Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,638
Maven
5,000+
npm
4,262
NuGet
760
pip
4,058
Pub
12
RubyGems
956
Rust
1,056
Swift
45
Unreviewed advisories
All unreviewed
5,000+

4,056 advisories

Loading
SQL injection vulnerability in ajax/mail_functions.php in the WP Symposium plugin before 14.11... Moderate Unreviewed
CVE-2014-8810 was published May 14, 2022
e107_admin/banlist.php in e107 2.1.8 allows SQL injection via the old_ip parameter. Moderate Unreviewed
CVE-2018-16389 was published May 14, 2022
An issue was discovered in Jorani 0.6.5. SQL Injection (error-based) allows a user of the... Moderate Unreviewed
CVE-2018-15918 was published May 14, 2022
MetInfo 6.1.0 has SQL injection in doexport() in app/system/feedback/admin/feedback_admin.class... Moderate Unreviewed
CVE-2018-17129 was published May 14, 2022
In the content provider of the download manager, there is a possible SQL injection due to... Moderate Unreviewed
CVE-2018-9493 was published May 14, 2022
The "Forminator Contact Form, Poll & Quiz Builder" plugin before 1.6 for WordPress has SQL... Moderate Unreviewed
CVE-2019-9568 was published May 14, 2022
Multiple SQL injection vulnerabilities in my little forum before 2.3.4 allow remote... Moderate Unreviewed
CVE-2015-1434 was published May 14, 2022
SQL injection vulnerability in the Photo Gallery plugin before 1.2.11 for WordPress allows remote... Moderate Unreviewed
CVE-2015-1393 was published May 14, 2022
SQL injection vulnerability in BulkEditSearchResult.cc in ManageEngine Password Manager Pro (PMP)... Moderate Unreviewed
CVE-2014-8498 was published May 14, 2022
SQL injection vulnerability in menuXML.php in Centreon 2.3.3 through 2.3.9-4 (fixed in Centreon... Moderate Unreviewed
CVE-2012-5967 was published May 14, 2022
An issue was discovered in DonLinkage 6.6.8. SQL injection in /pages/proxy/php.php and /pages... Moderate Unreviewed
CVE-2018-17092 was published May 13, 2022
A vulnerability in the SQL database interface for Cisco Emergency Responder could allow an... Moderate Unreviewed
CVE-2017-12227 was published May 13, 2022
A vulnerability in the Cisco Unified Communications Manager SQL database interface could allow an... Moderate Unreviewed
CVE-2017-12302 was published May 13, 2022
A SQL Injection vulnerability in the web framework of Cisco Prime Service Catalog could allow an... Moderate Unreviewed
CVE-2017-12364 was published May 13, 2022
A vulnerability in the web-based management interface of the Cisco Smart Net Total Care (SNTC)... Moderate Unreviewed
CVE-2017-6754 was published May 13, 2022
A vulnerability in the web framework of Cisco Unified Communications Manager could allow an... Moderate Unreviewed
CVE-2018-0120 was published May 13, 2022
A vulnerability in ReadA version 1.1.0.2 and previous allows an authorized user with access to a... Moderate Unreviewed
CVE-2018-10595 was published May 13, 2022
A vulnerability in DB Manager version 3.0.1.0 and previous and PerformA version 3.0.0.0 and... Moderate Unreviewed
CVE-2018-10593 was published May 13, 2022
The WorkPoint component, which is embedded in all RSA Archer, versions 6.1.x, 6.2.x, 6.3.x prior... Moderate Unreviewed
CVE-2018-11065 was published May 13, 2022
katello SQL Injection vulnerability Moderate
CVE-2018-14623 was published for katello (RubyGems) May 13, 2022
SQL Injection exists in MailSherlock before 1.5.235 for OAKlouds allows an unauthenticated user... Moderate Unreviewed
CVE-2018-17542 was published May 13, 2022
An input sanitization flaw was found in the id field in the dashboard controller of Foreman... Moderate Unreviewed
CVE-2018-1096 was published May 13, 2022
A SQL Injection issue was discovered in Advantech WebAccess/SCADA versions prior to V8.2_20170817... Moderate Unreviewed
CVE-2018-5443 was published May 13, 2022
Remote SQL Injection against the HP Service Manager Software Web Tier, version 9.30, 9.31, 9.32,... Moderate Unreviewed
CVE-2018-6494 was published May 13, 2022
Multiple SQL injection vulnerabilities in EllisLab ExpressionEngine before 2.9.1 allow remote... Moderate Unreviewed
CVE-2014-5387 was published May 13, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database