Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,638
Maven
5,000+
npm
4,264
NuGet
760
pip
4,060
Pub
12
RubyGems
956
Rust
1,056
Swift
45
Unreviewed advisories
All unreviewed
5,000+

4,056 advisories

Loading
A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 ... Moderate Unreviewed
CVE-2018-9102 was published May 14, 2022
SQL injection vulnerability in index.php in Webmatic 3.1.1 allows remote attackers to execute... Moderate Unreviewed
CVE-2012-3350 was published May 14, 2022
A SQL injection information disclosure vulnerability in Trend Micro Email Encryption Gateway 5.5... Moderate Unreviewed
CVE-2018-10353 was published May 14, 2022
Multiple SQL injection vulnerabilities in Dell KACE K1000 5.4.76847 and possibly earlier allow... Moderate Unreviewed
CVE-2014-1671 was published May 14, 2022
OCS Inventory NG ocsreports 2.4 and ocsreports 2.3.1 version 2.4 and 2.3.1 contains a SQL... Moderate Unreviewed
CVE-2018-1000558 was published May 14, 2022
Multiple SQL injection vulnerabilities in OpenEMR 4.1.2 (Patch 7) and earlier allow remote... Moderate Unreviewed
CVE-2014-5462 was published May 14, 2022
Multiple SQL injection vulnerabilities in xmldirectorylist.jsp in the embedded Apache HTTP Server... Moderate Unreviewed
CVE-2011-1610 was published May 14, 2022
Multiple SQL injection vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote... Moderate Unreviewed
CVE-2011-4802 was published May 14, 2022
SQL injection vulnerability in lib/controllers/CentralController.php in OrangeHRM before 2.6.11.2... Moderate Unreviewed
CVE-2011-5259 was published May 14, 2022
SQL injection vulnerability in dg-admin/index.php in doorGets CMS 5.2 and earlier allows remote... Moderate Unreviewed
CVE-2014-1459 was published May 14, 2022
Multiple SQL injection vulnerabilities in AuraCMS 2.3 and earlier allow remote authenticated... Moderate Unreviewed
CVE-2014-1401 was published May 14, 2022
SQL injection vulnerability in Resources/System/Templates/Data.aspx in Procentia IntelliPen... Moderate Unreviewed
CVE-2014-2043 was published May 14, 2022
SQL injection vulnerability in xhr.php in InterWorx Web Control Panel (aka InterWorx Hosting... Moderate Unreviewed
CVE-2014-2531 was published May 14, 2022
Multiple SQL injection vulnerabilities in MobFox mAdserve 2.0 and earlier allow remote... Moderate Unreviewed
CVE-2014-2654 was published May 14, 2022
SQL injection vulnerability in dopbs-backend-forms.php in the Booking System (Booking Calendar)... Moderate Unreviewed
CVE-2014-3210 was published May 14, 2022
SQL injection vulnerability in admin/categories.php in Dotclear before 2.6.3 allows remote... Moderate Unreviewed
CVE-2014-3783 was published May 14, 2022
SQL injection vulnerability in administration/profiles.php in BoonEx Dolphin 7.1.4 and earlier... Moderate Unreviewed
CVE-2014-3810 was published May 14, 2022
Multiple SQL injection vulnerabilities in Kerio Control Statistics in Kerio Control (formerly... Moderate Unreviewed
CVE-2014-3857 was published May 14, 2022
Multiple SQL injection vulnerabilities in the All In One WP Security & Firewall plugin before 3.8... Moderate Unreviewed
CVE-2014-6242 was published May 14, 2022
Multiple SQL injection vulnerabilities in Dolibarr ERP/CRM before 3.6.1 allow remote... Moderate Unreviewed
CVE-2014-7137 was published May 14, 2022
SQL injection vulnerability in Open-Xchange (OX) AppSuite before 7.4.2-rev36 and 7.6.x before 7.6... Moderate Unreviewed
CVE-2014-7871 was published May 14, 2022
SQL injection vulnerability in Piwigo before 2.7.4, when all filters are activated, allows remote... Moderate Unreviewed
CVE-2015-1517 was published May 14, 2022
SQL injection vulnerability in client-edit.php in ProjectSend (formerly cFTP) r561 allows remote... Moderate Unreviewed
CVE-2015-2564 was published May 14, 2022
SQL injection vulnerability in mod1/index.php in the Akronymmanager (sb_akronymmanager) extension... Moderate Unreviewed
CVE-2015-2803 was published May 14, 2022
Multiple SQL injection vulnerabilities in SysAid Help Desk before 15.2 allow remote... Moderate Unreviewed
CVE-2015-2999 was published May 14, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database