Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,458
Erlang
33
GitHub Actions
22
Go
2,156
Maven
5,000+
npm
3,818
NuGet
693
pip
3,497
Pub
12
RubyGems
903
Rust
903
Swift
38
Unreviewed advisories
All unreviewed
5,000+

24,806 advisories

Loading
phpMyAdmin SQL injection in Designer feature Critical
CVE-2019-11768 was published for phpmyadmin/phpmyadmin (Composer) May 24, 2022
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC)... Critical Unreviewed
CVE-2019-11949 was published May 24, 2022
A Remote Unauthorized Access vulnerability was identified in HPE Smart Update Manager (SUM)... Critical Unreviewed
CVE-2019-11988 was published May 24, 2022
In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation... Critical Unreviewed
CVE-2019-12553 was published May 24, 2022
A remote authentication bypass vulnerability was identified in HPE Intelligent Management Center ... Critical Unreviewed
CVE-2019-5347 was published May 24, 2022
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC)... Critical Unreviewed
CVE-2019-5352 was published May 24, 2022
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC)... Critical Unreviewed
CVE-2019-5358 was published May 24, 2022
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC)... Critical Unreviewed
CVE-2019-5356 was published May 24, 2022
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC)... Critical Unreviewed
CVE-2019-5367 was published May 24, 2022
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC)... Critical Unreviewed
CVE-2019-5387 was published May 24, 2022
A stack buffer overflow vulnerability was identified in HPE Intelligent Management Center (IMC)... Critical Unreviewed
CVE-2019-5391 was published May 24, 2022
A remote command injection vulnerability was identified in HPE Intelligent Management Center (IMC... Critical Unreviewed
CVE-2019-5390 was published May 24, 2022
An issue was discovered in proxy.php in pydio-core in Pydio through 8.2.2. Through an... Critical Unreviewed
CVE-2019-9642 was published May 24, 2022
An issue was discovered in Thomson Reuters Desktop Extensions 1.9.0.358. An unauthenticated... Critical Unreviewed
CVE-2019-8385 was published May 24, 2022
Citrix Application Delivery Management (ADM) 12.1.x before 12.1.50.33 has Incorrect Access Control. Critical Unreviewed
CVE-2019-9548 was published May 24, 2022
Kromtech MacKeeper 3.20.4 suffers from a root privilege escalation vulnerability through its `com... Critical Unreviewed
CVE-2018-10171 was published May 24, 2022
Anviz Global M3 Outdoor RFID Access Control executes any command received from any source. No... Critical Unreviewed
CVE-2019-11523 was published May 24, 2022
Dell EMC OpenManage Server Administrator (OMSA) versions prior to 9.1.0.3 and prior to 9.2.0.4... Critical Unreviewed
CVE-2019-3723 was published May 24, 2022
An unspecified vulnerability in the application server in PaperCut MF and NG versions 18.3.8 and... Critical Unreviewed
CVE-2019-12135 was published May 24, 2022
An issue was discovered on Moxa AWK-3121 1.14 devices. The device enables an unencrypted TELNET... Critical Unreviewed
CVE-2018-10698 was published May 24, 2022
An SQL injection vulnerability was found in Cloudera Data Science Workbench (CDSW) 1.4.0 through... Critical Unreviewed
CVE-2018-20091 was published May 24, 2022
A security regression of CVE-2019-9636 was discovered in python since commit... Critical Unreviewed
CVE-2019-10160 was published May 24, 2022
SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL... Critical Unreviewed
CVE-2019-12598 was published May 24, 2022
SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL... Critical Unreviewed
CVE-2019-12600 was published May 24, 2022
Command injection is possible in ThinStation through 6.1.1 via shell metacharacters after the cgi... Critical Unreviewed
CVE-2019-12771 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database