GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
3,683
Erlang
29
GitHub Actions
16
Go
1,708
Maven
4,944
npm
3,473
NuGet
603
pip
2,995
Pub
10
RubyGems
826
Rust
773
Swift
34
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
18,648 advisories
Filter by severity
Improper access control vulnerability in Prodys' Quantum Audio codec affecting versions 2.3.4t...
Critical
Unreviewed
CVE-2024-5168
was published
May 23, 2024
The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to arbitrary file...
Critical
Unreviewed
CVE-2024-5084
was published
May 23, 2024
Veeam Backup Enterprise Manager allows unauthenticated users to log in as any user to enterprise...
Critical
Unreviewed
CVE-2024-29849
was published
May 23, 2024
Sante PACS Server PG Patient Query SQL Injection Remote Code Execution Vulnerability. This...
Critical
Unreviewed
CVE-2023-51637
was published
May 22, 2024
The Country State City Dropdown CF7 plugin for WordPress is vulnerable to SQL Injection via the ...
Critical
Unreviewed
CVE-2024-3495
was published
May 22, 2024
The WPZOOM Addons for Elementor (Templates, Widgets) plugin for WordPress is vulnerable to Local...
Critical
Unreviewed
CVE-2024-5147
was published
May 22, 2024
The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is...
Critical
Unreviewed
CVE-2024-4443
was published
May 22, 2024
Stack-based Buffer Overflow vulnerability in ZkTeco-based OEM devices allows, in some cases, the...
Critical
Unreviewed
CVE-2023-3943
was published
May 21, 2024
Improper Neutralization of Special Elements used in an OS Command ('OS
Command Injection')...
Critical
Unreviewed
CVE-2023-3939
was published
May 21, 2024
Relative Path Traversal vulnerability in ZkTeco-based OEM devices allows an attacker
to write...
Critical
Unreviewed
CVE-2023-3941
was published
May 21, 2024
The Salon booking system plugin for WordPress is vulnerable to arbitrary file deletion in all...
Critical
Unreviewed
CVE-2024-4442
was published
May 21, 2024
A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the...
Critical
Unreviewed
CVE-2024-4323
was published
May 20, 2024
In lunary-ai/lunary version 1.2.2, the DELETE endpoint located at `packages/backend/src/api/v1...
Critical
Unreviewed
CVE-2024-3761
was published
May 20, 2024
Westermo EDW-100 devices through 2024-05-03 allow an unauthenticated user to download a...
Critical
Unreviewed
CVE-2024-36081
was published
May 19, 2024
Westermo EDW-100 devices through 2024-05-03 have a hidden root user account with a hardcoded...
Critical
Unreviewed
CVE-2024-36080
was published
May 19, 2024
The Build App Online plugin for WordPress is vulnerable to authentication bypass in versions up...
Critical
Unreviewed
CVE-2024-3658
was published
May 18, 2024
The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin...
Critical
Unreviewed
CVE-2024-2771
was published
May 18, 2024
Zabbix server can perform command execution for configured scripts. After command is executed,...
Critical
Unreviewed
CVE-2024-22120
was published
May 17, 2024
Unrestricted Upload of File with Dangerous Type vulnerability in JumpDEMAND Inc. ActiveDEMAND...
Critical
Unreviewed
CVE-2024-32809
was published
May 17, 2024
Improper Control of Generation of Code ('Code Injection') vulnerability in WPCustomify Customify...
Critical
Unreviewed
CVE-2024-33644
was published
May 17, 2024
Improper Privilege Management vulnerability in UkrSolution Barcode Scanner with Inventory & Order...
Critical
Unreviewed
CVE-2024-33567
was published
May 17, 2024
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in...
Critical
Unreviewed
CVE-2024-27954
was published
May 17, 2024
Improper Privilege Management vulnerability in 8theme XStore Core allows Privilege Escalation...
Critical
Unreviewed
CVE-2024-33552
was published
May 17, 2024
Improper Privilege Management vulnerability in CodeRevolution Demo My WordPress allows Privilege...
Critical
Unreviewed
CVE-2024-31290
was published
May 17, 2024
Improper Privilege Management vulnerability in Astoundify Simple Registration for WooCommerce...
Critical
Unreviewed
CVE-2024-32511
was published
May 17, 2024
ProTip!
Advisories are also available from the
GraphQL API