Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,360
Erlang
33
GitHub Actions
22
Go
2,127
Maven
5,000+
npm
3,793
NuGet
683
pip
3,471
Pub
12
RubyGems
894
Rust
894
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

96,055 advisories

Loading
Versions of the package jsonpath-plus before 10.3.0 are vulnerable to Remote Code Execution (RCE)... High Unreviewed
CVE-2025-1302 was published Feb 15, 2025
7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. This... High Unreviewed
CVE-2024-11477 was published Nov 22, 2024
Brocade SANnav OVA before SANnav 2.3.1b enables SHA1 deprecated setting for SSH for port 22. High Unreviewed
CVE-2024-4282 was published Feb 15, 2025
Implementation of the Simple Network Management Protocol (SNMP) operating on the Brocade 6547 ... High Unreviewed
CVE-2024-5461 was published Feb 15, 2025
Monero through 0.18.3.4 before ec74ff4 does not have response limits on HTTP server connections. High Unreviewed
CVE-2025-26819 was published Feb 15, 2025
Directory Traversal vulnerability in FeMiner wms v.1.0 allows a remote attacker to obtain... High Unreviewed
CVE-2025-25997 was published Feb 14, 2025
A SQL Injection vulnerability was found in /shopping/track-orders.php in PHPGurukul Online... High Unreviewed
CVE-2025-26156 was published Feb 14, 2025
A SQL Injection vulnerability was found in /admin/aboutus.php in PHPGurukul Land Record System v1... High Unreviewed
CVE-2025-25352 was published Feb 13, 2025
A SQL Injection vulnerability was found in /admin/bwdates-reports-details.php in PHPGurukul Land... High Unreviewed
CVE-2025-25356 was published Feb 13, 2025
The VTEX [email protected] GraphQL API module does not properly restrict unauthorized access to... High Unreviewed
CVE-2023-28877 was published Mar 31, 2023
A SQL Injection vulnerability was found in /admin/bwdates-reports-details.php in PHPGurukul Land... High Unreviewed
CVE-2025-25355 was published Feb 13, 2025
A SQL Injection was found in /admin/admin-profile.php in PHPGurukul Land Record System v1.0,... High Unreviewed
CVE-2025-25354 was published Feb 13, 2025
The vulnerability may allow a remote low priviledged attacker to run arbitrary shell commands by... High Unreviewed
CVE-2025-0593 was published Feb 14, 2025
Generation of weak initialization vector in an Intel(R) IPP Cryptography software library before... High Unreviewed
CVE-2022-26083 was published Feb 14, 2025
The vulnerability may allow a remote low priviledged attacker to run arbitrary shell commands by... High Unreviewed
CVE-2025-0592 was published Feb 14, 2025
A critical remote code execution (RCE) vulnerability exists in the web-based management interface... High Unreviewed
CVE-2025-22962 was published Feb 14, 2025
Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB.... High Unreviewed
CVE-2023-34402 was published Feb 14, 2025
Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB.... High Unreviewed
CVE-2023-34398 was published Feb 14, 2025
A SQL Injection vulnerability was found in /admin/manage-propertytype.php in PHPGurukul Land... High Unreviewed
CVE-2025-25387 was published Feb 13, 2025
A SQL Injection vulnerability was found in /admin/contactus.php in PHPGurukul Land Record System... High Unreviewed
CVE-2025-25357 was published Feb 13, 2025
A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the pskSecret... High Unreviewed
CVE-2025-25898 was published Feb 13, 2025
Mercedes Benz head-unit NTG 6 contains functions to import or export profile settings over USB.... High Unreviewed
CVE-2023-34397 was published Feb 14, 2025
Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. In... High Unreviewed
CVE-2023-34400 was published Feb 14, 2025
An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The absence of a null... High Unreviewed
CVE-2024-46922 was published Feb 13, 2025
An issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. The absence of a... High Unreviewed
CVE-2024-46923 was published Feb 13, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database