Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,077
Erlang
29
GitHub Actions
19
Go
1,903
Maven
5,000+
npm
3,632
NuGet
638
pip
3,247
Pub
10
RubyGems
864
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+

2,205 advisories

Loading
StoneFly Storage Concentrator (SC and SCVM) before 8.0.4.26 allows remote authenticated users to... High Unreviewed
CVE-2024-30213 was published Jul 13, 2024
Sourcecodester Poultry Farm Management System v1.0 contains an Unauthenticated Remote Code... Critical Unreviewed
CVE-2024-40110 was published Jul 12, 2024
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1).... High Unreviewed
CVE-2024-39568 was published Jul 9, 2024
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 HF1).... High Unreviewed
CVE-2024-39571 was published Jul 9, 2024
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1).... High Unreviewed
CVE-2024-39567 was published Jul 9, 2024
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 HF1).... High Unreviewed
CVE-2024-39570 was published Jul 9, 2024
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1).... High Unreviewed
CVE-2024-39569 was published Jul 9, 2024
A local privilege escalation vlnerability in the WatchGuard Mobile VPN with SSL client on Windows... High Unreviewed
CVE-2024-4944 was published Jul 9, 2024
An issue was discovered in SeaCMS <=12.9 which allows remote attackers to execute arbitrary code... Critical Unreviewed
CVE-2024-39028 was published Jul 5, 2024
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions... High Unreviewed
CVE-2024-36983 was published Jul 1, 2024
Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote... High Unreviewed
CVE-2024-36073 was published Jun 27, 2024
This Advisory describes an issue that impacts Arista Wireless Access Points. Any entity with the... High Unreviewed
CVE-2024-4578 was published Jun 27, 2024
TELSAT marKoni FM Transmitters are vulnerable to a command injection vulnerability through the... Critical Unreviewed
CVE-2024-39373 was published Jun 27, 2024
In WhatsUp Gold versions released before 2023.1.3, a Remote Code Execution issue exists in... Critical Unreviewed
CVE-2024-4883 was published Jun 25, 2024
In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution... Critical Unreviewed
CVE-2024-4884 was published Jun 25, 2024
HashiCorp go-getter Vulnerable to Code Execution On Git Update Via Git Config Manipulation High
CVE-2024-6257 was published for github.com/hashicorp/go-getter (Go) Jun 25, 2024
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable... High Unreviewed
CVE-2024-4639 was published Jun 25, 2024
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable... High Unreviewed
CVE-2024-4638 was published Jun 25, 2024
WAVLINK WN551K1 found a command injection vulnerability through the start_hour parameter of /cgi... Moderate Unreviewed
CVE-2024-38896 was published Jun 24, 2024
H3C Magic R230 V100R002's udpserver opens port 9034, allowing attackers to execute arbitrary... Moderate Unreviewed
CVE-2024-38903 was published Jun 24, 2024
WAVLINK WN551K1 found a command injection vulnerability through the IP parameter of /cgi-bin... Moderate Unreviewed
CVE-2024-38894 was published Jun 24, 2024
The CRUDDIY project is vulnerable to shell command injection via sending a crafted POST request... High Unreviewed
CVE-2024-4748 was published Jun 24, 2024
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability... Critical Unreviewed
CVE-2024-37091 was published Jun 24, 2024
A vulnerability has been found in Ruijie RG-UAC 1.0 and classified as critical. This... Moderate Unreviewed
CVE-2024-6269 was published Jun 23, 2024
Actual Analyzer through 2014-08-29 allows code execution via shell metacharacters because... Critical Unreviewed
CVE-2014-5470 was published Jun 22, 2024
ProTip! Advisories are also available from the GraphQL API