Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,077
Erlang
29
GitHub Actions
19
Go
1,900
Maven
5,000+
npm
3,630
NuGet
638
pip
3,244
Pub
10
RubyGems
863
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+

1,682 advisories

Loading
The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is... Moderate Unreviewed
CVE-2024-7888 was published Sep 13, 2024
An issue has been discovered in GitLab EE affecting all versions starting from 11.2 before 17.1.7... Moderate Unreviewed
CVE-2024-4660 was published Sep 12, 2024
The HTML5 Video Player – mp4 Video Player Plugin and Block plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2024-7721 was published Sep 11, 2024
The HTML5 Video Player – mp4 Video Player Plugin and Block plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2024-7727 was published Sep 11, 2024
XWiki Platform document history including authors of any page exposed to unauthorized actors Moderate
CVE-2024-45591 was published for org.xwiki.platform:xwiki-platform-rest-server (Maven) Sep 10, 2024
Xiqinger
The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2024-8369 was published Sep 10, 2024
Due to missing authorization check in SAP for Oil & Gas (Transportation and Distribution), an... Moderate Unreviewed
CVE-2024-44112 was published Sep 10, 2024
Due to lack of proper authorization checks when calling user, a function module in obsolete Tobin... Moderate Unreviewed
CVE-2024-45286 was published Sep 10, 2024
The RFC enabled function module allows a low privileged user to perform various actions, such as... Moderate Unreviewed
CVE-2024-44117 was published Sep 10, 2024
The RFC enabled function module allows a low privileged user to perform denial of service on any... Moderate Unreviewed
CVE-2024-45285 was published Sep 10, 2024
The RFC enabled function module allows a low privileged user to add URLs to any user's workplace... Moderate Unreviewed
CVE-2024-44115 was published Sep 10, 2024
The RFC enabled function module allows a low privileged user to add any workbook to any user's... Moderate Unreviewed
CVE-2024-44116 was published Sep 10, 2024
The RFC enabled function module allows a low privileged user to read any user's workplace... Moderate Unreviewed
CVE-2024-42380 was published Sep 10, 2024
The RFC enabled function module allows a low privileged user to delete the workplace favourites... Moderate Unreviewed
CVE-2024-42371 was published Sep 10, 2024
The Revision Manager TMC plugin for WordPress is vulnerable to unauthorized arbitrary email... Moderate Unreviewed
CVE-2024-7622 was published Sep 6, 2024
The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for... Moderate Unreviewed
CVE-2024-8427 was published Sep 6, 2024
The HelloAsso plugin for WordPress is vulnerable to unauthorized modification of data due to a... Moderate Unreviewed
CVE-2024-7605 was published Sep 5, 2024
The Geo Controller plugin for WordPress is vulnerable to unauthorized menu creation/deletion due... Moderate Unreviewed
CVE-2024-7380 was published Sep 5, 2024
The Geo Controller plugin for WordPress is vulnerable to unauthorized shortcode execution due to... Moderate Unreviewed
CVE-2024-7381 was published Sep 5, 2024
The Booking for Appointments and Events Calendar – Amelia Premium and Lite plugins for WordPress... Moderate Unreviewed
CVE-2024-6332 was published Sep 5, 2024
The Form Vibes – Database Manager for Forms plugin for WordPress is vulnerable to unauthorized... Moderate Unreviewed
CVE-2024-5309 was published Sep 5, 2024
The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2024-8121 was published Sep 4, 2024
The Media Library Folders plugin for WordPress is vulnerable to unauthorized access due to... Moderate Unreviewed
CVE-2024-7858 was published Aug 30, 2024
Missing Authorization vulnerability in VIICTORY MEDIA LLC Z Y N I T H allows Accessing... Moderate Unreviewed
CVE-2024-43940 was published Aug 29, 2024
Missing Authorization vulnerability in VIICTORY MEDIA LLC Z Y N I T H allows Accessing... Moderate Unreviewed
CVE-2024-43939 was published Aug 29, 2024
ProTip! Advisories are also available from the GraphQL API