Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,300
Erlang
31
GitHub Actions
21
Go
2,069
Maven
5,000+
npm
3,744
NuGet
668
pip
3,429
Pub
12
RubyGems
892
Rust
880
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

12,494 advisories

Loading
Tecnick TCExam – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL... Critical Unreviewed
CVE-2024-47926 was published Dec 30, 2024
A vulnerability was found in 1000 Projects Attendance Tracking Management System 1.0. It has been... Moderate Unreviewed
CVE-2024-13037 was published Dec 30, 2024
A vulnerability has been found in code-projects Chat System 1.0 and classified as critical. This... Moderate Unreviewed
CVE-2024-13035 was published Dec 30, 2024
A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue... Moderate Unreviewed
CVE-2024-13036 was published Dec 30, 2024
SmartAgent v1.1.0 was discovered to contain a SQL injection vulnerability via the id parameter at... Critical Unreviewed
CVE-2024-50713 was published Dec 27, 2024
SQL injection vulnerability in Smart Agent v.1.1.0 allows a remote attacker to execute arbitrary... Critical Unreviewed
CVE-2024-50716 was published Dec 27, 2024
SQL injection vulnerability in Smart Agent v.1.1.0 allows a remote attacker to execute arbitrary... Critical Unreviewed
CVE-2024-50717 was published Dec 27, 2024
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Critical Unreviewed
CVE-2024-8950 was published Dec 25, 2024
The NEX-Forms – Ultimate Form Builder – Contact forms and much more plugin for WordPress is... Moderate Unreviewed
CVE-2024-10862 was published Dec 25, 2024
The WP Data Access – App, Table, Form and Chart Builder plugin plugin for WordPress is vulnerable... High Unreviewed
CVE-2024-12428 was published Dec 25, 2024
The Tourfic – Ultimate Hotel Booking, Travel Booking & Apartment Booking WordPress Plugin |... Moderate Unreviewed
CVE-2024-12032 was published Dec 25, 2024
The Advanced Floating Content plugin for WordPress is vulnerable to SQL Injection via the ... Moderate Unreviewed
CVE-2024-12031 was published Dec 24, 2024
The Booking Calendar WpDevArt plugin is vulnerable to time-based, blind SQL injection via the `id... Moderate Unreviewed
CVE-2024-10856 was published Dec 24, 2024
The Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress plugin for WordPress... Moderate Unreviewed
CVE-2024-11726 was published Dec 24, 2024
A vulnerability was found in 1000 Projects Attendance Tracking Management System 1.0. It has been... Moderate Unreviewed
CVE-2024-12898 was published Dec 23, 2024
A vulnerability was found in 1000 Projects Attendance Tracking Management System 1.0. It has been... Moderate Unreviewed
CVE-2024-12899 was published Dec 23, 2024
The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to SQL Injection via the ... Moderate Unreviewed
CVE-2024-11722 was published Dec 21, 2024
The WP Docs plugin for WordPress is vulnerable to time-based SQL Injection via the 'dir_id'... Moderate Unreviewed
CVE-2024-12635 was published Dec 21, 2024
SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote... Critical Unreviewed
CVE-2024-55509 was published Dec 20, 2024
Arista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability. This... High Unreviewed
CVE-2024-12832 was published Dec 20, 2024
A pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall... Critical Unreviewed
CVE-2024-12727 was published Dec 19, 2024
A vulnerability classified as critical was found in Codezips E-Commerce Site 1.0. Affected by... Moderate Unreviewed
CVE-2024-12792 was published Dec 19, 2024
A vulnerability, which was classified as critical, was found in Codezips E-Commerce Site 1.0.... Moderate Unreviewed
CVE-2024-12794 was published Dec 19, 2024
A vulnerability was found in Codezips E-Commerce Site 1.0. It has been rated as critical. This... Moderate Unreviewed
CVE-2024-12791 was published Dec 19, 2024
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Critical Unreviewed
CVE-2024-10244 was published Dec 19, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database