Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,386
Erlang
33
GitHub Actions
22
Go
2,141
Maven
5,000+
npm
3,803
NuGet
687
pip
3,480
Pub
12
RubyGems
897
Rust
898
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

2,165 advisories

Loading
A vulnerability was found in code-projects Content Management System 1.0. It has been classified... Moderate Unreviewed
CVE-2025-0346 was published Jan 9, 2025
The Awesome Support WordPress plugin before 6.1.5 does not correctly authorize the... Moderate Unreviewed
CVE-2023-5352 was published Nov 6, 2023
Incorrect access control in the component /iclock/Settings?restartNCS=1 of NovaCHRON Zeitsysteme... Moderate Unreviewed
CVE-2024-53542 was published Feb 25, 2025
A vulnerability classified as critical was found in needyamin image_gallery 1.0. This... Moderate Unreviewed
CVE-2025-0722 was published Jan 27, 2025
Improper access control in mail module of Odoo Community 17.0 and Odoo Enterprise 17.0 allows... High Unreviewed
CVE-2024-36259 was published Feb 25, 2025
Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0... High Unreviewed
CVE-2024-12368 was published Feb 25, 2025
The ElementsKit Elementor addons plugin for WordPress is vulnerable to Sensitive Information... Moderate Unreviewed
CVE-2025-0968 was published Feb 19, 2025
The Prime Addons for Elementor plugin for WordPress is vulnerable to Insecure Direct Object... Moderate Unreviewed
CVE-2024-13855 was published Feb 20, 2025
The Enfold theme for WordPress is vulnerable to unauthorized access of data due to a missing... Moderate Unreviewed
CVE-2024-13693 was published Feb 25, 2025
A vulnerability was found in needyamin Library Card System 1.0. It has been declared as critical.... Moderate Unreviewed
CVE-2025-1355 was published Feb 16, 2025
A vulnerability, which was classified as critical, has been found in Lumsoft ERP 8. Affected by... Moderate Unreviewed
CVE-2025-1646 was published Feb 25, 2025
The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2024-13229 was published Feb 13, 2025
A vulnerability was found in SourceCodester Best Church Management Software 1.0. It has been... Moderate Unreviewed
CVE-2025-1598 was published Feb 24, 2025
A vulnerability classified as critical has been found in SourceCodester Best Employee Management... Moderate Unreviewed
CVE-2025-1593 was published Feb 23, 2025
A vulnerability was found in SourceCodester E-Learning System 1.0. It has been classified as... Moderate Unreviewed
CVE-2025-1590 was published Feb 23, 2025
A vulnerability classified as critical was found in hzmanyun Education and Training System 3.1.1.... Moderate Unreviewed
CVE-2025-1555 was published Feb 21, 2025
Block BYPASS vulnerability in iQ Block Country plugin <= 1.2.18 on WordPress. Critical Unreviewed
CVE-2022-41155 was published Nov 19, 2022
Auth. (subscriber+) Messaging Block Bypass vulnerability in Better Messages plugin <= 1.9.10.69... Moderate Unreviewed
CVE-2022-40216 was published Nov 19, 2022
DDSN Interactive cm3 Acora CMS version 10.1.1 contains an improper access control vulnerability.... Moderate Unreviewed
CVE-2025-25968 was published Feb 20, 2025
Bypass vulnerability in Quiz And Survey Master plugin <= 7.3.10 on WordPress. Critical Unreviewed
CVE-2022-41652 was published Nov 18, 2022
Lexmark MX6500 LW75.JD.P296 and previous devices have Incorrect Access Control via the access... Critical Unreviewed
CVE-2020-35546 was published Feb 19, 2025
Improper access control in some Intel(R) Optane(TM) PMem 100 Series Management Software before... High Unreviewed
CVE-2023-22311 was published Feb 20, 2025
Improper access control in some Intel(R) Optane(TM) PMem software before versions 01.00.00.3547,... High Unreviewed
CVE-2023-27517 was published Feb 20, 2025
Dell RecoverPoint for Virtual Machines 6.0.X contains a command execution vulnerability. A Low... Moderate Unreviewed
CVE-2025-21105 was published Feb 20, 2025
An improper access control vulnerability in Power Pages allows an unauthorized attacker to... High Unreviewed
CVE-2025-24989 was published Feb 20, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database