GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,293
Erlang
31
GitHub Actions
21
Go
2,061
Maven
5,000+
npm
3,744
NuGet
668
pip
3,423
Pub
12
RubyGems
892
Rust
875
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
816 advisories
Filter by severity
Moxa’s cellular routers, secure routers, and network security appliances are affected by a...
Critical
Unreviewed
CVE-2024-9140
was published
Jan 3, 2025
Loomio version 2.22.0 allows executing arbitrary commands on the server.
This is possible...
Critical
Unreviewed
CVE-2024-1297
was published
Feb 20, 2024
Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows...
Critical
Unreviewed
CVE-2024-12828
was published
Dec 30, 2024
Tiki Wiki CMS – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS...
Critical
Unreviewed
CVE-2024-47919
was published
Dec 30, 2024
In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache...
Critical
Unreviewed
CVE-2024-4577
was published
Jun 9, 2024
The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0...
Critical
Unreviewed
CVE-2024-45519
was published
Oct 3, 2024
upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell...
Critical
Unreviewed
CVE-2018-14933
was published
May 13, 2022
rizin before v0.6.3 is vulnerable to Improper Neutralization of Special Elements via meta_set...
Critical
Unreviewed
CVE-2024-31668
was published
Dec 18, 2024
An OS command injection vulnerability exists in the NAT parameter of GoCast 1.1.3. A specially...
Critical
Unreviewed
CVE-2024-29224
was published
Dec 18, 2024
In TOTOLINK X6000R V9.4.0cu.1041_B20240224 in the shttpd file, the Uci_Set Str function is used...
Critical
Unreviewed
CVE-2024-52723
was published
Nov 22, 2024
getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb...
Critical
Unreviewed
CVE-2024-51378
was published
Oct 30, 2024
The affected product is vulnerable to a command injection. An unauthenticated attacker could send...
Critical
Unreviewed
CVE-2024-52320
was published
Dec 6, 2024
IBM Security Verify Access Appliance 10.0.0 through 10.0.8 could allow a remote authenticated...
Critical
Unreviewed
CVE-2024-49803
was published
Nov 29, 2024
A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and...
Critical
Unreviewed
CVE-2024-11482
was published
Nov 29, 2024
A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command...
Critical
Unreviewed
CVE-2024-50373
was published
Nov 26, 2024
A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command...
Critical
Unreviewed
CVE-2024-50370
was published
Nov 26, 2024
A CWE-306 "Missing Authentication for Critical Function" was discovered affecting the following...
Critical
Unreviewed
CVE-2024-50375
was published
Nov 26, 2024
A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command...
Critical
Unreviewed
CVE-2024-50371
was published
Nov 26, 2024
A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command...
Critical
Unreviewed
CVE-2024-50372
was published
Nov 26, 2024
A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command...
Critical
Unreviewed
CVE-2024-50374
was published
Nov 26, 2024
A parameter within a command does not properly validate input within myPRO Manager which could be...
Critical
Unreviewed
CVE-2024-47407
was published
Nov 23, 2024
An OS Command Injection vulnerability exists within myPRO Manager. A parameter within a command...
Critical
Unreviewed
CVE-2024-52034
was published
Nov 23, 2024
Cohesive Networks VNS3 Command Injection Remote Code Execution Vulnerability. This vulnerability...
Critical
Unreviewed
CVE-2024-8807
was published
Nov 22, 2024
Cohesive Networks VNS3 Command Injection Remote Code Execution Vulnerability. This vulnerability...
Critical
Unreviewed
CVE-2024-8806
was published
Nov 22, 2024
D-Link DI-8200 16.07.26A1 is vulnerable to remote command execution in the msp_info_htm function...
Critical
Unreviewed
CVE-2024-51151
was published
Nov 22, 2024
ProTip!
Advisories are also available from the
GraphQL API