GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,344
Erlang
31
GitHub Actions
22
Go
2,112
Maven
5,000+
npm
3,767
NuGet
680
pip
3,453
Pub
12
RubyGems
892
Rust
888
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
846 advisories
Filter by severity
eladmin <=2.7 is vulnerable to CSV Injection in the exception log download module.
Critical
Unreviewed
CVE-2025-22978
was published
Feb 3, 2025
EasyVirt DCScope 8.6.0 and earlier and co2Scope 1.3.0 and earlier are vulnerable to Command...
Critical
Unreviewed
CVE-2024-55062
was published
Feb 1, 2025
The specific component in Celk Saude 3.1.252.1 that processes user input and returns error...
Critical
Unreviewed
CVE-2024-48761
was published
Jan 30, 2025
A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been rated as...
Critical
Unreviewed
CVE-2025-0798
was published
Jan 29, 2025
TRENDnet TEW-632BRP v1.010B31 devices have an OS command injection vulnerability in the CGl...
Critical
Unreviewed
CVE-2024-57590
was published
Jan 27, 2025
The script input feature of SpagoBI 3.5.1 allows arbitrary code execution.
Critical
Unreviewed
CVE-2024-54794
was published
Jan 21, 2025
Tenda AC18 V15.03.05.19 was discovered to contain a command injection vulnerability via the...
Critical
Unreviewed
CVE-2024-57583
was published
Jan 16, 2025
Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of...
Critical
Unreviewed
CVE-2024-39781
was published
Jan 14, 2025
Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of...
Critical
Unreviewed
CVE-2024-39782
was published
Jan 14, 2025
Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing()...
Critical
Unreviewed
CVE-2024-39765
was published
Jan 14, 2025
Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality...
Critical
Unreviewed
CVE-2024-39760
was published
Jan 14, 2025
Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality...
Critical
Unreviewed
CVE-2024-39761
was published
Jan 14, 2025
Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing()...
Critical
Unreviewed
CVE-2024-39762
was published
Jan 14, 2025
Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing()...
Critical
Unreviewed
CVE-2024-39763
was published
Jan 14, 2025
Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing()...
Critical
Unreviewed
CVE-2024-39764
was published
Jan 14, 2025
Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of...
Critical
Unreviewed
CVE-2024-39783
was published
Jan 14, 2025
Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality...
Critical
Unreviewed
CVE-2024-39759
was published
Jan 14, 2025
An os command injection vulnerability exists in the touchlist_sync.cgi touchlistsync()...
Critical
Unreviewed
CVE-2024-34166
was published
Jan 14, 2025
An os command injection vulnerability exists in the adm.cgi set_ledonoff() functionality of...
Critical
Unreviewed
CVE-2024-37186
was published
Jan 14, 2025
An os command injection vulnerability exists in the nas.cgi remove_dir() functionality of Wavlink...
Critical
Unreviewed
CVE-2024-39360
was published
Jan 14, 2025
An os command injection vulnerability exists in the firewall.cgi iptablesWebsFilterRun()...
Critical
Unreviewed
CVE-2024-39367
was published
Jan 14, 2025
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the...
Critical
Unreviewed
CVE-2024-57224
was published
Jan 10, 2025
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the...
Critical
Unreviewed
CVE-2024-57223
was published
Jan 10, 2025
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the...
Critical
Unreviewed
CVE-2024-57225
was published
Jan 10, 2025
Tenda ac9 v1.0 firmware v15.03.05.19 is vulnerable to command injection in /goform/SetSambaCfg,...
Critical
Unreviewed
CVE-2025-22949
was published
Jan 10, 2025
ProTip!
Advisories are also available from the
GraphQL API