Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
44
GitHub Actions
45
Go
3,196
Maven
5,000+
npm
5,000+
NuGet
864
pip
4,483
Pub
12
RubyGems
992
Rust
1,186
Swift
51
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

140,515 advisories

Loading
in OpenHarmony v3.2.4 and prior versions allow a local attacker arbitrary code execution in any... Moderate Unreviewed
CVE-2023-46708 was published Mar 4, 2024
in OpenHarmony v3.2.4 and prior versions allow a local attacker cause sensitive information leak... Moderate Unreviewed
CVE-2024-21826 was published Mar 4, 2024
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through... Moderate Unreviewed
CVE-2024-21816 was published Mar 4, 2024
SnapCenter versions 4.8 prior to 5.0 are susceptible to a vulnerability which could allow an... Moderate Unreviewed
CVE-2024-21987 was published Feb 16, 2024
Inadequate escaping of mail addresses lead to XSS vulnerabilities in various components. Moderate Unreviewed
CVE-2024-21725 was published Feb 29, 2024
Cross-site scripting (XSS) vulnerability in XunRuiCMS versions v4.6.2 and before, allows remote... Moderate Unreviewed
CVE-2024-24388 was published Feb 2, 2024
SuperWebMailer v9.31.0.01799 was discovered to contain a reflected cross-site scripting (XSS)... Moderate Unreviewed
CVE-2024-24131 was published Feb 7, 2024
NTFS file system in Windows NT 4.0 and Windows 2000 SP2 allows local attackers to hide file usage... Moderate Unreviewed
CVE-2002-0725 was published Apr 30, 2022
An issue in Shenzen Tenda Technology CP3V2.0 V11.10.00.2311090948 allows a local attacker to... Moderate Unreviewed
CVE-2024-24488 was published Feb 7, 2024
An improper certificate validation vulnerability in Fortinet FortiOS 7.0.0 - 7.0.13, 7.2.0 - 7.2... Moderate Unreviewed
CVE-2023-47537 was published Feb 15, 2024
PX4 Autopilot 1.14 and earlier, due to the lack of synchronization mechanism for loading geofence... Moderate Unreviewed
CVE-2024-24254 was published Feb 7, 2024
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2024-25098 was published Feb 29, 2024
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2024-23501 was published Feb 29, 2024
Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of... Moderate Unreviewed
CVE-2023-44346 was published Feb 29, 2024
Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by a... Moderate Unreviewed
CVE-2023-44345 was published Feb 29, 2024
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2024-25094 was published Feb 29, 2024
Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by a NULL... Moderate Unreviewed
CVE-2023-44347 was published Feb 29, 2024
Vulnerability whereby an attacker could send a malicious link to an authenticated operator, which... Moderate Unreviewed
CVE-2024-1890 was published Feb 26, 2024
Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of... Moderate Unreviewed
CVE-2023-44344 was published Feb 29, 2024
Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of... Moderate Unreviewed
CVE-2023-44342 was published Feb 29, 2024
Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by a NULL... Moderate Unreviewed
CVE-2023-44341 was published Feb 29, 2024
This plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode... Moderate Unreviewed
CVE-2023-6884 was published Feb 6, 2024
The Views for WPForms – Display & Edit WPForms Entries on your site frontend plugin for WordPress... Moderate Unreviewed
CVE-2024-0371 was published Feb 6, 2024
The Views for WPForms – Display & Edit WPForms Entries on your site frontend plugin for WordPress... Moderate Unreviewed
CVE-2024-0373 was published Feb 6, 2024
The Views for WPForms – Display & Edit WPForms Entries on your site frontend plugin for WordPress... Moderate Unreviewed
CVE-2024-0374 was published Feb 6, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database