Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,471
Erlang
33
GitHub Actions
24
Go
2,176
Maven
5,000+
npm
3,835
NuGet
696
pip
3,511
Pub
12
RubyGems
910
Rust
908
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

562 advisories

Loading
Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001... Critical Unreviewed
CVE-2018-11228 was published May 14, 2022
LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to... Critical Unreviewed
CVE-2018-17173 was published May 14, 2022
An issue was discovered in BageCMS 3.1.3. The attacker can execute arbitrary PHP code on the web... Critical Unreviewed
CVE-2018-18258 was published May 14, 2022
A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin... Critical Unreviewed
CVE-2018-11780 was published May 14, 2022
scripts/grep-excuses.pl in Debian devscripts through 2.18.3 allows code execution through unsafe... Critical Unreviewed
CVE-2018-13043 was published May 14, 2022
Chamilo LMS version 11.x contains an Unserialization vulnerability in the "hash" GET parameter... Critical Unreviewed
CVE-2018-1999019 was published May 13, 2022
mod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a... Critical Unreviewed
CVE-2011-2767 was published May 13, 2022
Hospira MedNet software version 5.8 and prior uses vulnerable versions of the JBoss Enterprise... Critical Unreviewed
CVE-2014-5401 was published May 13, 2022
IBM Tivoli Monitoring V6 6.2.3 and 6.3.0 could allow an unauthenticated user to remotely execute... Critical Unreviewed
CVE-2017-1789 was published May 13, 2022
Code Injection vulnerability in the ePolicy Orchestrator (ePO) extension in McAfee Threat... Critical Unreviewed
CVE-2017-3907 was published May 13, 2022
It was found that the JAXP implementation used in JBoss EAP 7.0 for XSLT processing is vulnerable... Critical Unreviewed
CVE-2017-7465 was published May 13, 2022
Emerson AMS Device Manager v12.0 to v13.5. A specially crafted script may be run that allows... Critical Unreviewed
CVE-2018-14804 was published May 13, 2022
Unauthenticated remote code execution issue in Micro Focus Solutions Business Manager (SBM) ... Critical Unreviewed
CVE-2018-19641 was published May 13, 2022
SAP MaxDB ODBC driver (all versions before 7.9.09.07) allows an attacker to inject code that can... Critical Unreviewed
CVE-2018-2418 was published May 13, 2022
Arbitrary Code Execution vulnerability in Micro Focus Universal CMDB, version 4.10, 4.11, 4.12.... Critical Unreviewed
CVE-2018-6488 was published May 13, 2022
Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite... Critical Unreviewed
CVE-2018-6499 was published May 13, 2022
Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite... Critical Unreviewed
CVE-2018-6498 was published May 13, 2022
setup/controllers/welcome.php in MODX Revolution 2.5.4-pl and earlier allows remote attackers to... Critical Unreviewed
CVE-2017-7321 was published May 13, 2022
setup/templates/findcore.php in MODX Revolution 2.5.4-pl and earlier allows remote attackers to... Critical Unreviewed
CVE-2017-7324 was published May 13, 2022
Icinga Web 2 before 2.6.2 allows injection of PHP ini-file directives via vectors involving... Critical Unreviewed
CVE-2018-18249 was published May 13, 2022
The TELNET service in Mobatek MobaXterm 10.4 does not require authentication, which allows remote... Critical Unreviewed
CVE-2017-15376 was published May 13, 2022
October CMS build 412 is vulnerable to PHP code execution in the asset manager functionality... Critical Unreviewed
CVE-2017-1000196 was published May 13, 2022
The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before... Critical Unreviewed
CVE-2013-6671 was published May 13, 2022
install/install.php in CIM 0.9.3 allows remote attackers to execute arbitrary PHP code via a... Critical Unreviewed
CVE-2019-7692 was published May 13, 2022
** DISPUTED ** An issue was discovered in the Merlin.PHP component 0.6.6 for Asuswrt-Merlin... Critical Unreviewed
CVE-2018-18319 was published May 13, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database