Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,198
Erlang
31
GitHub Actions
19
Go
1,986
Maven
5,000+
npm
3,702
NuGet
660
pip
3,328
Pub
11
RubyGems
883
Rust
843
Swift
36
Unreviewed advisories
All unreviewed
5,000+

26,026 advisories

Loading
Cross-site scripting vulnerability exists in VK All in One Expansion Unit versions prior to 9.100... Moderate Unreviewed
CVE-2024-52268 was published Nov 13, 2024
The Product Delivery Date for WooCommerce – Lite plugin for WordPress is vulnerable to Reflected... Moderate Unreviewed
CVE-2024-10882 was published Nov 13, 2024
The AJAX Login and Registration modal popup + inline form plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2024-8874 was published Nov 13, 2024
The Social Proof (Testimonial) Slider plugin for WordPress is vulnerable to Stored Cross-Site... Moderate Unreviewed
CVE-2024-8985 was published Nov 13, 2024
The Aqua SVG Sprite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG... Moderate Unreviewed
CVE-2024-9426 was published Nov 13, 2024
The Constant Contact Forms by MailMunch plugin for WordPress is vulnerable to Reflected Cross... Moderate Unreviewed
CVE-2024-9614 was published Nov 13, 2024
The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site... Moderate Unreviewed
CVE-2024-10684 was published Nov 13, 2024
The NiceJob plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of the... Moderate Unreviewed
CVE-2024-10887 was published Nov 13, 2024
The Razorpay Payment Button Elementor Plugin plugin for WordPress is vulnerable to Reflected... Moderate Unreviewed
CVE-2024-10850 was published Nov 13, 2024
The Razorpay Payment Button Plugin plugin for WordPress is vulnerable to Reflected Cross-Site... Moderate Unreviewed
CVE-2024-10851 was published Nov 13, 2024
The Design for Contact Form 7 Style WordPress Plugin – CF7 WOW Styler plugin for WordPress is... Moderate Unreviewed
CVE-2024-10686 was published Nov 13, 2024
The 胖鼠采集(Fat Rat Collect) 微信知乎简书腾讯新闻列表分页采集, 还有自动采集、自动发布、自动标签、等多项功能。开源插件 plugin for WordPress is... Moderate Unreviewed
CVE-2024-10577 was published Nov 13, 2024
A vulnerability was found in ZZCMS up to 2023. It has been rated as problematic. Affected by this... Moderate Unreviewed
CVE-2024-11130 was published Nov 12, 2024
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All... Moderate Unreviewed
CVE-2024-50561 was published Nov 12, 2024
The Slickstream: Engagement and Conversions plugin for WordPress is vulnerable to Stored Cross... Moderate Unreviewed
CVE-2024-10179 was published Nov 12, 2024
The JetWidgets For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting... Moderate Unreviewed
CVE-2024-10323 was published Nov 12, 2024
The Contact Form 7 Redirect & Thank You Page plugin for WordPress is vulnerable to Reflected... Moderate Unreviewed
CVE-2024-10685 was published Nov 12, 2024
A vulnerability was found in SourceCodester Hospital Management System 1.0. It has been rated as... Moderate Unreviewed
CVE-2024-11102 was published Nov 12, 2024
The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting... Moderate Unreviewed
CVE-2024-10538 was published Nov 12, 2024
The Admin and Site Enhancements (ASE) plugin for WordPress is vulnerable to Stored Cross-Site... Moderate Unreviewed
CVE-2024-10790 was published Nov 12, 2024
The xili-tidy-tags plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ... Moderate Unreviewed
CVE-2024-9357 was published Nov 12, 2024
Persistent and reflected XSS vulnerabilities in the themeMode cookie and _h URL parameter of... Moderate Unreviewed
CVE-2024-50601 was published Nov 12, 2024
Cross Site Scripting vulnerability in Online Shop Store v.1.0 allows a remote attacker to execute... Moderate Unreviewed
CVE-2024-51213 was published Nov 12, 2024
The NetAdmin IAM system (version 4.0.30319) has a Cross Site Scripting (XSS) vulnerability in the... Moderate Unreviewed
CVE-2024-51026 was published Nov 11, 2024
TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store... Moderate Unreviewed
CVE-2024-51189 was published Nov 11, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database