GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,373
Erlang
33
GitHub Actions
22
Go
2,135
Maven
5,000+
npm
3,797
NuGet
687
pip
3,478
Pub
12
RubyGems
896
Rust
897
Swift
38
Unreviewed advisories
All unreviewed
5,000+
210 advisories
Filter by severity
The Business Directory Plugin plugin for WordPress is vulnerable to CSV Injection in versions up...
High
Unreviewed
CVE-2023-5527
was published
Jun 18, 2024
The WS Form LITE plugin for WordPress is vulnerable to CSV Injection in versions up to, and...
Moderate
Unreviewed
CVE-2023-5424
was published
Jun 7, 2024
The TablePress plugin 1.9.2 for WordPress allows tablepress[data] CSV injection by Editor users.
Moderate
Unreviewed
CVE-2019-20180
was published
May 24, 2022
IBM WebSphere Automation 1.7.0 could allow an attacker with privileged access to the network to...
Moderate
Unreviewed
CVE-2024-28764
was published
May 1, 2024
Sage X3 version 12.14.0.50-0 is vulnerable to CSV Injection.
High
Unreviewed
CVE-2023-31867
was published
Jun 22, 2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in WPOmnia KB Support...
High
Unreviewed
CVE-2023-25983
was published
Nov 15, 2023
Ericsson Network Manager (ENM), versions prior to 23.1, contains a vulnerability in the export...
High
Unreviewed
CVE-2024-25007
was published
Apr 4, 2024
Dell SmartFabric Storage Software v1.4 (and earlier) contains possible vulnerabilities for HTML...
Moderate
Unreviewed
CVE-2023-43071
was published
Oct 5, 2023
SearchBlox before Version 9.2.1 is vulnerable to CSV macro injection in "Featured Results"...
Critical
Unreviewed
CVE-2020-10131
was published
Sep 6, 2023
IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote...
High
Unreviewed
CVE-2023-22877
was published
Aug 28, 2023
An issue in Atlos v.1.0 allows an authenticated attacker to execute arbitrary code via a crafted...
High
Unreviewed
CVE-2023-38843
was published
Aug 17, 2023
Tadiran Telecom Composit - CWE-1236: Improper Neutralization of Formula Elements in a CSV File
High
Unreviewed
CVE-2023-37219
was published
Jul 30, 2023
An issue was discovered in Nokia NetAct 22 through the Administration of Measurements website...
High
Unreviewed
CVE-2022-28864
was published
Jul 24, 2023
A CSV injection vulnerability was found in the Avaya Call Management System (CMS) Supervisor web...
Moderate
Unreviewed
CVE-2023-3527
was published
Jul 19, 2023
IBM Watson Knowledge Catalog on Cloud Pak for Data 4.0 is potentially vulnerable to CSV Injection...
High
Unreviewed
CVE-2023-28958
was published
Jul 10, 2023
Ericsson Network Manager (ENM), versions prior to 22.1, contains a vulnerability in the...
Moderate
Unreviewed
CVE-2022-46408
was published
Jun 29, 2023
The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to CSV injection in...
High
Unreviewed
CVE-2023-0721
was published
Jun 9, 2023
Minical 1.0.0 and earlier contains a CSV injection vulnerability which allows an attacker to...
High
Unreviewed
CVE-2023-33410
was published
Jun 5, 2023
ChurchCRM 4.5.3 was discovered to contain a CSV injection vulnerability via the Last Name and...
High
Unreviewed
CVE-2023-25348
was published
Apr 25, 2023
The SAP Application Interface Framework (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE...
Moderate
Unreviewed
CVE-2023-29109
was published
Apr 11, 2023
Pivotal Application Manager, versions 666.0.x prior to 666.0.36, versions 667.0.x prior to 667.0...
Moderate
Unreviewed
CVE-2019-11275
was published
May 24, 2022
A CSV injection vulnerability was found in Limesurvey before 3.17.14 that allows survey...
Critical
Unreviewed
CVE-2019-16184
was published
May 24, 2022
CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in...
High
Unreviewed
CVE-2019-12134
was published
May 24, 2022
SEP (Mac client) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to...
Moderate
Unreviewed
CVE-2018-12244
was published
May 24, 2022
A CSV injection vulnerability on the login panel of ManageEngine ADSelfService Plus Version: 6.1...
High
Unreviewed
CVE-2021-33256
was published
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API