GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,778
Erlang
36
GitHub Actions
29
Go
2,336
Maven
5,000+
npm
3,969
NuGet
713
pip
3,767
Pub
12
RubyGems
923
Rust
976
Swift
38
Unreviewed advisories
All unreviewed
5,000+
2,533 advisories
Filter by severity
The Xpro Elementor Addons - Pro plugin for WordPress is vulnerable to Remote Code Execution in...
High
Unreviewed
CVE-2024-13808
was published
Apr 26, 2025
The The Create custom forms for WordPress with a smart form plugin for smart businesses plugin...
High
Unreviewed
CVE-2025-2801
was published
Apr 26, 2025
Moodle has an authenticated remote code execution risk in the Moodle LMS EQUELLA repository
High
CVE-2025-3642
was published
for
moodle/moodle
(Composer)
Apr 25, 2025
Moodle has an authenticated remote code execution risk in the Moodle LMS Dropbox repository
High
CVE-2025-3641
was published
for
moodle/moodle
(Composer)
Apr 25, 2025
The Verification SMS with TargetSMS plugin for WordPress is vulnerable to limited Remote Code...
High
Unreviewed
CVE-2025-3776
was published
Apr 24, 2025
Brocade Fabric OS versions starting with 9.1.0 have root access removed, however, a local user...
High
Unreviewed
CVE-2025-1976
was published
Apr 24, 2025
NVIDIA NeMo Framework contains a vulnerability where a user could cause an improper control of...
High
Unreviewed
CVE-2025-23251
was published
Apr 22, 2025
A Remote Code Execution (RCE) vulnerability was identified in GitHub Enterprise Server that...
High
Unreviewed
CVE-2025-3509
was published
Apr 18, 2025
Pycel allows code injection via a crafted formula
High
CVE-2024-53924
was published
for
pycel
(pip)
Apr 17, 2025
An issue in dlink DIR 832x 240802 allows a remote attacker to execute arbitrary code via the...
High
Unreviewed
CVE-2025-29039
was published
Apr 17, 2025
Litepubl CMS <= 7.0.9 is vulnerable to RCE in admin/service/run.
High
Unreviewed
CVE-2025-29661
was published
Apr 17, 2025
Improper Control of Generation of Code ('Code Injection') vulnerability in Rameez Iqbal Real...
High
Unreviewed
CVE-2025-32596
was published
Apr 17, 2025
Phoneservice module is affected by code injection vulnerability, successful exploitation of this...
High
Unreviewed
CVE-2025-1532
was published
Apr 17, 2025
A remote code execution (RCE) vulnerability in the upload_file function of LRQA Nettitude PoshC2...
High
Unreviewed
CVE-2024-53303
was published
Apr 16, 2025
A command injection vulnerability in the Nmap diagnostic tool in the admin web console of Extron...
High
Unreviewed
CVE-2024-50960
was published
Apr 15, 2025
In PerfreeBlog version 4.0.11, regular users can exploit the arbitrary file upload vulnerability...
High
Unreviewed
CVE-2025-29281
was published
Apr 15, 2025
Processing web content may lead to arbitrary code execution. This issue is fixed in iOS 17 and...
High
Unreviewed
CVE-2023-42875
was published
Apr 11, 2025
A code injection vulnerability in the Debian package component of Taegis Endpoint Agent (Linux)...
High
Unreviewed
CVE-2024-13861
was published
Apr 11, 2025
The ORDER POST plugin for WordPress is vulnerable to arbitrary shortcode execution in all...
High
Unreviewed
CVE-2025-2805
was published
Apr 10, 2025
The azurecurve Shortcodes in Comments plugin for WordPress is vulnerable to arbitrary shortcode...
High
Unreviewed
CVE-2025-2809
was published
Apr 10, 2025
In certain conditions, SAP NetWeaver Application Server ABAP allows an authenticated attacker to...
High
Unreviewed
CVE-2025-23186
was published
Apr 8, 2025
insightsoftware Hive JDBC through 2.6.13 has a remote code execution vulnerability. Attackers can...
High
Unreviewed
CVE-2024-45199
was published
Apr 3, 2025
insightsoftware Spark JDBC 2.6.21 has a remote code execution vulnerability. Attackers can inject...
High
Unreviewed
CVE-2024-45198
was published
Apr 3, 2025
Jenkins Templating Engine Plugin Vulnerable to Arbitrary Code Execution
High
CVE-2025-31722
was published
for
org.jenkins-ci.plugins:templating-engine
(Maven)
Apr 2, 2025
The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.4, macOS...
High
Unreviewed
CVE-2025-24243
was published
Apr 1, 2025
ProTip!
Advisories are also available from the
GraphQL API