GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,373
Erlang
33
GitHub Actions
22
Go
2,135
Maven
5,000+
npm
3,797
NuGet
687
pip
3,478
Pub
12
RubyGems
896
Rust
897
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
849 advisories
Filter by severity
TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection...
Critical
Unreviewed
CVE-2022-28495
was published
Mar 24, 2023
Honeywell OneWireless
Wireless Device Manager (WDM) for the following versions R310.x, R320.x,...
Critical
Unreviewed
CVE-2023-5878
was published
Feb 6, 2025
A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support...
Critical
Unreviewed
CVE-2024-12356
was published
Dec 17, 2024
Network access can be used to execute arbitrary code with elevated privileges.
This
issue...
Critical
Unreviewed
CVE-2024-48841
was published
Jan 27, 2025
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability...
Critical
Unreviewed
CVE-2025-22630
was published
Feb 14, 2025
inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before...
Critical
Unreviewed
CVE-2023-29475
was published
Apr 7, 2023
webservice in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before...
Critical
Unreviewed
CVE-2023-29473
was published
Apr 7, 2023
inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before...
Critical
Unreviewed
CVE-2023-29474
was published
Apr 7, 2023
D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via...
Critical
Unreviewed
CVE-2023-26822
was published
Apr 2, 2023
An issue was identified in GitLab CE/EE affecting all versions from 1.0 prior to 15.8.5, 15.9...
Critical
Unreviewed
CVE-2023-1708
was published
Apr 5, 2023
D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi...
Critical
Unreviewed
CVE-2020-25506
was published
May 24, 2022
If exploited, this command injection vulnerability could allow remote attackers to run arbitrary...
Critical
Unreviewed
CVE-2018-19949
was published
May 24, 2022
A command injection vulnerability in the web server of some Hikvision product. Due to the...
Critical
Unreviewed
CVE-2021-36260
was published
May 24, 2022
Yealink Device Management (DM) 3.6.0.20 allows command injection as root via the /sm/api/v1...
Critical
Unreviewed
CVE-2021-27561
was published
May 24, 2022
Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that...
Critical
Unreviewed
CVE-2021-35394
was published
May 24, 2022
eladmin <=2.7 is vulnerable to CSV Injection in the exception log download module.
Critical
Unreviewed
CVE-2025-22978
was published
Feb 3, 2025
The specific component in Celk Saude 3.1.252.1 that processes user input and returns error...
Critical
Unreviewed
CVE-2024-48761
was published
Jan 30, 2025
Eclipse Target Management: Terminal and Remote System Explorer (RSE) version <= 4.5.400 has a...
Critical
Unreviewed
CVE-2024-0740
was published
Apr 26, 2024
EasyVirt DCScope 8.6.0 and earlier and co2Scope 1.3.0 and earlier are vulnerable to Command...
Critical
Unreviewed
CVE-2024-55062
was published
Feb 1, 2025
A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L...
Critical
Unreviewed
CVE-2021-45382
was published
Feb 18, 2022
SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via...
Critical
Unreviewed
CVE-2022-29303
was published
May 13, 2022
A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been rated as...
Critical
Unreviewed
CVE-2025-0798
was published
Jan 29, 2025
TRENDnet TEW-632BRP v1.010B31 devices have an OS command injection vulnerability in the CGl...
Critical
Unreviewed
CVE-2024-57590
was published
Jan 27, 2025
(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5)...
Critical
Unreviewed
CVE-2016-1555
was published
May 14, 2022
Not all valid JavaScript whitespace characters are considered to be whitespace. Templates...
Critical
Unreviewed
CVE-2023-24540
was published
May 11, 2023
ProTip!
Advisories are also available from the
GraphQL API