GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,051
Erlang
29
GitHub Actions
19
Go
1,878
Maven
5,000+
npm
3,602
NuGet
638
pip
3,203
Pub
10
RubyGems
852
Rust
814
Swift
35
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
11,638 advisories
Filter by severity
SQL injection vulnerabilities in SportsNET affecting version 4.0.1. These vulnerabilities could...
Critical
Unreviewed
CVE-2024-29729
was published
Aug 29, 2024
SQL injection vulnerabilities in SportsNET affecting version 4.0.1. These vulnerabilities could...
Critical
Unreviewed
CVE-2024-29724
was published
Aug 29, 2024
SQL injection vulnerabilities in SportsNET affecting version 4.0.1. These vulnerabilities could...
Critical
Unreviewed
CVE-2024-29723
was published
Aug 29, 2024
The Media Library Folders plugin for WordPress is vulnerable to second order SQL Injection via...
Critical
Unreviewed
CVE-2024-7857
was published
Aug 29, 2024
Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the...
High
Unreviewed
CVE-2022-46497
was published
Mar 7, 2024
ChurchCRM 5.5.0 FRCertificates.php is vulnerable to Blind SQL Injection (Time-based) via the...
Critical
Unreviewed
CVE-2024-25893
was published
Feb 21, 2024
In the module "Generate barcode on invoice / delivery slip" (ecgeneratebarcode) from Ether...
High
Unreviewed
CVE-2024-24310
was published
Feb 24, 2024
A SQL injection vulnerability in /smsa/admin_login.php in Kashipara Responsive School Management...
Moderate
Unreviewed
CVE-2024-41236
was published
Aug 28, 2024
Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated...
Moderate
Unreviewed
CVE-2023-33677
was published
Mar 6, 2024
SQL injection vulnerability in linlinjava litemall v.1.8.0 allows a remote attacker to obtain...
High
Unreviewed
CVE-2024-24323
was published
Feb 27, 2024
SQL Injection vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute...
Critical
Unreviewed
CVE-2024-27746
was published
Mar 2, 2024
A SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a...
High
Unreviewed
CVE-2024-25866
was published
Feb 29, 2024
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the email...
High
Unreviewed
CVE-2023-49546
was published
Mar 5, 2024
Hotel Booking Management v1.0 was discovered to contain a SQL injection vulnerability via the id...
Critical
Unreviewed
CVE-2023-49989
was published
Mar 7, 2024
SQL Injection vulnerability in Netcome NS-ASG Application Security Gateway v.6.3.1 allows a local...
High
Unreviewed
CVE-2024-28521
was published
Mar 22, 2024
Zohocorp ManageEngine Password Manager Pro versions before 12431 and ManageEngine PAM360 versions...
High
Unreviewed
CVE-2024-5546
was published
Aug 28, 2024
SQL injection vulnerability in pscartabandonmentpro v.2.0.11 and before allows a remote attacker...
Critical
Unreviewed
CVE-2024-28392
was published
Mar 20, 2024
A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been declared...
Moderate
Unreviewed
CVE-2024-8220
was published
Aug 28, 2024
A vulnerability classified as critical has been found in SourceCodester Music Gallery Site 1.0....
Moderate
Unreviewed
CVE-2024-8222
was published
Aug 28, 2024
A vulnerability classified as critical was found in SourceCodester Music Gallery Site 1.0. This...
Moderate
Unreviewed
CVE-2024-8223
was published
Aug 28, 2024
A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been rated as critical...
Moderate
Unreviewed
CVE-2024-8221
was published
Aug 28, 2024
A vulnerability was found in code-projects Responsive Hotel Site 1.0. It has been classified as...
Moderate
Unreviewed
CVE-2024-8219
was published
Aug 28, 2024
SQL injection vulnerability in scalapay v.1.2.41 and before allows a remote attacker to escalate...
Critical
Unreviewed
CVE-2024-28393
was published
Mar 25, 2024
SQL Injection vulnerability in CRMEB crmeb_java v.1.3.4 and before allows a remote attacker to...
High
Unreviewed
CVE-2024-25469
was published
Feb 24, 2024
SQL Injection vulnerability in code-projects Agro-School Management System 1.0 allows attackers...
Critical
Unreviewed
CVE-2024-25250
was published
Mar 13, 2024
ProTip!
Advisories are also available from the
GraphQL API