Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,266
Erlang
31
GitHub Actions
21
Go
2,041
Maven
5,000+
npm
3,733
NuGet
662
pip
3,414
Pub
12
RubyGems
891
Rust
866
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

93,716 advisories

Loading
An attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI... High Unreviewed
CVE-2024-26283 was published Feb 22, 2024
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component... High Unreviewed
CVE-2024-26352 was published Feb 22, 2024
Using an AMP url with a canonical element, an attacker could have executed JavaScript from an... High Unreviewed
CVE-2024-26282 was published Feb 22, 2024
Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the... High Unreviewed
CVE-2024-25851 was published Feb 22, 2024
Flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component... High Unreviewed
CVE-2024-23094 was published Feb 22, 2024
A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets... High Unreviewed
CVE-2023-3966 was published Feb 22, 2024
IBM AIX 7.3, VIOS 4.1's Perl implementation could allow a non-privileged local user to exploit a... High Unreviewed
CVE-2024-25021 was published Feb 22, 2024
B&R Automation Studio Upgrade Service and B&R Technology Guarding use insufficient cryptography... High Unreviewed
CVE-2024-0220 was published Feb 22, 2024
An unauthenticated remote attacker can bypass the brute force prevention mechanism and disturb... High Unreviewed
CVE-2024-1104 was published Feb 22, 2024
A null pointer dereference in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.11,... High Unreviewed
CVE-2023-29180 was published Feb 22, 2024
A use of externally-controlled format string in Fortinet FortiOS 7.2.0 through 7.2.4, 7.0.0... High Unreviewed
CVE-2023-29181 was published Feb 22, 2024
A vulnerability was discovered in Veritas eDiscovery Platform before 10.2.5. The application... High Unreviewed
CVE-2024-27283 was published Feb 22, 2024
A maliciously crafted IGS file when tbb.dll parsed through Autodesk AutoCAD can be used in user... High Unreviewed
CVE-2024-23134 was published Feb 22, 2024
A maliciously crafted STP or SLDPRT file when ODXSW_DLL.dll parsed through Autodesk AutoCAD can... High Unreviewed
CVE-2024-23137 was published Feb 22, 2024
A maliciously crafted STP file in atf_dwg_consumer.dll when parsed through Autodesk AutoCAD could... High Unreviewed
CVE-2024-23132 was published Feb 22, 2024
A maliciously crafted STP file in ASMDATAX228A.dll when parsed through Autodesk AutoCAD could... High Unreviewed
CVE-2024-23133 was published Feb 22, 2024
A maliciously crafted SLDPRT file when ASMkern228A.dll parsed through Autodesk AutoCAD can be... High Unreviewed
CVE-2024-23135 was published Feb 22, 2024
A maliciously crafted STP file when ASMKERN228A.dll parsed through Autodesk AutoCAD can be used... High Unreviewed
CVE-2024-23136 was published Feb 22, 2024
A maliciously crafted STP file in ASMKERN228A.dll or ASMDATAX228A.dll when parsed through... High Unreviewed
CVE-2024-23131 was published Feb 22, 2024
A maliciously crafted MODEL 3DM, STP or SLDASM files in opennurbs.dll when parsed through... High Unreviewed
CVE-2024-23129 was published Feb 22, 2024
A maliciously crafted SLDASM, or SLDPRT files in ODXSW_DLL.dll when parsed through Autodesk... High Unreviewed
CVE-2024-23130 was published Feb 22, 2024
A maliciously crafted MODEL file in libodxdll.dll when parsed through Autodesk AutoCAD could lead... High Unreviewed
CVE-2024-23128 was published Feb 22, 2024
A maliciously crafted MODEL, SLDPRT or SLDASM file when parsed VCRUNTIME140.dll through Autodesk... High Unreviewed
CVE-2024-23127 was published Feb 22, 2024
A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force... High Unreviewed
CVE-2024-23121 was published Feb 22, 2024
A maliciously crafted SLDPRT file when parsed ODXSW_DLL.dll through Autodesk AutoCAD can be used... High Unreviewed
CVE-2024-23125 was published Feb 22, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database