GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,274
Erlang
31
GitHub Actions
21
Go
2,056
Maven
5,000+
npm
3,740
NuGet
668
pip
3,419
Pub
12
RubyGems
891
Rust
872
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
950 advisories
Filter by severity
A command injection is possible through the user interface, allowing arbitrary command execution...
High
Unreviewed
CVE-2020-13712
was published
Dec 21, 2024
In a specific scenario a LDAP user can abuse the authentication process in OpenText Privileged...
High
Unreviewed
CVE-2024-12111
was published
Dec 19, 2024
In ThreatQuotient ThreatQ before 5.29.3, authenticated users are able to execute arbitrary...
High
Unreviewed
CVE-2024-39703
was published
Dec 18, 2024
An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads in...
High
Unreviewed
CVE-2024-56086
was published
Dec 16, 2024
An issue was discovered in Logpoint UniversalNormalizer before 5.7.0. Authenticated users can...
High
Unreviewed
CVE-2024-56084
was published
Dec 16, 2024
An issue in Razer Synapse 3 v.3.9.131.20813 and Synapse 3 App v.20240213 allows a local attacker...
High
Unreviewed
CVE-2024-29404
was published
Dec 3, 2024
Dell ThinOS version 2408 contains an Improper Neutralization of Special Elements used in a...
High
Unreviewed
CVE-2024-53290
was published
Dec 11, 2024
Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting ...
High
Unreviewed
CVE-2024-55544
was published
Dec 10, 2024
An injection vulnerability in Barco ClickShare CX-30/20, C-5/10, and ClickShare Bar Pro and Core...
High
Unreviewed
CVE-2024-53919
was published
Dec 10, 2024
An issue in Beijing Digital China Yunke Information Technology Co.Ltd v.7.2.6.120 allows a remote...
High
Unreviewed
CVE-2024-51114
was published
Dec 3, 2024
A vulnerability in the HPE Aruba Networking ClearPass Policy Manager web-based management...
High
Unreviewed
CVE-2024-51771
was published
Dec 3, 2024
Command Injection vulnerability in NEC Corporation UNIVERGE IX from Ver9.2 to Ver10.10.21, for...
High
Unreviewed
CVE-2024-11013
was published
Nov 29, 2024
com.perimeter81.osx.HelperTool in Perimeter81 10.0.0.19 on macOS allows Local Privilege...
High
Unreviewed
CVE-2023-33298
was published
Jul 1, 2023
virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual...
High
Unreviewed
CVE-2024-53899
was published
Nov 24, 2024
VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor...
High
Unreviewed
CVE-2024-38831
was published
Nov 26, 2024
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability...
High
Unreviewed
CVE-2024-11665
was published
Nov 25, 2024
An OS command injection vulnerability has been reported to affect Notes Station 3. If exploited,...
High
Unreviewed
CVE-2024-38644
was published
Nov 22, 2024
An OS command injection vulnerability has been reported to affect several product versions. If...
High
Unreviewed
CVE-2024-48861
was published
Nov 22, 2024
Possible Command Injection
in iManager GET parameter has been discovered in
OpenText™ iManager...
High
Unreviewed
CVE-2023-24467
was published
Nov 22, 2024
Possible Elevation of Privilege Vulnerability
in iManager has been discovered in
OpenText™...
High
Unreviewed
CVE-2021-38116
was published
Nov 22, 2024
Linksys E3000 1.0.06.002_US is vulnerable to command injection via the diag_ping_start function.
High
Unreviewed
CVE-2024-48286
was published
Nov 21, 2024
D-LINK DI-8400 v16.07.26A1 was discovered to contain multiple remote command execution (RCE)...
High
Unreviewed
CVE-2024-52739
was published
Nov 20, 2024
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability...
High
Unreviewed
CVE-2024-45505
was published
Nov 18, 2024
Sercomm Router Etisalat Model S3- AC2100 is affected by Incorrect Access Control via the...
High
Unreviewed
CVE-2021-27702
was published
Nov 13, 2024
Tenda G3 v3.0 v15.11.0.20 was discovered to contain a command injection vulnerability via the...
High
Unreviewed
CVE-2024-50852
was published
Nov 13, 2024
ProTip!
Advisories are also available from the
GraphQL API