GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,270
Erlang
31
GitHub Actions
21
Go
2,044
Maven
5,000+
npm
3,736
NuGet
663
pip
3,414
Pub
12
RubyGems
891
Rust
868
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
273 advisories
Filter by severity
A command injection vulnerability has been reported to affect several QNAP operating system...
Moderate
Unreviewed
CVE-2023-23356
was published
Dec 19, 2024
An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while...
Moderate
Unreviewed
CVE-2024-56085
was published
Dec 16, 2024
An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while...
Moderate
Unreviewed
CVE-2024-56087
was published
Dec 16, 2024
A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. It has...
Moderate
Unreviewed
CVE-2024-11651
was published
Dec 11, 2024
A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. It has...
Moderate
Unreviewed
CVE-2024-11652
was published
Dec 11, 2024
A vulnerability was found in WeiYe-Jing datax-web 2.1.1. It has been classified as critical. This...
Moderate
Unreviewed
CVE-2024-12358
was published
Dec 9, 2024
An authenticated RCE vulnerability in the ClearPass Policy Manager web-based management interface...
Moderate
Unreviewed
CVE-2024-51772
was published
Dec 3, 2024
A vulnerability in the ClearPass Policy Manager web-based management interface allows remote...
Moderate
Unreviewed
CVE-2024-53672
was published
Dec 3, 2024
An issue in alist-tvbox v1.7.1 allows a remote attacker to execute arbitrary code via the /atv...
Moderate
Unreviewed
CVE-2024-48747
was published
Nov 26, 2024
Arbitrary commands execution on the server by exploiting a command injection vulnerability in the...
Moderate
Unreviewed
CVE-2024-11320
was published
Nov 26, 2024
TOTOLINK EX200 v4.0.3c.7646_B20201211 was found to contain a command insertion vulnerability in...
Moderate
Unreviewed
CVE-2024-53333
was published
Nov 26, 2024
A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118 and...
Moderate
Unreviewed
CVE-2024-11659
was published
Nov 25, 2024
A vulnerability has been found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118 and...
Moderate
Unreviewed
CVE-2024-11658
was published
Nov 25, 2024
A vulnerability classified as critical was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT...
Moderate
Unreviewed
CVE-2024-11655
was published
Nov 25, 2024
A vulnerability, which was classified as critical, has been found in EnGenius ENH1350EXT, ENS500...
Moderate
Unreviewed
CVE-2024-11656
was published
Nov 25, 2024
A vulnerability, which was classified as critical, was found in EnGenius ENH1350EXT, ENS500-AC...
Moderate
Unreviewed
CVE-2024-11657
was published
Nov 25, 2024
A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. It has...
Moderate
Unreviewed
CVE-2024-11653
was published
Nov 25, 2024
A vulnerability classified as critical has been found in EnGenius ENH1350EXT, ENS500-AC and...
Moderate
Unreviewed
CVE-2024-11654
was published
Nov 25, 2024
Ruijie NBR800G gateway NBR_RGOS_11.1(6)B4P9 is vulnerable to command execution in /itbox_pi...
Moderate
Unreviewed
CVE-2024-51027
was published
Nov 14, 2024
A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been classified as critical....
Moderate
Unreviewed
CVE-2024-11046
was published
Nov 10, 2024
A vulnerability, which was classified as critical, has been found in TOTOLINK X18 9.1.0cu...
Moderate
Unreviewed
CVE-2024-10966
was published
Nov 7, 2024
A vulnerability has been found in Tenda AC6 15.03.05.19 and classified as critical. Affected by...
Moderate
Unreviewed
CVE-2024-10697
was published
Nov 2, 2024
A vulnerability was found in didi Super-Jacoco 1.0. It has been declared as critical. This...
Moderate
Unreviewed
CVE-2024-10435
was published
Oct 28, 2024
A vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028 and classified...
Moderate
Unreviewed
CVE-2024-10193
was published
Oct 20, 2024
A Command Injection vulnerability in Juniper Networks Junos Space allows an unauthenticated,...
Moderate
Unreviewed
CVE-2024-39563
was published
Oct 11, 2024
ProTip!
Advisories are also available from the
GraphQL API