GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,778
Erlang
36
GitHub Actions
29
Go
2,336
Maven
5,000+
npm
3,969
NuGet
713
pip
3,767
Pub
12
RubyGems
923
Rust
976
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
3,805 advisories
Filter by severity
An issue in dlink DIR 832x 240802 allows a remote attacker to execute arbitrary code via the...
High
Unreviewed
CVE-2025-29039
was published
Apr 17, 2025
A RCE vulnerability in the core application in LandChat 3.25.12.18 allows an unauthenticated...
Critical
Unreviewed
CVE-2025-29662
was published
Apr 17, 2025
Litepubl CMS <= 7.0.9 is vulnerable to RCE in admin/service/run.
High
Unreviewed
CVE-2025-29661
was published
Apr 17, 2025
Improper Control of Generation of Code ('Code Injection') vulnerability in termel PDF 2 Post...
Critical
Unreviewed
CVE-2025-32583
was published
Apr 17, 2025
Improper Control of Generation of Code ('Code Injection') vulnerability in Rameez Iqbal Real...
High
Unreviewed
CVE-2025-32596
was published
Apr 17, 2025
Hazelcast Management Center through 6.0 allows remote code execution via a JndiLoginModule user...
Critical
Unreviewed
CVE-2024-56518
was published
Apr 17, 2025
Phoneservice module is affected by code injection vulnerability, successful exploitation of this...
High
Unreviewed
CVE-2025-1532
was published
Apr 17, 2025
Access Control Vulnerability in Gerrit chromiumos project configuration in Google ChromeOS 131.0...
Critical
Unreviewed
CVE-2025-1568
was published
Apr 17, 2025
A remote code execution (RCE) vulnerability in the upload_file function of LRQA Nettitude PoshC2...
High
Unreviewed
CVE-2024-53303
was published
Apr 16, 2025
Improper Control of Generation of Code ('Code Injection') vulnerability in Fetch Designs Sign-up...
Moderate
Unreviewed
CVE-2025-26996
was published
Apr 16, 2025
A command injection vulnerability in the Nmap diagnostic tool in the admin web console of Extron...
High
Unreviewed
CVE-2024-50960
was published
Apr 15, 2025
In PerfreeBlog version 4.0.11, regular users can exploit the arbitrary file upload vulnerability...
High
Unreviewed
CVE-2025-29281
was published
Apr 15, 2025
In versions prior to Aidex 1.7, an authenticated malicious user, taking advantage of an open...
Critical
Unreviewed
CVE-2025-3579
was published
Apr 15, 2025
In HylaFAX Enterprise Web Interface and AvantFAX, the language form element is not properly...
Critical
Unreviewed
CVE-2025-1782
was published
Apr 14, 2025
A vulnerability was found in WuzhiCMS 4.1. It has been rated as critical. Affected by this issue...
Moderate
Unreviewed
CVE-2025-3563
was published
Apr 14, 2025
Processing web content may lead to arbitrary code execution. This issue is fixed in iOS 17 and...
High
Unreviewed
CVE-2023-42875
was published
Apr 11, 2025
The The Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for...
Moderate
Unreviewed
CVE-2025-3422
was published
Apr 11, 2025
A code injection vulnerability in the Debian package component of Taegis Endpoint Agent (Linux)...
High
Unreviewed
CVE-2024-13861
was published
Apr 11, 2025
The ORDER POST plugin for WordPress is vulnerable to arbitrary shortcode execution in all...
High
Unreviewed
CVE-2025-2805
was published
Apr 10, 2025
The azurecurve Shortcodes in Comments plugin for WordPress is vulnerable to arbitrary shortcode...
High
Unreviewed
CVE-2025-2809
was published
Apr 10, 2025
Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over...
Critical
Unreviewed
CVE-2025-3115
was published
Apr 9, 2025
Code Execution via Malicious Files: Attackers can create specially crafted files with embedded...
Critical
Unreviewed
CVE-2025-3114
was published
Apr 9, 2025
SAP Landscape Transformation (SLT) allows an attacker with user privileges to exploit a...
Critical
Unreviewed
CVE-2025-31330
was published
Apr 8, 2025
In certain conditions, SAP NetWeaver Application Server ABAP allows an authenticated attacker to...
High
Unreviewed
CVE-2025-23186
was published
Apr 8, 2025
SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the function...
Critical
Unreviewed
CVE-2025-27429
was published
Apr 8, 2025
ProTip!
Advisories are also available from the
GraphQL API