Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
102
GitHub Actions
54
Go
4,347
Maven
5,000+
npm
5,000+
NuGet
1,042
pip
5,000+
Pub
13
RubyGems
1,122
Rust
1,498
Swift
61
Unreviewed advisories
All unreviewed
5,000+

31,971 advisories

Loading
Mocodo vulnerable to SQL injection in `/web/generate.php` Critical
CVE-2024-35374 was published for mocodo (pip) May 28, 2024
Duplicate Advisory: SimpleSAMLphp signature validation bypass Critical
GHSA-fjr2-r2mp-484p was published for simplesamlphp/simplesamlphp (Composer) May 28, 2024 • withdrawn
Dolibarr vulnerable to SQL Injection Critical
CVE-2024-5315 was published for dolibarr/dolibarr (Composer) May 24, 2024
Dolibarr vulnerable to SQL Injection Critical
CVE-2024-5314 was published for dolibarr/dolibarr (Composer) May 24, 2024
Silverstripe Brute force bypass on default admin Critical
GHSA-8v6m-7f5v-hhx6 was published for silverstripe/framework (Composer) May 23, 2024
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function... Critical Unreviewed
CVE-2024-35091 was published May 23, 2024
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function... Critical Unreviewed
CVE-2024-35086 was published May 23, 2024
A SQL injection vulnerability in /model/update_exam.php in Campcodes Complete Web-Based School... Critical Unreviewed
CVE-2024-34932 was published May 23, 2024
A SQL injection vulnerability in /view/find_friends.php in Campcodes Complete Web-Based School... Critical Unreviewed
CVE-2024-34929 was published May 23, 2024
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function... Critical Unreviewed
CVE-2024-35084 was published May 23, 2024
A SQL injection vulnerability in /view/conversation_history_admin.php in Campcodes Complete Web... Critical Unreviewed
CVE-2024-34935 was published May 23, 2024
A SQL injection vulnerability in /model/update_classroom.php in Campcodes Complete Web-Based... Critical Unreviewed
CVE-2024-34927 was published May 23, 2024
A SQL injection vulnerability in /view/emarks_range_grade_update_form.php in Campcodes Complete... Critical Unreviewed
CVE-2024-34934 was published May 23, 2024
A SQL injection vulnerability in /model/update_subject.php in Campcodes Complete Web-Based School... Critical Unreviewed
CVE-2024-34931 was published May 23, 2024
Improper access control vulnerability in Prodys' Quantum Audio codec affecting versions 2.3.4t... Critical Unreviewed
CVE-2024-5168 was published May 23, 2024
The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to arbitrary file... Critical Unreviewed
CVE-2024-5084 was published May 23, 2024
The does not validate a parameter before making a request to it, which could allow... Critical Unreviewed
CVE-2024-4399 was published May 23, 2024
Veeam Backup Enterprise Manager allows unauthenticated users to log in as any user to enterprise... Critical Unreviewed
CVE-2024-29849 was published May 23, 2024
Sante PACS Server PG Patient Query SQL Injection Remote Code Execution Vulnerability. This... Critical Unreviewed
CVE-2023-51637 was published May 22, 2024
VuFind Server-Side Request Forgery (SSRF) vulnerability Critical
CVE-2024-25738 was published for vufind/vufind (Composer) May 22, 2024
VuFind Server-Side Request Forgery (SSRF) vulnerability Critical
CVE-2024-25737 was published for vufind/vufind (Composer) May 22, 2024
An issue in the component Access64.sys of Wistron Corporation TBT Force Power Control v1.0.0.0... Critical Unreviewed
CVE-2024-33226 was published May 22, 2024
WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php. Critical Unreviewed
CVE-2024-35409 was published May 22, 2024
The Country State City Dropdown CF7 plugin for WordPress is vulnerable to SQL Injection via the ... Critical Unreviewed
CVE-2024-3495 was published May 22, 2024
The WPZOOM Addons for Elementor (Templates, Widgets) plugin for WordPress is vulnerable to Local... Critical Unreviewed
CVE-2024-5147 was published May 22, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database