GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,237
Erlang
31
GitHub Actions
20
Go
2,000
Maven
5,000+
npm
3,711
NuGet
661
pip
3,383
Pub
11
RubyGems
885
Rust
849
Swift
36
Unreviewed advisories
All unreviewed
5,000+
100,151 advisories
Filter by severity
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component...
High
Unreviewed
CVE-2024-26352
was published
Feb 22, 2024
Flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component...
High
Unreviewed
CVE-2024-23094
was published
Feb 22, 2024
A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets...
High
Unreviewed
CVE-2023-3966
was published
Feb 22, 2024
IBM AIX 7.3, VIOS 4.1's Perl implementation could allow a non-privileged local user to exploit a...
High
Unreviewed
CVE-2024-25021
was published
Feb 22, 2024
B&R Automation Studio Upgrade Service and B&R Technology Guarding use insufficient cryptography...
High
Unreviewed
CVE-2024-0220
was published
Feb 22, 2024
Apache Answer Unrestricted Upload of File with Dangerous Type vulnerability
High
CVE-2024-22393
was published
for
github.com/apache/incubator-answer
(Go)
Feb 22, 2024
An unauthenticated remote attacker can bypass the brute force prevention mechanism and disturb...
High
Unreviewed
CVE-2024-1104
was published
Feb 22, 2024
A use of externally-controlled format string in Fortinet FortiOS 7.2.0 through 7.2.4, 7.0.0...
High
Unreviewed
CVE-2023-29181
was published
Feb 22, 2024
A null pointer dereference in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.11,...
High
Unreviewed
CVE-2023-29180
was published
Feb 22, 2024
A vulnerability was discovered in Veritas eDiscovery Platform before 10.2.5. The application...
High
Unreviewed
CVE-2024-27283
was published
Feb 22, 2024
Withdrawn Advisory: Kirby CMS HTML injection vulnerability
High
CVE-2024-26482
was published
for
getkirby/cms
(Composer)
Feb 22, 2024
•
withdrawn
A maliciously crafted STP file when ASMKERN228A.dll parsed through Autodesk AutoCAD can be used...
High
Unreviewed
CVE-2024-23136
was published
Feb 22, 2024
A maliciously crafted STP file in atf_dwg_consumer.dll when parsed through Autodesk AutoCAD could...
High
Unreviewed
CVE-2024-23132
was published
Feb 22, 2024
A maliciously crafted SLDPRT file when ASMkern228A.dll parsed through Autodesk AutoCAD can be...
High
Unreviewed
CVE-2024-23135
was published
Feb 22, 2024
A maliciously crafted STP file in ASMDATAX228A.dll when parsed through Autodesk AutoCAD could...
High
Unreviewed
CVE-2024-23133
was published
Feb 22, 2024
A maliciously crafted IGS file when tbb.dll parsed through Autodesk AutoCAD can be used in user...
High
Unreviewed
CVE-2024-23134
was published
Feb 22, 2024
A maliciously crafted STP or SLDPRT file when ODXSW_DLL.dll parsed through Autodesk AutoCAD can...
High
Unreviewed
CVE-2024-23137
was published
Feb 22, 2024
A maliciously crafted MODEL file in libodxdll.dll when parsed through Autodesk AutoCAD could lead...
High
Unreviewed
CVE-2024-23128
was published
Feb 22, 2024
A maliciously crafted MODEL 3DM, STP or SLDASM files in opennurbs.dll when parsed through...
High
Unreviewed
CVE-2024-23129
was published
Feb 22, 2024
A maliciously crafted SLDASM, or SLDPRT files in ODXSW_DLL.dll when parsed through Autodesk...
High
Unreviewed
CVE-2024-23130
was published
Feb 22, 2024
A maliciously crafted STP file in ASMKERN228A.dll or ASMDATAX228A.dll when parsed through...
High
Unreviewed
CVE-2024-23131
was published
Feb 22, 2024
A maliciously crafted MODEL, SLDPRT or SLDASM file when parsed VCRUNTIME140.dll through Autodesk...
High
Unreviewed
CVE-2024-23127
was published
Feb 22, 2024
code-projects Agro-School Management System 1.0 is suffers from Incorrect Access Control.
High
Unreviewed
CVE-2024-25251
was published
Feb 22, 2024
A maliciously crafted STP file when parsed in ASMIMPORT228A.dll through Autodesk AutoCAD can...
High
Unreviewed
CVE-2024-23124
was published
Feb 22, 2024
An issue in MAXON CINEMA 4D R2024.2.0 allows a local attacker to execute arbitrary code via a...
High
Unreviewed
CVE-2024-25423
was published
Feb 22, 2024
ProTip!
Advisories are also available from the
GraphQL API