Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,636
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+

2,278 advisories

Loading
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x... High Unreviewed
CVE-2012-6602 was published May 13, 2022
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11, 4.0.x... High Unreviewed
CVE-2012-6594 was published May 13, 2022
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x... High Unreviewed
CVE-2012-6601 was published May 13, 2022
Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5 allows remote attackers to execute... High Unreviewed
CVE-2012-6592 was published May 13, 2022
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x... High Unreviewed
CVE-2012-6605 was published May 13, 2022
Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client... High Unreviewed
CVE-2018-18857 was published May 13, 2022
Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client... High Unreviewed
CVE-2018-18858 was published May 13, 2022
Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client... High Unreviewed
CVE-2018-18859 was published May 13, 2022
Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client... High Unreviewed
CVE-2018-18856 was published May 13, 2022
A remote command injection vulnerability exists in the Barracuda Load Balancer product line ... High Unreviewed
CVE-2017-6320 was published May 13, 2022
phpFileManager 0.9.8 allows remote attackers to execute arbitrary commands via a crafted URL. High Unreviewed
CVE-2015-5958 was published May 13, 2022
An issue was discovered on Systrome Cumilon ISG-600C, ISG-600H, and ISG-800W devices with... High Unreviewed
CVE-2019-7383 was published May 13, 2022
Zen Load Balancer 3.10.1 allows remote authenticated admin users to execute arbitrary commands as... High Unreviewed
CVE-2019-7301 was published May 13, 2022
An authenticated shell command injection issue has been discovered in Raisecom ISCOM HT803G-U,... High Unreviewed
CVE-2019-7384 was published May 13, 2022
An authenticated shell command injection issue has been discovered in Raisecom ISCOM HT803G-U,... High Unreviewed
CVE-2019-7385 was published May 13, 2022
TP-Link WDR Series devices through firmware v3 (such as TL-WDR5620 V3.0) are affected by command... High Unreviewed
CVE-2019-6487 was published May 13, 2022
In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an authenticated user can execute arbitrary... High Unreviewed
CVE-2019-5425 was published May 13, 2022
Remote command injection vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version... High Unreviewed
CVE-2019-3914 was published May 13, 2022
Grandstream GXV3611IR_HD before 1.0.3.23 devices allow remote authenticated users to execute... High Unreviewed
CVE-2019-10660 was published May 13, 2022
Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to execute... High Unreviewed
CVE-2019-10662 was published May 13, 2022
Grandstream GWN7000 before 1.0.6.32 devices allow remote authenticated users to execute arbitrary... High Unreviewed
CVE-2019-10656 was published May 13, 2022
Grandstream GWN7610 before 1.0.8.18 devices allow remote authenticated users to execute arbitrary... High Unreviewed
CVE-2019-10658 was published May 13, 2022
Grandstream GXV3370 before 1.0.1.41 and WP820 before 1.0.3.6 devices allow remote authenticated... High Unreviewed
CVE-2019-10659 was published May 13, 2022
Shell Metacharacter Injection in the package installer on Zyxel NAS 326 version 5.21 and below... High Unreviewed
CVE-2019-10631 was published May 13, 2022
In some Lenovo ThinkServer-branded servers, a command injection vulnerability exists in the BMC... High Unreviewed
CVE-2018-9086 was published May 13, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database