Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,266
Erlang
31
GitHub Actions
21
Go
2,041
Maven
5,000+
npm
3,733
NuGet
662
pip
3,414
Pub
12
RubyGems
891
Rust
866
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

93,722 advisories

Loading
Enable exports of the database and associated exported information of the system via the default... High Unreviewed
CVE-2024-0551 was published Feb 27, 2024
A flaw in the installer for Thales SafeNet Sentinel HASP LDK prior to 9.16 on Windows allows an... High Unreviewed
CVE-2024-0197 was published Feb 27, 2024
A flaw in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to... High Unreviewed
CVE-2023-7016 was published Feb 27, 2024
A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on... High Unreviewed
CVE-2023-5993 was published Feb 27, 2024
In the Linux kernel, the following vulnerability has been resolved: net: fix use-after-free in... High Unreviewed
CVE-2021-46936 was published Feb 27, 2024
The JetBackup WordPress plugin before 2.0.9.9 doesn't use index files to prevent public directory... High Unreviewed
CVE-2023-7165 was published Feb 27, 2024
The WP JobSearch WordPress plugin before 2.3.4 does not validate files to be uploaded, which... High Unreviewed
CVE-2023-6585 was published Feb 27, 2024
The WP JobSearch WordPress plugin before 2.3.4 does not prevent attackers from logging-in as any... High Unreviewed
CVE-2023-6584 was published Feb 27, 2024
SQL injection vulnerability in Dynamic Lab Management System Project in PHP v.1.0 allows a remote... High Unreviewed
CVE-2024-22917 was published Feb 27, 2024
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via BookSBIN. High Unreviewed
CVE-2024-24096 was published Feb 27, 2024
An issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via... High Unreviewed
CVE-2024-27356 was published Feb 27, 2024
An issue was discovered in Linksys Router E1700 version 1.0.04 (build 3), allows authenticated... High Unreviewed
CVE-2024-22544 was published Feb 27, 2024
OpenDMARC 1.4.2 contains a null pointer dereference vulnerability in /OpenDMARC/libopendmarc... High Unreviewed
CVE-2024-25768 was published Feb 26, 2024
fluent-bit 2.2.2 contains a Use-After-Free vulnerability in /fluent-bit/plugins/custom_calyptia... High Unreviewed
CVE-2024-26455 was published Feb 26, 2024
In the Linux kernel, the following vulnerability has been resolved: netlabel: fix out-of-bounds... High Unreviewed
CVE-2019-25160 was published Feb 26, 2024
In the Linux kernel, the following vulnerability has been resolved: i2c: Fix a potential use... High Unreviewed
CVE-2019-25162 was published Feb 26, 2024
In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix bugs with non... High Unreviewed
CVE-2023-52474 was published Feb 26, 2024
Unrestricted Upload of File with Dangerous Type vulnerability in bPlugins LLC Icons Font Loader... High Unreviewed
CVE-2024-24714 was published Feb 26, 2024
Certain WithSecure products allow a Denial of Service because the engine scanner can go into an... High Unreviewed
CVE-2024-27359 was published Feb 26, 2024
A heap-based buffer overflow vulnerability exists in the GGUF library GGUF_TYPE_ARRAY... High Unreviewed
CVE-2024-21825 was published Feb 26, 2024
Cross-Site Request Forgery vulnerability in SMA Cluster Controller, affecting version 01.05.01.R.... High Unreviewed
CVE-2024-1889 was published Feb 26, 2024
Tencent Blueking CMDB v3.2.x to v3.9.x was discovered to contain a Server-Side Request Forgery ... High Unreviewed
CVE-2024-22873 was published Feb 26, 2024
A vulnerability was found in SourceCodester Employee Management System 1.0. It has been... High Unreviewed
CVE-2024-1876 was published Feb 26, 2024
A heap-based buffer overflow vulnerability exists in the GGUF library info->ne functionality... High Unreviewed
CVE-2024-21802 was published Feb 26, 2024
A heap-based buffer overflow vulnerability exists in the GGUF library header.n_tensors... High Unreviewed
CVE-2024-21836 was published Feb 26, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database