Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,343
Erlang
31
GitHub Actions
22
Go
2,107
Maven
5,000+
npm
3,764
NuGet
679
pip
3,452
Pub
12
RubyGems
892
Rust
886
Swift
37
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

113,585 advisories

Loading
In parisneo/lollms-webui version v9.8, the lollms_binding_infos is missing the client_id... Moderate Unreviewed
CVE-2024-6040 was published Aug 1, 2024
The Identity Server used by 1E Platform could enable URL redirection to untrusted sites. Note:... Moderate Unreviewed
CVE-2024-7211 was published Aug 1, 2024
A vulnerability classified as problematic has been found in SourceCodester Tracking Monitoring... Moderate Unreviewed
CVE-2024-7360 was published Aug 1, 2024
A vulnerability classified as critical was found in SourceCodester Tracking Monitoring Management... Moderate Unreviewed
CVE-2024-7361 was published Aug 1, 2024
A vulnerability was found in SourceCodester Tracking Monitoring Management System 1.0. It has... Moderate Unreviewed
CVE-2024-7359 was published Aug 1, 2024
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DIR-600 up to 2.18. It has... Moderate Unreviewed
CVE-2024-7357 was published Aug 1, 2024
There is a MEDIUM severity vulnerability affecting CPython. The email module didn’t properly... Moderate Unreviewed
CVE-2024-6923 was published Aug 1, 2024
The Element Pack - Addon for Elementor Page Builder WordPress Plugin plugin for WordPress is... Moderate Unreviewed
CVE-2024-2455 was published Aug 1, 2024
The Gutenberg Blocks, Page Builder – ComboBlocks plugin for WordPress is vulnerable to Stored... Moderate Unreviewed
CVE-2024-6346 was published Aug 1, 2024
The Breakdance plugin for WordPress is vulnerable to unauthorized access of data in all versions... Moderate Unreviewed
CVE-2024-5331 was published Aug 1, 2024
The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Stored... Moderate Unreviewed
CVE-2024-7302 was published Aug 1, 2024
The Breakdance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the... Moderate Unreviewed
CVE-2024-5330 was published Aug 1, 2024
Dell InsightIQ, Verion 5.0.0, contains a use of a broken or risky cryptographic algorithm... Moderate Unreviewed
CVE-2024-28972 was published Aug 1, 2024
Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Read Vulnerability. A... Moderate Unreviewed
CVE-2024-38481 was published Aug 1, 2024
Dell iDRAC Service Module version 5.3.0.0 and prior, contain an Out of bound Read Vulnerability.... Moderate Unreviewed
CVE-2024-25947 was published Aug 1, 2024
Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Write Vulnerability.... Moderate Unreviewed
CVE-2024-25948 was published Aug 1, 2024
Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Write Vulnerability.... Moderate Unreviewed
CVE-2024-38490 was published Aug 1, 2024
Zohocorp ManageEngine Applications Manager versions 170900 and below are vulnerable to the... Moderate Unreviewed
CVE-2024-5678 was published Aug 1, 2024
The Remote Content Shortcode plugin for WordPress is vulnerable to Server-Side Request Forgery in... Moderate Unreviewed
CVE-2024-2090 was published Aug 1, 2024
The WooCommerce Customers Manager WordPress plugin before 30.2 does not have authorisation and... Moderate Unreviewed
CVE-2024-1747 was published Aug 1, 2024
The Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for... Moderate Unreviewed
CVE-2024-4090 was published Aug 1, 2024
A vulnerability has been found in TVT DVR TD-2104TS-CL, DVR TD-2108TS-HP, Provision-ISR DVR SH... Moderate Unreviewed
CVE-2024-7339 was published Aug 1, 2024
The AdFoxly – Ad Manager, AdSense Ads & Ads.txt plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2024-1715 was published Aug 1, 2024
The socialdriver-framework WordPress plugin before 2024.04.30 does not sanitise and escape some... Moderate Unreviewed
CVE-2024-2872 was published Aug 1, 2024
A vulnerability was found in Baidu UEditor 1.4.3.3. It has been classified as problematic. This... Moderate Unreviewed
CVE-2024-7342 was published Aug 1, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database