate
Unreviewed
CVE-2024-52968
was published
Feb 11, 2025
Improper password reset in PAM Module in Devolutions Server 2024.3.10.0 and earlier allows an...
Moderate
Unreviewed
CVE-2025-1231
was published
Feb 11, 2025
Tenda W18E V16.01.0.8(1625) suffers from authentication bypass in the web management portal...
High
Unreviewed
CVE-2024-46434
was published
Feb 10, 2025
A vulnerability has been found in D-Link DHP-W310AV 1.04 and classified as critical. This...
Moderate
Unreviewed
CVE-2025-1104
was published
Feb 7, 2025
When multiple server blocks are configured to share the same IP address and port, an attacker can...
Moderate
Unreviewed
CVE-2025-23419
was published
Feb 5, 2025
An issue in compop.ca ONLINE MALL v.3.5.3 allows a remote attacker to execute arbitrary code via...
Critical
Unreviewed
CVE-2024-48445
was published
Feb 5, 2025
**UNSUPPORTED WHEN ASSIGNED**
Insecure default credentials for the Telnet function in the legacy...
Critical
Unreviewed
CVE-2025-0890
was published
Feb 4, 2025
If LDAP settings are accessed, authentication could be redirected to another server, potentially...
Moderate
Unreviewed
CVE-2024-12510
was published
Feb 3, 2025
macrozheng mall-tiny 1.0.1 suffers from Insecure Permissions. The application's JWT signing keys...
Critical
Unreviewed
CVE-2024-57432
was published
Jan 31, 2025
API Security bypass through header manipulation
Moderate
Unreviewed
CVE-2024-55925
was published
Jan 23, 2025
It has been found that the Beta10 software does not provide for proper authorisation control in...
Critical
Unreviewed
CVE-2025-0637
was published
Jan 23, 2025
Duplicate Advisory: Authentication Bypass Due to Missing LDAP Bind After Password Reset in Keycloak
Moderate
GHSA-m3hp-8546-5qmr
was published
for
org.keycloak:keycloak-ldap-federation
(Maven)
Jan 22, 2025
•
withdrawn
ProTip!
Advisories are also available from the
GraphQL API