Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
3,440
Erlang
29
GitHub Actions
16
Go
1,667
Maven
4,927
npm
3,454
NuGet
595
pip
2,871
Pub
10
RubyGems
823
Rust
766
Swift
34
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

18,557 advisories

The Social Connect plugin for WordPress is vulnerable to authentication bypass in versions up to,... Critical Unreviewed
CVE-2024-4393 was published May 8, 2024
The Startklar Elementor Addons plugin for WordPress is vulnerable to arbitrary file deletion in... Critical Unreviewed
CVE-2024-4346 was published May 7, 2024
The Startklar Elementor Addons plugin for WordPress is vulnerable to arbitrary file uploads due... Critical Unreviewed
CVE-2024-4345 was published May 7, 2024
The Build App Online plugin for WordPress is vulnerable to authentication bypass in versions up... Critical Unreviewed
CVE-2024-4186 was published May 7, 2024
A SQLi vulnerability exists in Delta Electronics DIAEnergie v1.10.1.8610 and prior when CEBC.exe... Critical Unreviewed
CVE-2024-4547 was published May 6, 2024
An SQLi vulnerability exists in Delta Electronics DIAEnergie v1.10.1.8610 and prior when CEBC.exe... Critical Unreviewed
CVE-2024-4548 was published May 6, 2024
A denial of service vulnerability exists in Delta Electronics DIAEnergie v1.10.1.8610 and prior.... Critical Unreviewed
CVE-2024-4549 was published May 6, 2024
SQL injection vulnerability in Gescen on the centrosdigitales.net platform. This vulnerability... Critical Unreviewed
CVE-2024-4466 was published May 3, 2024
Voltronic Power ViewPower Pro Expression Language Injection Remote Code Execution Vulnerability.... Critical Unreviewed
CVE-2023-51593 was published May 3, 2024
Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution... Critical Unreviewed
CVE-2023-51595 was published May 3, 2024
Voltronic Power ViewPower LinuxMonitorConsole Exposed Dangerous Method Remote Code Execution... Critical Unreviewed
CVE-2023-51582 was published May 3, 2024
Voltronic Power ViewPower updateManagerPassword Exposed Dangerous Method Authentication Bypass... Critical Unreviewed
CVE-2023-51574 was published May 3, 2024
Voltronic Power ViewPower UpsScheduler Exposed Dangerous Method Remote Code Execution... Critical Unreviewed
CVE-2023-51583 was published May 3, 2024
Voltronic Power ViewPower MacMonitorConsole Exposed Dangerous Method Remote Code Execution... Critical Unreviewed
CVE-2023-51581 was published May 3, 2024
Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Remote Code Execution... Critical Unreviewed
CVE-2023-51575 was published May 3, 2024
Voltronic Power ViewPower Pro selectEventConfig SQL Injection Remote Code Execution Vulnerability... Critical Unreviewed
CVE-2023-51586 was published May 3, 2024
Voltronic Power ViewPower Pro UpLoadAction Unrestricted File Upload Remote Code Execution... Critical Unreviewed
CVE-2023-51590 was published May 3, 2024
Voltronic Power ViewPower Deserialization of Untrusted Data Remote Code Execution Vulnerability.... Critical Unreviewed
CVE-2023-51576 was published May 3, 2024
D-Link D-View InstallApplication Use of Hard-coded Credentials Authentication Bypass... Critical Unreviewed
CVE-2023-44411 was published May 3, 2024
Control Web Panel Missing Authentication Remote Code Execution Vulnerability. This vulnerability... Critical Unreviewed
CVE-2023-42121 was published May 3, 2024
D-Link D-View coreservice_action_script Exposed Dangerous Function Remote Code Execution... Critical Unreviewed
CVE-2023-44414 was published May 3, 2024
Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows... Critical Unreviewed
CVE-2023-42115 was published May 3, 2024
LG Simple Editor createThumbnailByMovie Command Injection Remote Code Execution Vulnerability.... Critical Unreviewed
CVE-2023-40505 was published May 3, 2024
LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability. This... Critical Unreviewed
CVE-2023-40504 was published May 3, 2024
LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability. This... Critical Unreviewed
CVE-2023-40501 was published May 3, 2024
ProTip! Advisories are also available from the GraphQL API