Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,077
Erlang
29
GitHub Actions
19
Go
1,903
Maven
5,000+
npm
3,632
NuGet
638
pip
3,247
Pub
10
RubyGems
864
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

876 advisories

Loading
A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS... High Unreviewed
CVE-2024-3273 was published Apr 4, 2024
VMware SD-WAN Edge contains an unauthenticated command injection vulnerability potentially... High Unreviewed
CVE-2024-22246 was published Apr 2, 2024
There is a command injection vulnerability in some Hikvision NVRs. This could allow an... High Unreviewed
CVE-2024-29949 was published Apr 2, 2024
Tenda F1202 v1.2.0.20(408) has a command injection vulnerablility in the formWriteFacMac function... High Unreviewed
CVE-2024-30637 was published Mar 29, 2024
A flaw was found in Cockpit. Deleting a sosreport with a crafted name via the Cockpit web... High Unreviewed
CVE-2024-2947 was published Mar 28, 2024
In Splunk Enterprise versions below 9.2.1, 9.1.4, and 9.0.9, the Dashboard Examples Hub in the... High Unreviewed
CVE-2024-29946 was published Mar 27, 2024
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability... High Unreviewed
CVE-2024-24897 was published Mar 25, 2024
HGW BL1500HM Ver 002.001.013 and earlier allows a network-adjacent unauthenticated attacker to... High Unreviewed
CVE-2024-28041 was published Mar 25, 2024
A command injection vulnerability exists in the cgibin binary in DIR-845L router firmware <= v1... High Unreviewed
CVE-2024-29366 was published Mar 22, 2024
A vulnerability was found in Ruijie RG-NBS2009G-P up to 20240305. It has been declared as... High Unreviewed
CVE-2024-2642 was published Mar 20, 2024
There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware... High Unreviewed
CVE-2024-28353 was published Mar 15, 2024
Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution ... High Unreviewed
CVE-2024-25228 was published Mar 14, 2024
Outlook for Android Information Disclosure Vulnerability High Unreviewed
CVE-2024-26204 was published Mar 12, 2024
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.... High Unreviewed
CVE-2024-25613 was published Mar 5, 2024
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.... High Unreviewed
CVE-2024-1356 was published Mar 5, 2024
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.... High Unreviewed
CVE-2024-25611 was published Mar 5, 2024
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.... High Unreviewed
CVE-2024-25612 was published Mar 5, 2024
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote... High Unreviewed
CVE-2024-26294 was published Feb 28, 2024
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote... High Unreviewed
CVE-2024-26296 was published Feb 28, 2024
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote... High Unreviewed
CVE-2024-26295 was published Feb 28, 2024
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote... High Unreviewed
CVE-2024-26298 was published Feb 28, 2024
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote... High Unreviewed
CVE-2024-26297 was published Feb 28, 2024
An issue was discovered in Linksys Router E1700 version 1.0.04 (build 3), allows authenticated... High Unreviewed
CVE-2024-22544 was published Feb 27, 2024
Command Injection vulnerability in D-Link Dir 882 with firmware version DIR882A1_FW130B06 allows... High Unreviewed
CVE-2023-24330 was published Feb 21, 2024
An issue in idocv v.14.1.3_20231228 allows a remote attacker to execute arbitrary code and obtain... High Unreviewed
CVE-2024-24377 was published Feb 16, 2024
ProTip! Advisories are also available from the GraphQL API