GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
3,972
Erlang
29
GitHub Actions
16
Go
1,762
Maven
4,983
npm
3,518
NuGet
609
pip
3,094
Pub
10
RubyGems
833
Rust
782
Swift
34
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
100,763 advisories
Filter by severity
A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects...
Moderate
Unreviewed
CVE-2024-0986
was published
Jan 29, 2024
The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site...
Moderate
Unreviewed
CVE-2024-3638
was published
Jul 4, 2024
The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site...
Moderate
Unreviewed
CVE-2024-3639
was published
Jul 4, 2024
The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site...
Moderate
Unreviewed
CVE-2024-2926
was published
Jul 4, 2024
Improper verification of signature in FilterProvider prior to SMR Jul-2024 Release 1 allows local...
Moderate
Unreviewed
CVE-2024-20892
was published
Jul 2, 2024
Improper authentication in MTP application prior to SMR Jul-2024 Release 1 allows local attackers...
Moderate
Unreviewed
CVE-2024-20900
was published
Jul 2, 2024
Improper input validation in copying data to buffer cache in libsaped prior to SMR Jul-2024...
Moderate
Unreviewed
CVE-2024-20901
was published
Jul 2, 2024
Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.1.0 allows local attackers to...
Moderate
Unreviewed
CVE-2023-51778
was published
Jul 2, 2024
Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.1.0 allows local attackers to...
Moderate
Unreviewed
CVE-2023-51777
was published
Jul 2, 2024
Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to...
Moderate
Unreviewed
CVE-2024-22104
was published
Jul 2, 2024
The One Click Order Re-Order plugin for WordPress is vulnerable to unauthorized modification of...
Moderate
Unreviewed
CVE-2024-5641
was published
Jul 4, 2024
Improper input validation in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to...
Moderate
Unreviewed
CVE-2024-20890
was published
Jul 2, 2024
Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.6.0 allows local attackers to...
Moderate
Unreviewed
CVE-2024-22102
was published
Jul 2, 2024
Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.7.0 allows local attackers to...
Moderate
Unreviewed
CVE-2024-25087
was published
Jul 2, 2024
Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to...
Moderate
Unreviewed
CVE-2024-22105
was published
Jul 2, 2024
Improper authentication in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to pair...
Moderate
Unreviewed
CVE-2024-20889
was published
Jul 2, 2024
Improper input validation in libmediaextractorservice.so prior to SMR Jul-2024 Release 1 allows...
Moderate
Unreviewed
CVE-2024-20893
was published
Jul 2, 2024
Improper handling of exceptional conditions in Secure Folder prior to SMR Jul-2024 Release 1...
Moderate
Unreviewed
CVE-2024-20894
was published
Jul 2, 2024
The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross...
Moderate
Unreviewed
CVE-2024-4375
was published
Jun 18, 2024
Information exposure vulnerability in OpenGnsys affecting version 1.1.1d (Espeto). This...
Moderate
Unreviewed
CVE-2024-3707
was published
Apr 12, 2024
The Lightbox & Modal Popup WordPress Plugin WordPress plugin before 2.7.28, foobox-image...
Moderate
Unreviewed
CVE-2024-3276
was published
Jun 18, 2024
The Rife Elementor Extensions & Templates plugin for WordPress is vulnerable to Stored Cross-Site...
Moderate
Unreviewed
CVE-2024-5504
was published
Jul 2, 2024
The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross...
Moderate
Unreviewed
CVE-2024-3513
was published
Jul 2, 2024
The PDF Viewer for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting...
Moderate
Unreviewed
CVE-2024-0845
was published
Jun 18, 2024
Information exposure vulnerability in OpenGnsys affecting version 1.1.1d (Espeto). This...
Moderate
Unreviewed
CVE-2024-3706
was published
Apr 12, 2024
ProTip!
Advisories are also available from the
GraphQL API