GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,237
Erlang
31
GitHub Actions
20
Go
1,996
Maven
5,000+
npm
3,709
NuGet
661
pip
3,348
Pub
11
RubyGems
885
Rust
846
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
235,055 advisories
Filter by severity
Exposure of sensitive system information to an unauthorized control sphere issue exists in...
Moderate
Unreviewed
CVE-2024-52033
was published
Nov 20, 2024
Missing authentication for critical function vulnerability exists in Rakuten Turbo 5G firmware...
Moderate
Unreviewed
CVE-2024-47865
was published
Nov 20, 2024
Local File Inclusion vulnerability in M-Files Server in versions before 24.11 (excluding 24.8 SR1...
Moderate
Unreviewed
CVE-2024-10126
was published
Nov 20, 2024
Authentication bypass condition in LDAP authentication in M-Files server versions before 24.11...
Critical
Unreviewed
CVE-2024-10127
was published
Nov 20, 2024
The Booster for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting...
Moderate
Unreviewed
CVE-2024-9239
was published
Nov 20, 2024
The Restaurant Menu – Food Ordering System – Table Reservation plugin for WordPress is vulnerable...
Moderate
Unreviewed
CVE-2024-9653
was published
Nov 20, 2024
Use of hard-coded cryptographic key issue exists in "Kura Sushi Official App Produced by EPARK"...
Moderate
Unreviewed
CVE-2024-52614
was published
Nov 20, 2024
In the process of testing the SEO Plugin by Squirrly SEO WordPress plugin before 12.3.21, a...
Low
Unreviewed
CVE-2024-10515
was published
Nov 20, 2024
The GD bbPress Attachments plugin for WordPress is vulnerable to Reflected Cross-Site Scripting...
Moderate
Unreviewed
CVE-2024-11278
was published
Nov 20, 2024
The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2...
High
Unreviewed
CVE-2024-44308
was published
Nov 20, 2024
A cookie management issue was addressed with improved state management. This issue is fixed in...
Unknown
Unreviewed
CVE-2024-44309
was published
Nov 20, 2024
In the xmlSnprintfElementContent function of valid.c, there is a possible out of bounds write....
High
Unreviewed
CVE-2018-9466
was published
Nov 20, 2024
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')...
Moderate
Unreviewed
CVE-2023-27609
was published
Nov 20, 2024
The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to...
Moderate
Unreviewed
CVE-2024-11400
was published
Nov 20, 2024
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')...
Moderate
Unreviewed
CVE-2024-30424
was published
Nov 20, 2024
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS...
High
Unreviewed
CVE-2024-44307
was published
Nov 20, 2024
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS...
High
Unreviewed
CVE-2024-44306
was published
Nov 20, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Vivwebs Dynamic Widgets.This issue affects...
Moderate
Unreviewed
CVE-2024-51669
was published
Nov 20, 2024
Cross-Site Request Forgery (CSRF) vulnerability in W3speedster W3SPEEDSTER.This issue affects...
Moderate
Unreviewed
CVE-2024-52392
was published
Nov 20, 2024
In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing...
High
Unreviewed
CVE-2018-9419
was published
Nov 20, 2024
In BnCameraService::onTransact of CameraService.cpp, there is a possible information disclosure...
Moderate
Unreviewed
CVE-2018-9420
was published
Nov 20, 2024
In startDevice of AAudioServiceStreamBase.cpp there is a possible out of bounds write due to a...
High
Unreviewed
CVE-2018-9428
was published
Nov 20, 2024
In createPhonebookDialogView and createMapDialogView of BluetoothPermissionActivity.java, there...
High
Unreviewed
CVE-2018-9432
was published
Nov 20, 2024
In writeInplace of Parcel.cpp, there is a possible information leak across processes, using...
Moderate
Unreviewed
CVE-2018-9421
was published
Nov 20, 2024
In removeUnsynchronization of ID3.cpp there is a possible resource exhaustion due to improper...
Unknown
Unreviewed
CVE-2018-9412
was published
Nov 20, 2024
ProTip!
Advisories are also available from the
GraphQL API