Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
102
GitHub Actions
54
Go
4,340
Maven
5,000+
npm
5,000+
NuGet
1,033
pip
5,000+
Pub
13
RubyGems
1,122
Rust
1,498
Swift
61
Unreviewed advisories
All unreviewed
5,000+

31,885 advisories

Loading
FileZen V3.0.0 to V4.2.1 allows remote attackers to execute arbitrary OS commands via unspecified... Critical Unreviewed
CVE-2018-0694 was published May 14, 2022
In bnep_data_ind of bnep_main.c, there is a possible remote code execution due to a double free.... Critical Unreviewed
CVE-2018-9356 was published May 14, 2022
An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and... Critical Unreviewed
CVE-2018-19081 was published May 14, 2022
An issue was discovered in XiaoCms 20141229. It allows remote attackers to execute arbitrary code... Critical Unreviewed
CVE-2018-19196 was published May 14, 2022
In smp_br_state_machine_event of smp_br_main.cc, there is a possible out of bounds write due to... Critical Unreviewed
CVE-2018-9446 was published May 14, 2022
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the... Critical Unreviewed
CVE-2018-11905 was published May 14, 2022
FFmpeg before 2017-02-07 has an out-of-bounds write caused by a heap-based buffer overflow... Critical Unreviewed
CVE-2017-7862 was published May 14, 2022
HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to remote... Critical Unreviewed
CVE-2018-7114 was published May 14, 2022
Flash Player versions 31.0.0.148 and earlier have a type confusion vulnerability. Successful... Critical Unreviewed
CVE-2018-15981 was published May 14, 2022
There is a SQL injection in Benutzerverwaltung in REDAXO before 5.6.4. Critical Unreviewed
CVE-2018-18200 was published May 14, 2022
The VideoWhisper videowhisper-video-conference-integration plugin 4.91.8 for WordPress allows... Critical Unreviewed
CVE-2015-9271 was published May 14, 2022
An issue was discovered in LAOBANCMS 2.0. It allows remote attackers to execute arbitrary PHP... Critical Unreviewed
CVE-2018-19220 was published May 14, 2022
An issue was discovered in LAOBANCMS 2.0. It allows SQL Injection via the admin/login.php... Critical Unreviewed
CVE-2018-19221 was published May 14, 2022
SearchController.php in PbootCMS 1.2.1 has SQL injection via the index.php/Search/index.html... Critical Unreviewed
CVE-2018-19893 was published May 14, 2022
PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to execute... Critical Unreviewed
CVE-2018-19126 was published May 14, 2022
statics/app/index/controller/Install.php in YUNUCMS 1.1.5 (if install.lock is not present) allows... Critical Unreviewed
CVE-2018-19180 was published May 14, 2022
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application... Critical Unreviewed
CVE-2018-19067 was published May 14, 2022
gitolite commit fa06a34 through 3.5.3 might allow attackers to have unspecified impact via... Critical Unreviewed
CVE-2013-4451 was published May 14, 2022
EmpireCMS V7.5 allows remote attackers to upload and execute arbitrary code via ..%2F directory... Critical Unreviewed
CVE-2018-18869 was published May 14, 2022
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application... Critical Unreviewed
CVE-2018-19063 was published May 14, 2022
Unauthenticated arbitrary file upload vulnerability in jQuery Picture Cut <= v1.1Beta Critical Unreviewed
CVE-2018-9208 was published May 14, 2022
Missing validation check on CRL issuer name in Snapdragon Automobile, Snapdragon Mobile in... Critical Unreviewed
CVE-2017-18318 was published May 14, 2022
Heap-based buffer overflow in libavformat/http.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1... Critical Unreviewed
CVE-2016-10190 was published May 14, 2022
TP-Link TL-WR886N 7.0 1.1.0 devices allow remote attackers to cause a denial of service (Tlb Load... Critical Unreviewed
CVE-2018-19528 was published May 14, 2022
An issue was discovered in arcms through 2018-03-19. SQL injection exists via the json/newslist... Critical Unreviewed
CVE-2018-19558 was published May 14, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database