Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,331
Erlang
31
GitHub Actions
21
Go
2,093
Maven
5,000+
npm
3,756
NuGet
678
pip
3,443
Pub
12
RubyGems
892
Rust
882
Swift
37
Unreviewed advisories
All unreviewed
5,000+

122,146 advisories

Loading
The Ketchup Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the... Moderate Unreviewed
CVE-2024-13590 was published Jan 22, 2025
The Picture Gallery – Frontend Image Uploads, AJAX Photo List plugin for WordPress is vulnerable... Moderate Unreviewed
CVE-2024-13584 was published Jan 22, 2025
The WP-Polls plugin for WordPress is vulnerable to SQL Injection via COOKIE in all versions up to... Moderate Unreviewed
CVE-2024-13426 was published Jan 22, 2025
A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 ... Moderate Unreviewed
CVE-2023-37035 was published Jan 22, 2025
In reload of ServiceListing.java , there is a possible way to allow a malicious app to hide an... Moderate Unreviewed
CVE-2024-49733 was published Jan 22, 2025
In build_read_multi_rsp of gatt_sr.cc, there is a possible denial of service due to a logic error... Moderate Unreviewed
CVE-2024-43763 was published Jan 22, 2025
In multiple locations, there is a possible way to access media content belonging to another user... Moderate Unreviewed
CVE-2023-40108 was published Jan 22, 2025
Vulnerability in the PeopleSoft Enterprise FIN eSettlements product of Oracle PeopleSoft ... Moderate Unreviewed
CVE-2025-21539 was published Jan 21, 2025
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web... Moderate Unreviewed
CVE-2025-21538 was published Jan 21, 2025
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Packaging). ... Moderate Unreviewed
CVE-2025-21543 was published Jan 21, 2025
Vulnerability in the Oracle Financial Services Behavior Detection Platform product of Oracle... Moderate Unreviewed
CVE-2025-21550 was published Jan 21, 2025
Vulnerability in the Oracle Communications Order and Service Management product of Oracle... Moderate Unreviewed
CVE-2025-21542 was published Jan 21, 2025
Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle... Moderate Unreviewed
CVE-2025-21562 was published Jan 21, 2025
Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards ... Moderate Unreviewed
CVE-2025-21552 was published Jan 21, 2025
Vulnerability in the Oracle Communications Order and Service Management product of Oracle... Moderate Unreviewed
CVE-2025-21554 was published Jan 21, 2025
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported... Moderate Unreviewed
CVE-2025-21559 was published Jan 21, 2025
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Admin Screens... Moderate Unreviewed
CVE-2025-21541 was published Jan 21, 2025
Vulnerability in the Oracle Solaris product of Oracle Systems (component: File system). The... Moderate Unreviewed
CVE-2025-21551 was published Jan 21, 2025
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security:... Moderate Unreviewed
CVE-2025-21540 was published Jan 21, 2025
Vulnerability in Oracle Application Express (component: General). Supported versions that are... Moderate Unreviewed
CVE-2025-21557 was published Jan 21, 2025
Vulnerability in the Oracle Life Sciences Argus Safety product of Oracle Health Sciences... Moderate Unreviewed
CVE-2025-21570 was published Jan 21, 2025
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle... Moderate Unreviewed
CVE-2025-21558 was published Jan 21, 2025
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported... Moderate Unreviewed
CVE-2025-21555 was published Jan 21, 2025
Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion ... Moderate Unreviewed
CVE-2025-21569 was published Jan 21, 2025
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security:... Moderate Unreviewed
CVE-2025-21567 was published Jan 21, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database