GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,067
Erlang
29
GitHub Actions
19
Go
1,891
Maven
5,000+
npm
3,624
NuGet
638
pip
3,235
Pub
10
RubyGems
857
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
387 advisories
Filter by severity
Microsoft SharePoint Server Remote Code Execution Vulnerability
High
Unreviewed
CVE-2024-30044
was published
May 14, 2024
In Progress® Telerik® Reporting versions prior to 2024 Q2 (18.1.24.2.514), a code execution...
High
Unreviewed
CVE-2024-4200
was published
May 15, 2024
Remote Code
Execution has been discovered in
OpenText™ iManager 3.2.6.0200. The vulnerability can...
High
Unreviewed
CVE-2024-3967
was published
May 15, 2024
IBM i 7.2, 7.3, and 7.4 could allow a remote attacker to execute arbitrary code leading to a...
High
Unreviewed
CVE-2024-31879
was published
May 18, 2024
Justice AV Solutions Viewer Setup 8.3.7.250-1 contains a malicious binary when executed and is...
High
Unreviewed
CVE-2024-4978
was published
May 23, 2024
Deserialization of untrusted data can occur in the R statistical programming language, on any...
High
Unreviewed
CVE-2024-27322
was published
Apr 29, 2024
Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability
High
Unreviewed
CVE-2024-35249
was published
Jun 11, 2024
Dell Common Event Enabler, version 8.9.10.0 and prior, contain an insecure deserialization...
High
Unreviewed
CVE-2024-28964
was published
Jun 12, 2024
Deserialization of Untrusted Data vulnerability in Live Composer Team Page Builder: Live Composer...
High
Unreviewed
CVE-2024-35780
was published
Jun 19, 2024
In WhatsUp Gold versions released before 2023.1.3, Distributed Edition installations can be...
High
Unreviewed
CVE-2024-5016
was published
Jun 25, 2024
Microsoft Exchange Server Remote Code Execution Vulnerability
High
Unreviewed
CVE-2021-26857
was published
May 24, 2022
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 on Windows, an authenticated user...
High
Unreviewed
CVE-2024-36984
was published
Jul 1, 2024
Microsoft SharePoint Server Remote Code Execution Vulnerability
High
Unreviewed
CVE-2024-38023
was published
Jul 9, 2024
Microsoft SharePoint Server Remote Code Execution Vulnerability
High
Unreviewed
CVE-2024-38024
was published
Jul 9, 2024
Microsoft SharePoint Remote Code Execution Vulnerability
High
Unreviewed
CVE-2024-38094
was published
Jul 9, 2024
A deserialization of untrusted data vulnerability exists in NI VeriStand that may result in...
High
Unreviewed
CVE-2024-6675
was published
Jul 22, 2024
Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization...
High
Unreviewed
CVE-2019-18935
was published
May 24, 2022
The Flipbox Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up...
High
Unreviewed
CVE-2024-6152
was published
Jul 27, 2024
Deserialization of Untrusted Data vulnerability in CodeSolz Better Find and Replace.This issue...
High
Unreviewed
CVE-2024-39636
was published
Aug 2, 2024
A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to...
High
Unreviewed
CVE-2018-0824
was published
May 14, 2022
The MultiPurpose theme for WordPress is vulnerable to PHP Object Injection in all versions up to,...
High
Unreviewed
CVE-2024-7486
was published
Aug 8, 2024
The The Next theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and...
High
Unreviewed
CVE-2024-7561
was published
Aug 8, 2024
The News Flash theme for WordPress is vulnerable to PHP Object Injection in all versions up to,...
High
Unreviewed
CVE-2024-7560
was published
Aug 8, 2024
A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC STEP 7 V16 ...
High
Unreviewed
CVE-2022-45147
was published
Jul 9, 2024
A vulnerability has been identified in SIMATIC STEP 7 Safety V18 (All versions < V18 Update 2)....
High
Unreviewed
CVE-2023-32737
was published
Jul 9, 2024
ProTip!
Advisories are also available from the
GraphQL API