GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,224
Erlang
31
GitHub Actions
19
Go
1,990
Maven
5,000+
npm
3,706
NuGet
661
pip
3,336
Pub
11
RubyGems
884
Rust
845
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
2,012 advisories
Filter by severity
The The Uix Slideshow plugin for WordPress is vulnerable to arbitrary shortcode execution in all...
High
Unreviewed
CVE-2024-9839
was published
Nov 16, 2024
HEVC Video Extensions Remote Code Execution Vulnerability.
High
Unreviewed
CVE-2022-21917
was published
Jan 12, 2022
Microsoft Word Remote Code Execution Vulnerability.
High
Unreviewed
CVE-2022-21842
was published
Jan 12, 2022
Microsoft SharePoint Server Remote Code Execution Vulnerability.
High
Unreviewed
CVE-2022-21837
was published
Jan 12, 2022
In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This...
High
Unreviewed
CVE-2024-30202
was published
Mar 25, 2024
Windows Geolocation Service Remote Code Execution Vulnerability.
High
Unreviewed
CVE-2022-21878
was published
Jan 12, 2022
Windows Security Center API Remote Code Execution Vulnerability.
High
Unreviewed
CVE-2022-21874
was published
Jan 12, 2022
Microsoft Office Remote Code Execution Vulnerability.
High
Unreviewed
CVE-2022-21840
was published
Jan 12, 2022
In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible way to achieve arbitrary...
High
Unreviewed
CVE-2024-40671
was published
Nov 13, 2024
A Remote Code Execution vulnerability has been discovered in Sonatype Nexus Repository 2.
This...
High
Unreviewed
CVE-2024-5082
was published
Nov 14, 2024
Improper input validation in the NPU driver could allow an attacker to supply a specially crafted...
High
Unreviewed
CVE-2024-21976
was published
Nov 12, 2024
TorchGeo Remote Code Execution Vulnerability
High
Unreviewed
CVE-2024-49048
was published
Nov 12, 2024
The Ikhgur mn.ikhgur.khotoch (aka Video Downloader Pro & Browser) application through 1.0.42 for...
High
Unreviewed
CVE-2024-46966
was published
Nov 11, 2024
The com.video.downloader.all (aka All Video Downloader) application through 11.28 for Android...
High
Unreviewed
CVE-2024-46964
was published
Nov 11, 2024
The com.superfast.video.downloader (aka Super Unlimited Video Downloader - All in One)...
High
Unreviewed
CVE-2024-46963
was published
Nov 11, 2024
A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be...
High
Unreviewed
CVE-2024-6655
was published
Jul 16, 2024
The The WP Photo Album Plus plugin for WordPress is vulnerable to arbitrary shortcode execution...
High
Unreviewed
CVE-2024-10958
was published
Nov 10, 2024
The The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable...
High
Unreviewed
CVE-2024-10640
was published
Nov 9, 2024
The The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content...
High
Unreviewed
CVE-2024-10261
was published
Nov 9, 2024
The ASD com.rocks.video.downloader (aka HD Video Downloader All Format) application through 7.0...
High
Unreviewed
CVE-2024-46960
was published
Nov 8, 2024
The Inshot com.downloader.privatebrowser (aka Video Downloader - XDownloader) application through...
High
Unreviewed
CVE-2024-46961
was published
Nov 8, 2024
A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14,...
High
Unreviewed
CVE-2023-42833
was published
Jan 11, 2024
A Host header injection vulnerability in Agile-Board 1.0 allows attackers to obtain the password...
High
Unreviewed
CVE-2024-51329
was published
Nov 4, 2024
The Tickera – WordPress Event Ticketing plugin for WordPress is vulnerable to arbitrary shortcode...
High
Unreviewed
CVE-2024-10263
was published
Nov 5, 2024
MangoOS before 5.2.0 was discovered to contain an authenticated remote code execution (RCE)...
High
Unreviewed
CVE-2024-37845
was published
Oct 25, 2024
ProTip!
Advisories are also available from the
GraphQL API