GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,714
Erlang
34
GitHub Actions
28
Go
2,298
Maven
5,000+
npm
3,942
NuGet
708
pip
3,711
Pub
12
RubyGems
920
Rust
959
Swift
38
Unreviewed advisories
All unreviewed
5,000+
4,433 advisories
Filter by severity
The absence of filters when loading some sections in the web application of the vulnerable device...
High
Unreviewed
CVE-2022-22985
was published
Mar 11, 2022
Server-side Template Injection in nystudio107/craft-seomatic
High
CVE-2021-44618
was published
for
nystudio107/craft-seomatic
(Composer)
Mar 12, 2022
Static Code Injection in Microweber
High
CVE-2022-0895
was published
for
microweber/microweber
(Composer)
Mar 11, 2022
Template injection in connection test endpoint leads to RCE in GitHub repository sqlpad/sqlpad...
High
Unreviewed
CVE-2022-0944
was published
Mar 16, 2022
Code Injection in CRI-O
High
CVE-2022-0811
was published
for
github.com/cri-o/cri-o
(Go)
Mar 15, 2022
Embedded Malicious Code in node-ipc
Critical
CVE-2022-23812
was published
for
node-ipc
(npm)
Mar 16, 2022
The XML-RPC implementation on Cisco TelePresence Recording Server devices with software 1.6.x and...
High
Unreviewed
CVE-2011-0386
was published
May 17, 2022
Insertion of Sensitive Information into Externally-Accessible File or Directory and Exposure of Sensitive Information to an Unauthorized Actor in hbs
Moderate
CVE-2021-32822
was published
for
hbs
(npm)
Sep 2, 2021
Chamilo LMS v1.11.14 was discovered to contain a zero click code injection vulnerability which...
Moderate
Unreviewed
CVE-2021-38745
was published
Mar 22, 2022
The Amelia WordPress plugin before 1.0.47 stores image blobs into actual files whose extension is...
High
Unreviewed
CVE-2022-0687
was published
Mar 22, 2022
A code injection vulnerability exists in one of the webpages in GE Reason RT430, RT431 & RT434...
High
Unreviewed
CVE-2020-25197
was published
Mar 19, 2022
A remote code execution (RCE) vulnerability in Beekeeper Studio v3.2.0 allows attackers to...
Critical
Unreviewed
CVE-2022-26174
was published
Mar 23, 2022
taocms v3.0.2 allows attackers to execute code injection via arbitrarily editing the .htaccess file.
Critical
Unreviewed
CVE-2022-25578
was published
Mar 20, 2022
A remote code execution (RCE) vulnerability in Ionize v1.0.8.1 allows attackers to execute...
Critical
Unreviewed
CVE-2022-26272
was published
Mar 26, 2022
Marky commit 3686565726c65756e was discovered to contain a remote code execution (RCE)...
Critical
Unreviewed
CVE-2022-26205
was published
Mar 28, 2022
Notable v1.8.4 does not filter text editing, allowing attackers to execute arbitrary code via a...
Critical
Unreviewed
CVE-2022-26198
was published
Mar 28, 2022
Clash for Windows v0.19.8 was discovered to allow arbitrary code execution via a crafted payload...
Critical
Unreviewed
CVE-2022-26255
was published
Mar 29, 2022
The default configuration of the <Button2> binding in Uzbl before 2010.08.05 does not properly...
Moderate
Unreviewed
CVE-2010-2809
was published
May 17, 2022
Multiple PHP remote file inclusion vulnerabilities in Seagull 0.6.7 allow remote attackers to...
High
Unreviewed
CVE-2010-3209
was published
May 17, 2022
Multiple PHP remote file inclusion vulnerabilities in Haudenschilt Family Connections CMS (FCMS)...
High
Unreviewed
CVE-2010-3419
was published
May 17, 2022
Web Media Extensions Remote Code Execution Vulnerability
Critical
Unreviewed
CVE-2021-43214
was published
Dec 16, 2021
Visual Studio Code Remote Code Execution Vulnerability
High
Unreviewed
CVE-2021-43891
was published
Dec 16, 2021
A security vulnerability has been identified in HPE StoreServ Management Console (SSMC). An...
High
Unreviewed
CVE-2021-29214
was published
Dec 11, 2021
ProTip!
Advisories are also available from the
GraphQL API