Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,237
Erlang
31
GitHub Actions
20
Go
2,000
Maven
5,000+
npm
3,711
NuGet
661
pip
3,383
Pub
11
RubyGems
885
Rust
849
Swift
36
Unreviewed advisories
All unreviewed
5,000+

29,463 advisories

Loading
Given a malicious document provided by an attacker, the ONLYOFFICE Workspace DMS is vulnerable to... Moderate Unreviewed
CVE-2022-47412 was published Feb 7, 2023
A stored cross-site scripting vulnerability exists in the web application functionality of Moxa... Moderate Unreviewed
CVE-2022-41311 was published Feb 7, 2023
A stored cross-site scripting vulnerability exists in the web application functionality of Moxa... Moderate Unreviewed
CVE-2022-41313 was published Feb 7, 2023
A stored cross-site scripting vulnerability exists in the web application functionality of Moxa... Moderate Unreviewed
CVE-2022-41312 was published Feb 7, 2023
A vulnerability was found in OpenSeaMap online_chart 1.2. It has been classified as problematic.... Moderate Unreviewed
CVE-2015-10074 was published Feb 7, 2023
A vulnerability was found in Custom-Content-Width 1.0. It has been declared as problematic.... Moderate Unreviewed
CVE-2015-10075 was published Feb 7, 2023
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2022-21948 was published Feb 7, 2023
A cross-site scripting (XSS) vulnerability in Zyxel NBG-418N v2 firmware versions prior to V1.00... Moderate Unreviewed
CVE-2022-45441 was published Feb 7, 2023
Versions of Coverity Connect prior to 2022.12.0 are vulnerable to an unauthenticated Cross-Site... Moderate Unreviewed
CVE-2023-23849 was published Feb 7, 2023
The Annual Archive WordPress plugin before 1.6.0 does not validate and escape some of its... Moderate Unreviewed
CVE-2023-0178 was published Feb 6, 2023
The Tutor LMS WordPress plugin before 2.0.10 does not sanitise and escape the reset_key and... Moderate Unreviewed
CVE-2023-0236 was published Feb 6, 2023
The Giveaways and Contests by RafflePress WordPress plugin before 1.11.3 does not validate and... Moderate Unreviewed
CVE-2023-0176 was published Feb 6, 2023
The Contextual Related Posts WordPress plugin before 3.3.1 does not validate and escape some of... Moderate Unreviewed
CVE-2023-0252 was published Feb 6, 2023
The YourChannel WordPress plugin before 1.2.2 does not sanitize and escape some parameters, which... Moderate Unreviewed
CVE-2023-0282 was published Feb 6, 2023
The WP VR WordPress plugin before 8.2.7 does not validate and escape some of its shortcode... Moderate Unreviewed
CVE-2023-0174 was published Feb 6, 2023
A vulnerability classified as problematic has been found in eXo Chat Application. Affected is an... Moderate Unreviewed
CVE-2022-4902 was published Feb 6, 2023
The WordPrezi WordPress plugin through 0.8.2 does not validate and escape some of its shortcode... Moderate Unreviewed
CVE-2023-0149 was published Feb 6, 2023
The WP Blog and Widgets WordPress plugin before 2.3.1 does not validate and escape some of its... Moderate Unreviewed
CVE-2022-4824 was published Feb 6, 2023
The Page View Count WordPress plugin before 2.6.1 does not validate and escape some of its block... Moderate Unreviewed
CVE-2023-0095 was published Feb 6, 2023
The Breadcrumb WordPress plugin before 1.5.33 does not validate and escape some of its shortcode... Moderate Unreviewed
CVE-2022-4836 was published Feb 6, 2023
The MonsterInsights WordPress plugin before 8.12.1 does not validate and escape some of its block... Moderate Unreviewed
CVE-2023-0081 was published Feb 6, 2023
The WC Vendors Marketplace WordPress plugin before 2.4.5 does not validate and escape some of its... Moderate Unreviewed
CVE-2023-0072 was published Feb 6, 2023
The Happyforms WordPress plugin before 1.22.0 does not validate and escape some of its block... Moderate Unreviewed
CVE-2023-0096 was published Feb 6, 2023
The Simple Tooltips WordPress plugin before 2.1.4 does not validate and escape some of its... Moderate Unreviewed
CVE-2022-4826 was published Feb 6, 2023
The ExactMetrics WordPress plugin before 7.12.1 does not validate and escape some of its block... Moderate Unreviewed
CVE-2023-0082 was published Feb 6, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database