Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
3,968
Erlang
29
GitHub Actions
16
Go
1,752
Maven
4,982
npm
3,516
NuGet
609
pip
3,089
Pub
10
RubyGems
832
Rust
782
Swift
34
Unreviewed advisories
All unreviewed
5,000+

2,020 advisories

Loading
tj-actions/changed-files has Potential Actions command injection in output filenames (GHSL-2023-271) High
CVE-2023-51664 was published for tj-actions/changed-files (GitHub Actions) Jan 2, 2024
jorgectf jsoref
An issue was discovered in Peplink Balance Two before 8.4.0. Command injection in the traceroute... High Unreviewed
CVE-2023-49226 was published Dec 25, 2023
TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command... Critical Unreviewed
CVE-2023-51016 was published Dec 22, 2023
A command injection vulnerability exists in Bosch IP cameras that allows an authenticated user... High Unreviewed
CVE-2023-39509 was published Dec 22, 2023
MotionPro in Array ArrayOS AG before 9.4.0.505 on AG and vxAG allows remote command execution via... Critical Unreviewed
CVE-2023-51707 was published Dec 22, 2023
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a command injection vulnerability via the... Critical Unreviewed
CVE-2023-50989 was published Dec 21, 2023
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a command injection vulnerability via the... Critical Unreviewed
CVE-2023-50983 was published Dec 21, 2023
mlflow Command Injection vulnerability High
CVE-2023-6940 was published for mlflow (pip) Dec 19, 2023
A vulnerability was found in kalcaddle kodbox up to 1.48. It has been declared as critical.... High Unreviewed
CVE-2023-6848 was published Dec 16, 2023
MajorDoMo (aka Major Domestic Module) before 0662e5e allows command execution via thumb.php shell... Critical Unreviewed
CVE-2023-50917 was published Dec 15, 2023
A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP... Critical Unreviewed
CVE-2023-50089 was published Dec 15, 2023
Apache StreamPark: Authenticated system users could trigger remote command execution Critical
CVE-2023-49898 was published for org.apache.streampark:streampark (Maven) Dec 15, 2023
Gradio Exposure of Sensitive Information to an Unauthorized Actor vulnerability Critical
CVE-2023-6572 was published for gradio (pip) Dec 14, 2023
There is a command injection vulnerability in some ZTE mobile internet products. Due to... High Unreviewed
CVE-2023-25643 was published Dec 14, 2023
An improper neutralization of special elements used in a command ('Command Injection')... High Unreviewed
CVE-2023-48791 was published Dec 13, 2023
In Red Hat Advanced Cluster Security (RHACS), it was found that some security related HTTP... Moderate Unreviewed
CVE-2023-4958 was published Dec 12, 2023
SAP Solution Manager - version 720, allows an authorized attacker to execute certain deprecated... Moderate Unreviewed
CVE-2023-49587 was published Dec 12, 2023
NETSCOUT nGeniusPULSE 3.8 has a Command Injection Vulnerability. Critical Unreviewed
CVE-2023-40301 was published Dec 7, 2023
Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the ... Critical Unreviewed
CVE-2023-49431 was published Dec 7, 2023
Tenda AX9 V22.03.01.46 is vulnerable to command injection. Critical Unreviewed
CVE-2023-49435 was published Dec 7, 2023
Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the ... Critical Unreviewed
CVE-2023-49436 was published Dec 7, 2023
Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the ... Critical Unreviewed
CVE-2023-49437 was published Dec 7, 2023
Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the ... Critical Unreviewed
CVE-2023-49428 was published Dec 7, 2023
An issue was discovered on Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary... Moderate Unreviewed
CVE-2023-24046 was published Dec 5, 2023
In TOTOLINK X6000R_Firmware V9.4.0cu.852_B20230719, the shttpd file sub_415534 function obtains... Critical Unreviewed
CVE-2023-48801 was published Dec 2, 2023
ProTip! Advisories are also available from the GraphQL API