GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,373
Erlang
33
GitHub Actions
22
Go
2,135
Maven
5,000+
npm
3,797
NuGet
687
pip
3,478
Pub
12
RubyGems
896
Rust
897
Swift
38
Unreviewed advisories
All unreviewed
5,000+
3,438 advisories
Filter by severity
In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Command Injection...
High
Unreviewed
CVE-2021-44520
was published
Apr 14, 2022
An authenticated user may be able to misuse parameters to inject arbitrary operating system...
High
Unreviewed
CVE-2022-0999
was published
Apr 12, 2022
A CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection...
Critical
Unreviewed
CVE-2021-22795
was published
Apr 14, 2022
A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies...
Critical
Unreviewed
CVE-2022-4515
was published
Dec 20, 2022
OS command injection vulnerability exists in CENTUM VP R4.01.00 to R4.03.00, CENTUM VP Small R4...
High
Unreviewed
CVE-2022-27188
was published
Apr 16, 2022
A flaw was found in WebSVN 2.3.2. Without prior authentication, if the 'allowDownload' option is...
Critical
Unreviewed
CVE-2011-2195
was published
Apr 22, 2022
A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an...
High
Unreviewed
CVE-2021-1448
was published
May 24, 2022
Prima Systems FlexAir devices allow Authenticated Command Injection resulting in Root Remote Code...
High
Unreviewed
CVE-2019-7670
was published
May 24, 2022
An exploitable vulnerability exists in the notifications functionality of Circle with Disney...
High
Unreviewed
CVE-2017-2917
was published
May 13, 2022
An OS Command Injection vulnerability in the PAN-OS management interface that allows...
High
Unreviewed
CVE-2020-2038
was published
May 24, 2022
In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2...
High
Unreviewed
CVE-2017-2844
was published
May 13, 2022
An exploitable command injection vulnerability exists in the web management interface used by the...
High
Unreviewed
CVE-2017-2845
was published
May 13, 2022
In the web management interface in Foscam C1 Indoor HD Camera running application firmware 2.52.2...
High
Unreviewed
CVE-2017-2842
was published
May 13, 2022
An exploitable command injection vulnerability exists in the web management interface used by the...
High
Unreviewed
CVE-2017-2832
was published
May 13, 2022
An exploitable command injection vulnerability exists in the web management interface used by the...
High
Unreviewed
CVE-2017-2827
was published
May 13, 2022
vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on...
High
Unreviewed
CVE-2011-2523
was published
Apr 22, 2022
An exploitable command injection vulnerability exists in the web management interface used by the...
High
Unreviewed
CVE-2017-2841
was published
May 13, 2022
An exploitable command injection vulnerability exists in the web management interface used by the...
High
Unreviewed
CVE-2017-2833
was published
May 13, 2022
In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2...
High
Unreviewed
CVE-2017-2848
was published
May 13, 2022
OS Command Injection in Jenkins
High
CVE-2017-1000393
was published
for
org.jenkins-ci.main:jenkins-core
(Maven)
May 14, 2022
An exploitable command injection vulnerability exists in the web management interface used by the...
High
Unreviewed
CVE-2017-2828
was published
May 13, 2022
OS Command Injection in git-pull-or-clone
Critical
CVE-2022-24437
was published
for
git-pull-or-clone
(npm)
May 3, 2022
In the web management interface in Foscam C1 Indoor HD Camera running application firmware 2.52.2...
High
Unreviewed
CVE-2017-2843
was published
May 13, 2022
In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2...
High
Unreviewed
CVE-2017-2849
was published
May 13, 2022
An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE...
High
Unreviewed
CVE-2018-4021
was published
May 13, 2022
ProTip!
Advisories are also available from the
GraphQL API