Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
102
GitHub Actions
54
Go
4,428
Maven
5,000+
npm
5,000+
NuGet
1,088
pip
5,000+
Pub
13
RubyGems
1,129
Rust
1,506
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

27,895 advisories

Loading
An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the FAS key entry in the... Critical Unreviewed
CVE-2023-38319 was published Jan 26, 2024
An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the network interface name... Critical Unreviewed
CVE-2023-38317 was published Jan 26, 2024
An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the gateway FQDN entry in... Critical Unreviewed
CVE-2023-38318 was published Jan 26, 2024
An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16... Critical Unreviewed
CVE-2024-0402 was published Jan 26, 2024
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Critical Unreviewed
CVE-2024-21326 was published Jan 26, 2024
A hardcoded credential vulnerability exists in IBM Merge Healthcare eFilm Workstation. A remote,... Critical Unreviewed
CVE-2024-23619 was published Jan 26, 2024
An arbitrary code execution vulnerability exists in Arris SURFboard SGB6950AC2 devices. An... Critical Unreviewed
CVE-2024-23618 was published Jan 26, 2024
A buffer overflow vulnerability exists in Symantec Deployment Solution version 7.9 when parsing... Critical Unreviewed
CVE-2024-23613 was published Jan 26, 2024
A buffer overflow vulnerability exists in Symantec Data Loss Prevention version 14.0.2 and before... Critical Unreviewed
CVE-2024-23617 was published Jan 26, 2024
A buffer overflow vulnerability exists in Symantec Server Management Suite version 7.9 and before... Critical Unreviewed
CVE-2024-23616 was published Jan 26, 2024
A stack-based buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A... Critical Unreviewed
CVE-2024-23622 was published Jan 26, 2024
A command injection vulnerability exists in the gena.cgi module of D-Link DAP-1650 devices. An... Critical Unreviewed
CVE-2024-23624 was published Jan 26, 2024
A buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote,... Critical Unreviewed
CVE-2024-23621 was published Jan 26, 2024
A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 9.5 and before. A... Critical Unreviewed
CVE-2024-23614 was published Jan 26, 2024
A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 10.5 and before. A... Critical Unreviewed
CVE-2024-23615 was published Jan 26, 2024
A command injection vulnerability exists in D-Link DAP-1650 devices when handling UPnP SUBSCRIBE... Critical Unreviewed
CVE-2024-23625 was published Jan 26, 2024
A command injection vulnerability exists in the ‘SaveSysLogParams’ parameter of the Motorola... Critical Unreviewed
CVE-2024-23626 was published Jan 26, 2024
A command injection vulnerability exists in the 'SaveStaticRouteIPv4Params' parameter of the... Critical Unreviewed
CVE-2024-23627 was published Jan 26, 2024
A command injection vulnerability exists in the 'SaveStaticRouteIPv6Params' parameter of the... Critical Unreviewed
CVE-2024-23628 was published Jan 26, 2024
An authentication bypass vulnerability exists in the web component of the Motorola MR2600. An... Critical Unreviewed
CVE-2024-23629 was published Jan 26, 2024
An arbitrary firmware upload vulnerability exists in the Motorola MR2600. An attacker can... Critical Unreviewed
CVE-2024-23630 was published Jan 26, 2024
An issue in Projectworlds Vistor Management Systemin PHP v.1.0 allows a remtoe attacker to... Critical Unreviewed
CVE-2024-22922 was published Jan 26, 2024
liveSite v2019.1 was discovered to contain a remote code execution (RCE) vulenrabiity via the... Critical Unreviewed
CVE-2024-22638 was published Jan 25, 2024
SystemK NVR 504/508/516 versions 2.3.5SK.30084998 and prior are vulnerable to a command... Critical Unreviewed
CVE-2023-7227 was published Jan 25, 2024
TOTOLINK X2000R_V2 V2.0.0-B20230727.10434 has a command injection vulnerability in the sub_449040... Critical Unreviewed
CVE-2024-22529 was published Jan 25, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database