Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,640
Maven
5,000+
npm
4,265
NuGet
760
pip
4,061
Pub
12
RubyGems
956
Rust
1,057
Swift
45
Unreviewed advisories
All unreviewed
5,000+

4,058 advisories

Loading
SQL injection vulnerability in Cisco Unified Communications Manager IM and Presence Service 9.1(1... Moderate Unreviewed
CVE-2015-4222 was published May 17, 2022
SQL injection vulnerability in the web interface in Cisco Unity Connection 9.1(1.2) and earlier... Moderate Unreviewed
CVE-2015-6299 was published May 17, 2022
Multiple SQL injection vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4... Moderate Unreviewed
CVE-2013-5003 was published May 17, 2022
Multiple SQL injection vulnerabilities in Avanset Visual CertExam Manager 3.3 and earlier allow... Moderate Unreviewed
CVE-2013-7175 was published May 17, 2022
SQL injection vulnerability in zp-core/zp-extensions/wordpress_import.php in Zenphoto before 1.4... Moderate Unreviewed
CVE-2013-7242 was published May 17, 2022
SQL injection vulnerability in the PHPlist Integration Module before 6.x-1.7 for Drupal allows... Moderate Unreviewed
CVE-2015-3345 was published May 17, 2022
The Big SQL component in IBM InfoSphere BigInsights 3.0 through 3.0.0.2 allows remote... Moderate Unreviewed
CVE-2015-1889 was published May 17, 2022
SQL injection vulnerability in the Interactive Voice Response (IVR) component in Cisco Unified... Moderate Unreviewed
CVE-2015-0699 was published May 17, 2022
IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially... Moderate Unreviewed
CVE-2016-8929 was published May 17, 2022
SQL injection vulnerability in Intel Security Advanced Threat Defense (ATD) Linux 3.6.0 and... Moderate Unreviewed
CVE-2017-3899 was published May 17, 2022
TIBCO Spotfire Server 7.0.X before 7.0.2, 7.5.x before 7.5.1, 7.6.x before 7.6.1, 7.7.x before 7... Moderate Unreviewed
CVE-2017-5527 was published May 17, 2022
IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially... Moderate Unreviewed
CVE-2016-5939 was published May 17, 2022
The application Piwigo is affected by a SQL injection vulnerability in version 2.9.0 and possibly... Moderate Unreviewed
CVE-2017-9463 was published May 17, 2022
Improper Neutralization of Special Elements used in an SQL Command Pivotal Spring Data JPA Moderate
CVE-2016-6652 was published for org.springframework.data:spring-data-jpa (Maven) May 17, 2022
A vulnerability in the Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager ... Moderate Unreviewed
CVE-2017-6698 was published May 17, 2022
Vulnerabilities in the web-based GUI of Cisco Unified Communications Domain Manager (CUCDM) could... Moderate Unreviewed
CVE-2017-6668 was published May 17, 2022
A vulnerability in the Cisco Unified Communications Manager web interface could allow an... Moderate Unreviewed
CVE-2017-3886 was published May 17, 2022
SQL injection vulnerability in the AssetView for MacOS Ver.9.2.0 and earlier versions allows... Moderate Unreviewed
CVE-2017-2241 was published May 17, 2022
SQL injection vulnerability in Siemens Automation License Manager (ALM) before 5.3 SP3 Update 1... Moderate Unreviewed
CVE-2016-8564 was published May 17, 2022
SQL injection vulnerability in Node Vote 5.x before 5.x-1.1 and 6.x before 6.x-1.0, a module for... Moderate Unreviewed
CVE-2008-4633 was published May 17, 2022
Multiple SQL injection vulnerabilities in Jetbox CMS 2.1 allow remote authenticated users to... Moderate Unreviewed
CVE-2008-4651 was published May 17, 2022
SQL injection vulnerability in admin.php in Libera CMS 1.12, when magic_quotes_gpc is disabled,... Moderate Unreviewed
CVE-2008-4701 was published May 17, 2022
SQL injection vulnerability in the "Manage pages" feature (admin/pages) in Typo 5.1.3 and earlier... Moderate Unreviewed
CVE-2008-4904 was published May 17, 2022
Multiple SQL injection vulnerabilities in PunBB 1.3 and 1.3.1 allow remote authenticated... Moderate Unreviewed
CVE-2008-5434 was published May 17, 2022
SQL injection vulnerability in index.php in MODx 0.9.6.2 and earlier, when magic_quotes_gpc is... Moderate Unreviewed
CVE-2008-5940 was published May 17, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database