Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,521
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,514
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

24 advisories

Loading
The Single Sign On For TNG plugin for WordPress is vulnerable to Authentication Bypass via... Critical Unreviewed
CVE-2026-15964 was published Aug 1, 2026
Unverified password change vulnerability in Vimesoft Inc. Enterprise Video Platform allows... Critical Unreviewed
CVE-2026-12692 was published Jul 17, 2026
The affected KMW CCTV Security Cameras are vulnerable to a critical unauthenticated password... Critical Unreviewed
CVE-2026-5386 was published May 29, 2026
An issue in Daylight Studio FuelCMS v1.5.2 allows attackers to exfiltrate users' password reset... Critical Unreviewed
CVE-2026-30458 was published Mar 26, 2026
Ibexa User Bundle is missing password change validation Critical
CVE-2025-67719 was published for ibexa/user (Composer) Dec 10, 2025
Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2... Critical Unreviewed
CVE-2025-63362 was published Dec 4, 2025
The Appy Pie Connect for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation... Critical Unreviewed
CVE-2025-9286 was published Oct 3, 2025
An authentication bypass vulnerability allows remote attackers to gain administrative privileges... Critical Unreviewed
CVE-2025-10159 was published Sep 9, 2025
The Sala - Startup & SaaS WordPress Theme theme for WordPress is vulnerable to privilege... Critical Unreviewed
CVE-2025-4606 was published Jul 9, 2025
The DWT - Directory & Listing WordPress Theme theme for WordPress is vulnerable to privilege... Critical Unreviewed
CVE-2024-12827 was published Jun 27, 2025
The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all... Critical Unreviewed
CVE-2025-4322 was published May 20, 2025
The GPM from WormHole Tech has an Unverified Password Change vulnerability, allowing... Critical Unreviewed
CVE-2025-4558 was published May 12, 2025
The IMITHEMES Listing plugin is vulnerable to privilege escalation via account takeover in all... Critical Unreviewed
CVE-2025-2253 was published May 9, 2025
The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover... Critical Unreviewed
CVE-2025-3603 was published Apr 24, 2025
A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote... Critical Unreviewed
CVE-2024-48887 was published Apr 8, 2025
The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to privilege escalation... Critical Unreviewed
CVE-2024-12824 was published Mar 1, 2025
The CarSpot – Dealership Wordpress Classified Theme theme for WordPress is vulnerable to... Critical Unreviewed
CVE-2024-12860 was published Feb 18, 2025
Unverified password change vulnerability in Janto, versions prior to r12. This could allow an... Critical Unreviewed
CVE-2025-1107 was published Feb 7, 2025
The Adifier System plugin for WordPress is vulnerable to privilege escalation via account... Critical Unreviewed
CVE-2024-13375 was published Jan 18, 2025
The LevelOne WBR-6012 router's web application has a vulnerability in its firmware version R0... Critical Unreviewed
CVE-2024-33699 was published Oct 30, 2024
An issue in Hangzhou Xiongwei Technology Development Co., Ltd. Restaurant Digital Comprehensive... Critical Unreviewed
CVE-2024-26520 was published Jul 26, 2024
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5... Critical Unreviewed
CVE-2024-37998 was published Jul 22, 2024
A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem... Critical Unreviewed
CVE-2024-20419 was published Jul 17, 2024
The UserPro plugin for WordPress is vulnerable to unauthorized password resets in versions up to,... Critical Unreviewed
CVE-2023-2449 was published Nov 22, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database