GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,238
Erlang
31
GitHub Actions
21
Go
2,005
Maven
5,000+
npm
3,716
NuGet
661
pip
3,388
Pub
11
RubyGems
885
Rust
851
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
109,125 advisories
Filter by severity
The Pricing Tables For WPBakery Page Builder (formerly Visual Composer) plugin for WordPress is...
Moderate
Unreviewed
CVE-2024-10175
was published
Nov 27, 2024
The Counter Up – Animated Number Counter & Milestone Showcase plugin for WordPress is vulnerable...
Moderate
Unreviewed
CVE-2024-10895
was published
Nov 27, 2024
The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable...
Moderate
Unreviewed
CVE-2024-10580
was published
Nov 27, 2024
The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress...
Moderate
Unreviewed
CVE-2024-11219
was published
Nov 27, 2024
The ProfilePress plugin for WordPress is vulnerable to Sensitive Information Exposure in all...
Moderate
Unreviewed
CVE-2024-11083
was published
Nov 27, 2024
A vulnerability, which was classified as problematic, has been found in code-projects Crud...
Moderate
Unreviewed
CVE-2024-11820
was published
Nov 27, 2024
A vulnerability was found in PHPGurukul User Registration & Login and User Management System 1.0....
Moderate
Unreviewed
CVE-2024-11817
was published
Nov 27, 2024
A vulnerability classified as critical has been found in PHPGurukul User Registration & Login and...
Moderate
Unreviewed
CVE-2024-11818
was published
Nov 27, 2024
A vulnerability classified as critical was found in 1000 Projects Portfolio Management System MCA...
Moderate
Unreviewed
CVE-2024-11819
was published
Nov 27, 2024
A vulnerability has been found in 1000 Projects Portfolio Management System MCA 1.0 and...
Moderate
Unreviewed
CVE-2024-11744
was published
Nov 26, 2024
A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all versions prior...
Moderate
Unreviewed
CVE-2024-8237
was published
Nov 26, 2024
A vulnerability, which was classified as problematic, has been found in SourceCodester Best House...
Moderate
Unreviewed
CVE-2024-11742
was published
Nov 26, 2024
A denial of service (DoS) condition was discovered in GitLab CE/EE affecting all versions from 13...
Moderate
Unreviewed
CVE-2024-11828
was published
Nov 26, 2024
A cross-site scripting (XSS) vulnerability in the Article module of SPIP v4.3.3 allows...
Moderate
Unreviewed
CVE-2024-53620
was published
Nov 26, 2024
An issue has been discovered in GitLab CE/EE affecting all versions from 16.11 before 17.4.5, 17...
Moderate
Unreviewed
CVE-2024-11668
was published
Nov 26, 2024
An issue was discovered in GitLab CE/EE affecting all versions starting from 15.6 prior to 17.4.5...
Moderate
Unreviewed
CVE-2024-8177
was published
Nov 26, 2024
An issue has been discovered in GitLab EE affecting all versions starting from 17.3 before 17.3.7...
Moderate
Unreviewed
CVE-2024-10240
was published
Nov 26, 2024
An issue was discovered in GitLab CE/EE affecting all versions from 16.9.8 before 17.4.5, 17.5...
Moderate
Unreviewed
CVE-2024-11669
was published
Nov 26, 2024
An authenticated arbitrary file upload vulnerability in the Documents module of SPIP v4.3.3...
Moderate
Unreviewed
CVE-2024-53619
was published
Nov 26, 2024
A vulnerability, which was classified as problematic, was found in SourceCodester Best House...
Moderate
Unreviewed
CVE-2024-11743
was published
Nov 26, 2024
An issue in alist-tvbox v1.7.1 allows a remote attacker to execute arbitrary code via the /atv...
Moderate
Unreviewed
CVE-2024-48747
was published
Nov 26, 2024
A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in...
Moderate
Unreviewed
CVE-2024-53425
was published
Nov 26, 2024
There exists a denial of service through Data corruption in gRPC-C++ - gRPC-C++ servers with...
Moderate
Unreviewed
CVE-2024-11407
was published
Nov 26, 2024
WikiDocs before 1.0.65 allows stored XSS by authenticated users via data that comes after $$\\,...
Moderate
Unreviewed
CVE-2024-53930
was published
Nov 26, 2024
The Sugar Calendar – Simple Event Management plugin for WordPress is vulnerable to Reflected...
Moderate
Unreviewed
CVE-2024-10878
was published
Nov 26, 2024
ProTip!
Advisories are also available from the
GraphQL API