Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,262
Erlang
31
GitHub Actions
21
Go
2,030
Maven
5,000+
npm
3,732
NuGet
662
pip
3,409
Pub
12
RubyGems
891
Rust
865
Swift
36
Unreviewed advisories
All unreviewed
5,000+

745 advisories

Loading
Apache IoTDB grafana-connector contains an interface without authorization High
CVE-2022-38370 was published for org.apache.iotdb:iotdb-grafana-connector (Maven) Sep 6, 2022
TOTOLINK EX200 V4.0.3c.7646_B20201211 does not contain an authentication mechanism by default. High Unreviewed
CVE-2024-31813 was published Apr 8, 2024
The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is... High Unreviewed
CVE-2024-11194 was published Nov 19, 2024
Tryton Improper Access Control High
CVE-2019-10868 was published for trytond (pip) Apr 10, 2019
Apache Airflow: Bypass permission verification to read code of other dags High
CVE-2023-50944 was published for apache-airflow (pip) Jan 24, 2024
The Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX plugin for WordPress is... High Unreviewed
CVE-2024-10728 was published Nov 16, 2024
In multiple functions in AppInfoBase.java, there is a possible way to manipulate app permission... High Unreviewed
CVE-2024-43088 was published Nov 13, 2024
Vulnerability of improper permission control in the window management module. Impact: Successful... High Unreviewed
CVE-2023-52713 was published Apr 7, 2024
In getInstalledAccessibilityPreferences of AccessibilitySettings.java, there is a possible way to... High Unreviewed
CVE-2024-43087 was published Nov 13, 2024
In multiple locations, there is a possible permissions bypass due to a missing null check. This... High Unreviewed
CVE-2024-34719 was published Nov 13, 2024
Missing Authorization vulnerability in KCT Ai Auto Tool Content Writing Assistant (Gemini Writer,... High Unreviewed
CVE-2024-52383 was published Nov 14, 2024
Script security bypass vulnerability in Jenkins Shared Library Version Override Plugin High
CVE-2024-52554 was published for io.jenkins.plugins:shared-library-version-override (Maven) Nov 13, 2024
The WordPress User Extra Fields plugin for WordPress is vulnerable to privilege escalation due to... High Unreviewed
CVE-2024-10800 was published Nov 13, 2024
The GPX Viewer plugin for WordPress is vulnerable to arbitrary file creation due to a missing... High Unreviewed
CVE-2024-10629 was published Nov 13, 2024
Erroneous authentication pass in Spring Security High
CVE-2024-22257 was published for org.springframework.security:spring-security-core (Maven) Mar 18, 2024
The web administration server in Solar-Log 500 before 2.8.2 Build 52 does not require... High Unreviewed
CVE-2021-34543 was published Dec 8, 2021
The Top Store theme for WordPress is vulnerable to unauthorized arbitrary plugin installation due... High Unreviewed
CVE-2024-10673 was published Nov 9, 2024
The Th Shop Mania theme for WordPress is vulnerable to unauthorized arbitrary plugin installation... High Unreviewed
CVE-2024-10674 was published Nov 9, 2024
Arbitrary file deletion in litellm High
CVE-2024-4888 was published for litellm (pip) Jun 6, 2024
Missing Authorization vulnerability in Geek Code Lab Login As Users allows Exploiting Incorrectly... High Unreviewed
CVE-2024-43982 was published Nov 1, 2024
Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart allows Exploiting... High Unreviewed
CVE-2024-47314 was published Nov 1, 2024
Missing Authorization vulnerability in MetaBox.Io Meta Box – WordPress Custom Fields Framework... High Unreviewed
CVE-2024-43235 was published Nov 1, 2024
Missing Authorization vulnerability in Masteriyo Masteriyo - LMS allows Accessing Functionality... High Unreviewed
CVE-2024-43158 was published Nov 1, 2024
Missing Authorization vulnerability in MagePeople Team WpTravelly allows Accessing Functionality... High Unreviewed
CVE-2024-43212 was published Nov 1, 2024
Missing Authorization vulnerability in WofficeIO Woffice Core allows Accessing Functionality Not... High Unreviewed
CVE-2024-37470 was published Nov 1, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database