GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,324
Erlang
31
GitHub Actions
21
Go
2,087
Maven
5,000+
npm
3,751
NuGet
674
pip
3,437
Pub
12
RubyGems
892
Rust
881
Swift
37
Unreviewed advisories
All unreviewed
5,000+
75 advisories
Filter by severity
D-Link D-View coreservice_action_script Exposed Dangerous Function Remote Code Execution...
Critical
Unreviewed
CVE-2023-44414
was published
May 3, 2024
Visualware MyConnection Server doRTAAccessUPass Exposed Dangerous Method Information Disclosure...
High
Unreviewed
CVE-2023-42032
was published
May 3, 2024
PDF-XChange Editor Net.HTTP.requests Exposed Dangerous Function Information Disclosure...
Moderate
Unreviewed
CVE-2023-39505
was published
May 3, 2024
LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability. This...
Critical
Unreviewed
CVE-2023-40501
was published
May 3, 2024
LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability. This...
Critical
Unreviewed
CVE-2023-40500
was published
May 3, 2024
PDF-XChange Editor exportAsText Exposed Dangerous Method Remote Code Execution Vulnerability....
High
Unreviewed
CVE-2023-39493
was published
May 3, 2024
PDF-XChange Editor readFileIntoStream Exposed Dangerous Function Information Disclosure...
Moderate
Unreviewed
CVE-2023-39495
was published
May 3, 2024
Triangle MicroWorks SCADA Data Gateway DbasSectorFileToExecuteOnReset Exposed Dangerous Function...
High
Unreviewed
CVE-2023-39468
was published
May 3, 2024
NETGEAR ProSAFE Network Management System BkreProcessThread Exposed Dangerous Function Remote...
High
Unreviewed
CVE-2023-38097
was published
May 3, 2024
Inductive Automation Ignition OPC UA Quick Client Task Scheduling Exposed Dangerous Function...
High
Unreviewed
CVE-2023-38124
was published
May 3, 2024
NETGEAR ProSAFE Network Management System SettingConfigController Exposed Dangerous Function...
High
Unreviewed
CVE-2023-38101
was published
May 3, 2024
Kofax Power PDF exportAsText Exposed Dangerous Method Remote Code Execution Vulnerability. This...
High
Unreviewed
CVE-2023-37330
was published
May 3, 2024
Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution Vulnerability. This...
High
Unreviewed
CVE-2023-27363
was published
May 3, 2024
Foxit PDF Editor XLS File Parsing Exposed Dangerous Method Remote Code Execution Vulnerability....
High
Unreviewed
CVE-2023-27364
was published
May 3, 2024
Foxit PDF Editor DOC File Parsing Exposed Dangerous Method Remote Code Execution Vulnerability....
High
Unreviewed
CVE-2023-27365
was published
May 3, 2024
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.2 could allow a privileged user to...
Moderate
Unreviewed
CVE-2024-27261
was published
Apr 12, 2024
A denial of service vulnerability exists in the TDDP functionality of Tp-Link AC1350 Wireless MU...
High
Unreviewed
CVE-2023-49074
was published
Apr 9, 2024
Voltronic Power ViewPower Pro updateManagerPassword Exposed Dangerous Function Authentication...
Critical
Unreviewed
CVE-2023-51573
was published
Apr 2, 2024
In JetBrains TeamCity before 2023.11 users with access to the agent machine might obtain...
Moderate
Unreviewed
CVE-2024-29880
was published
Mar 21, 2024
LangChain Experimental vulnerable to arbitrary code execution
Critical
CVE-2024-27444
was published
for
langchain-experimental
(pip)
Feb 26, 2024
An attacker could potentially exploit this vulnerability, leading to the ability to modify files...
Critical
Unreviewed
CVE-2023-5389
was published
Jan 30, 2024
Duplicate Advisory: Privilege escalation in sap/cloud-security-client-go
Critical
GHSA-92cg-ghq6-9587
was published
for
github.com/sap/cloud-security-client-go
(Go)
Dec 12, 2023
•
withdrawn
Duplicate Advisory: Improper JWT Signature Validation in SAP Security Services Library
Critical
GHSA-gcgw-q47m-prvj
was published
for
com.sap.cloud.security.xsuaa:spring-xsuaa
(Maven)
Dec 12, 2023
•
withdrawn
Duplicate Advisory: Privilege escalation in sap-xssec
Critical
GHSA-p99h-pfg6-qrfg
was published
for
sap-xssec
(pip)
Dec 12, 2023
•
withdrawn
Escalation of privileges in @sap/xssec
Critical
CVE-2023-49583
was published
for
@sap/xssec
(npm)
Dec 12, 2023
ProTip!
Advisories are also available from the
GraphQL API