Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,056
Erlang
29
GitHub Actions
19
Go
1,889
Maven
5,000+
npm
3,613
NuGet
638
pip
3,210
Pub
10
RubyGems
854
Rust
817
Swift
35
Unreviewed advisories
All unreviewed
5,000+

534 advisories

Loading
A vulnerability, which was classified as critical, was found in SimpleMachines SMF 2.1.4.... Moderate Unreviewed
CVE-2024-7437 was published Aug 3, 2024
A vulnerability has been found in SimpleMachines SMF 2.1.4 and classified as problematic.... Moderate Unreviewed
CVE-2024-7438 was published Aug 3, 2024
On versions before 2.1.4, after a regular user successfully logs in, they can manually make a... Moderate Unreviewed
CVE-2024-34457 was published Jul 22, 2024
This vulnerability exists in Reedos aiM-Star version 2.0.1 due to improper access controls on its... High Unreviewed
CVE-2024-45786 was published Sep 11, 2024
An authorization bypass through user-controlled key [CWE-639] vulnerability in FortiAnalyzer... Moderate Unreviewed
CVE-2023-44254 was published Sep 10, 2024
A vulnerability has been identified in Industrial Edge Management Pro (All versions < V1.9.5),... Critical Unreviewed
CVE-2024-45032 was published Sep 10, 2024
This vulnerability exists in TechExcel Back Office Software versions prior to 1.0.0 due to... High Unreviewed
CVE-2024-8601 was published Sep 9, 2024
The ForumWP – Forum & Discussion Board Plugin plugin for WordPress is vulnerable to Privilege... High Unreviewed
CVE-2024-8428 was published Sep 6, 2024
The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to... Critical Unreviewed
CVE-2024-8292 was published Sep 6, 2024
Bonitasoft Runtime Community edition's contains an insecure direct object references vulnerability Moderate
CVE-2024-28087 was published for org.bonitasoft.engine:bonita-server (Maven) May 15, 2024
The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Insecure... Moderate Unreviewed
CVE-2024-8123 was published Sep 4, 2024
An Insecure Direct Object Reference (IDOR) in PTC ThingWorx v9.5.0 allows attackers to view... Moderate Unreviewed
CVE-2024-40395 was published Aug 27, 2024
"powermail" (powermail) Insecure Direct Object Reference (IDOR) Moderate
CVE-2024-45232 was published for in2code/powermail (Composer) Aug 29, 2024
Globitel KSA SpeechLog v8.1 was discovered to contain an Insecure Direct Object Reference (IDOR)... Unknown Unreviewed
CVE-2024-33818 was published May 14, 2024
Authorization Bypass Through User-Controlled Key vulnerability in upKeeper Solutions product... High Unreviewed
CVE-2024-42463 was published Aug 16, 2024
Authorization Bypass Through User-Controlled Key vulnerability in upKeeper Solutions product... High Unreviewed
CVE-2024-42464 was published Aug 16, 2024
Directus has an insecure object reference via PATH presets Moderate
GHSA-3fff-gqw3-vj86 was published for directus (npm) Aug 27, 2024
Authorization Bypass Through User-Controlled Key vulnerability in Dylan James Zephyr Project... Moderate Unreviewed
CVE-2024-43916 was published Aug 26, 2024
A bug in the 9p authentication implementation within lib9p allows an attacker with an existing... High Unreviewed
CVE-2024-8158 was published Aug 26, 2024
The User Private Files – WordPress File Sharing Plugin plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2024-7848 was published Aug 22, 2024
Improper access control in Directus Moderate
CVE-2024-6534 was published for directus (npm) Aug 15, 2024
Authorization Bypass Through User-Controlled Key vulnerability in Propovoice Propovoice CRM.This... Moderate Unreviewed
CVE-2024-43350 was published Aug 19, 2024
Authorization Bypass Through User-Controlled Key vulnerability in gVectors Team wpForo Forum.This... Moderate Unreviewed
CVE-2024-43288 was published Aug 19, 2024
Authorization Bypass Through User-Controlled Key vulnerability in WP Job Portal.This issue... Moderate Unreviewed
CVE-2024-43266 was published Aug 19, 2024
Authorization Bypass Through User-Controlled Key vulnerability in Dylan James Zephyr Project... Moderate Unreviewed
CVE-2024-43322 was published Aug 19, 2024
ProTip! Advisories are also available from the GraphQL API