Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,318
Erlang
31
GitHub Actions
21
Go
2,074
Maven
5,000+
npm
3,746
NuGet
674
pip
3,434
Pub
12
RubyGems
892
Rust
880
Swift
37
Unreviewed advisories
All unreviewed
5,000+

6,473 advisories

Loading
This vulnerability allows remote attackers to disclose sensitive information on affected... High Unreviewed
CVE-2020-15618 was published May 24, 2022
ZenTao 16.4 to 18.0.beta1 is vulnerable to SQL injection. After logging in with any user, you can... High Unreviewed
CVE-2022-47745 was published Jan 19, 2023
Network Olympus version 1.8.0 allows an authenticated admin user to inject SQL queries in '/api... High Unreviewed
CVE-2022-25225 was published Mar 11, 2022
Luocms v2.0 is affected by SQL Injection in /admin/manager/admin_mod.php. An attacker can obtain... High Unreviewed
CVE-2022-24601 was published Mar 11, 2022
The login.jsp page of Quicklert for Digium 10.0.0 (1043) is affected by both Blind SQL Injection... High Unreviewed
CVE-2021-43969 was published Mar 11, 2022
Found a potential security vulnerability inside the Pandora API. Affected Pandora FMS version... High Unreviewed
CVE-2022-0507 was published Mar 11, 2022
The Simple Quotation WordPress plugin through 1.3.2 does not have authorisation (and CSRF) checks... High Unreviewed
CVE-2022-22735 was published Mar 15, 2022
The Event Manager and Tickets Selling for WooCommerce WordPress plugin before 3.5.8 does not... High Unreviewed
CVE-2022-0478 was published Mar 15, 2022
The WP Email Users WordPress plugin through 1.7.6 does not escape the data_raw parameter in the... High Unreviewed
CVE-2021-24959 was published Mar 15, 2022
HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in... High Unreviewed
CVE-2022-25491 was published Mar 16, 2022
A blind SQL injection vulnerability exists in Xbtit 3.1 via the sid parameter in ajaxchat... High Unreviewed
CVE-2021-45821 was published Mar 17, 2022
SQL injection vulnerability in the allCineVid component (com_allcinevid) 1.0.0 for Joomla! allows... High Unreviewed
CVE-2011-0511 was published May 17, 2022
SQL injection vulnerability in forget.php in the management GUI in Symantec Web Gateway 4.5.x... High Unreviewed
CVE-2011-0549 was published May 17, 2022
SQL injection vulnerability in mainx_a.php in E-PROMPT C BetMore Site Suite 4.0 through 4.2.0... High Unreviewed
CVE-2011-0516 was published May 17, 2022
SQL injection vulnerability in data.php in PHPCMS 2008 V2 allows remote attackers to execute... High Unreviewed
CVE-2011-0645 was published May 17, 2022
SQL injection vulnerability in viewfaqs.php in PHP LOW BIDS allows remote attackers to execute... High Unreviewed
CVE-2011-0646 was published May 17, 2022
SQL injection vulnerability in include/admin/model_field.class.php in PHPCMS 2008 V2 allows... High Unreviewed
CVE-2011-0644 was published May 17, 2022
Multiple SQL injection vulnerabilities in Domain Technologie Control (DTC) before 0.32.9 allow... High Unreviewed
CVE-2011-0434 was published May 17, 2022
SQL injection vulnerability in cart.php in Advanced Webhost Billing System (AWBS) 2.9.2 and... High Unreviewed
CVE-2011-0510 was published May 17, 2022
SQL injection vulnerability in detail.asp in Site2Nite Auto e-Manager allows remote attackers to... High Unreviewed
CVE-2010-4793 was published May 17, 2022
SQL injection vulnerability in takefreestart.php in PreProjects Pre Online Tests Generator Pro... High Unreviewed
CVE-2010-4776 was published May 17, 2022
Multiple SQL injection vulnerabilities in the log-in form in Truworth Flex Timesheet allow remote... High Unreviewed
CVE-2010-4797 was published May 17, 2022
SQL injection vulnerability in infusions/mg_user_fotoalbum_panel/mg_user_fotoalbum.php in the MG... High Unreviewed
CVE-2010-4791 was published May 17, 2022
SQL injection vulnerability in JRadio (com_jradio) component before 1.5.1 for Joomla! allows... High Unreviewed
CVE-2010-4702 was published May 17, 2022
Multiple SQL injection vulnerabilities in PHPYun 1.1.6 allow remote attackers to execute... High Unreviewed
CVE-2010-4796 was published May 17, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database