Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
102
GitHub Actions
54
Go
4,347
Maven
5,000+
npm
5,000+
NuGet
1,042
pip
5,000+
Pub
13
RubyGems
1,122
Rust
1,498
Swift
61
Unreviewed advisories
All unreviewed
5,000+

31,971 advisories

Loading
Quanxun Huiju Network Technology (Beijing) Co.,Ltd IK-Q3000 3.7.10 x64 Build202401261655 was... Critical Unreviewed
CVE-2024-34947 was published May 20, 2024
Blackprint @blackprint/engine Prototype Pollution issue Critical
CVE-2024-24294 was published for @blackprint/engine (npm) May 20, 2024
propel/propel1 SQL injection possible with limit() on MySQL Critical
GHSA-7g7c-qhf3-x59p was published for propel/propel1 (Composer) May 20, 2024
Propel2 SQL injection possible with limit() on MySQL Critical
GHSA-7vw7-qx38-37vr was published for propel/propel (Composer) May 20, 2024
A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the... Critical Unreviewed
CVE-2024-4323 was published May 20, 2024
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Properly link new... Critical Unreviewed
CVE-2024-35960 was published May 20, 2024
In lunary-ai/lunary version 1.2.2, the DELETE endpoint located at `packages/backend/src/api/v1... Critical Unreviewed
CVE-2024-3761 was published May 20, 2024
Westermo EDW-100 devices through 2024-05-03 have a hidden root user account with a hardcoded... Critical Unreviewed
CVE-2024-36080 was published May 19, 2024
Westermo EDW-100 devices through 2024-05-03 allow an unauthenticated user to download a... Critical Unreviewed
CVE-2024-36081 was published May 19, 2024
In the mintupload package through 4.2.0 for Linux Mint, service-name mishandling leads to command... Critical Unreviewed
CVE-2024-36053 was published May 19, 2024
Kiteworks Totemomail 7.x and 8.x before 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId... Critical Unreviewed
CVE-2024-28064 was published May 19, 2024
QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through... Critical Unreviewed
CVE-2024-36048 was published May 18, 2024
The Build App Online plugin for WordPress is vulnerable to authentication bypass in versions up... Critical Unreviewed
CVE-2024-3658 was published May 18, 2024
The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin... Critical Unreviewed
CVE-2024-2771 was published May 18, 2024
Flow Swift Mailer package Remote code execution Critical
GHSA-rq6q-hjvh-5mwh was published for neos/swiftmailer (Composer) May 17, 2024
namshi/jose - Verification bypass Critical
GHSA-4rr6-gf59-ggw5 was published for namshi/jose (Composer) May 17, 2024
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dbg-tlv:... Critical Unreviewed
CVE-2024-35845 was published May 17, 2024
An arbitrary file upload vulnerability in the component /include/file.php of lylme_spage v1.9.5... Critical Unreviewed
CVE-2024-34982 was published May 17, 2024
An arbitrary file upload vulnerability in the component \modstudent\controller.php of Pisay... Critical Unreviewed
CVE-2024-34919 was published May 17, 2024
Unrestricted Upload of File with Dangerous Type vulnerability in JumpDEMAND Inc. ActiveDEMAND... Critical Unreviewed
CVE-2024-32809 was published May 17, 2024
Zabbix server can perform command execution for configured scripts. After command is executed,... Critical Unreviewed
CVE-2024-22120 was published May 17, 2024
Improper Control of Generation of Code ('Code Injection') vulnerability in WPCustomify Customify... Critical Unreviewed
CVE-2024-33644 was published May 17, 2024
Improper Privilege Management vulnerability in UkrSolution Barcode Scanner with Inventory & Order... Critical Unreviewed
CVE-2024-33567 was published May 17, 2024
Improper Privilege Management vulnerability in WebWizards SalesKing allows Privilege Escalation... Critical Unreviewed
CVE-2024-22157 was published May 17, 2024
Improper Privilege Management vulnerability in 8theme XStore Core allows Privilege Escalation... Critical Unreviewed
CVE-2024-33552 was published May 17, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database