Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,636
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+

4,240 advisories

Loading
SQL injection in MCMS Critical
CVE-2021-44868 was published for net.mingsoft:ms-mcms (Maven) Feb 18, 2022
EasyCMS v1.6 allows for SQL injection via ArticlemAction.class.php. In the background, search... Critical Unreviewed
CVE-2022-23358 was published Feb 17, 2022
DuxCMS v3.1.3 was discovered to contain a SQL injection vulnerability via the component s/tools... Critical Unreviewed
CVE-2021-3242 was published Feb 17, 2022
SQL Injection in Jeecg-boot Critical
CVE-2022-22880 was published for org.jeecgframework.boot:jeecg-boot-base (Maven) Feb 17, 2022
SQL Injection in Jeecg-boot Critical
CVE-2022-22881 was published for org.jeecgframework.boot:jeecg-boot-base (Maven) Feb 17, 2022
SQL Injection in Couchbase Sync Gateway Critical
CVE-2019-9039 was published for github.com/couchbase/sync_gateway (Go) Feb 15, 2022
andrewpollock
Credited to andrewpollock
DedeCMS v5.7.87 was discovered to contain a SQL injection vulnerability in article_coonepage_rule... Critical Unreviewed
CVE-2022-23337 was published Feb 15, 2022
S-CMS v5.0 was discovered to contain a SQL injection vulnerability in member_pay.php via the O_id... Critical Unreviewed
CVE-2022-23336 was published Feb 15, 2022
Metinfo v7.5.0 was discovered to contain a SQL injection vulnerability in language_general.class... Critical Unreviewed
CVE-2022-23335 was published Feb 15, 2022
Metinfo v7.5.0 was discovered to contain a SQL injection vulnerability in parameter_admin.class... Critical Unreviewed
CVE-2022-22295 was published Feb 15, 2022
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in /mobile_seal... Critical Unreviewed
CVE-2022-24206 was published Feb 15, 2022
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in export_data.php via... Critical Unreviewed
CVE-2022-23902 was published Feb 15, 2022
Tokheim Profleet DiaLOG 11.005.02 is affected by SQL Injection. The component is the... Critical Unreviewed
CVE-2021-34235 was published Feb 12, 2022
The Secure Copy Content Protection and Content Locking WordPress plugin before 2.8.2 does not... Critical Unreviewed
CVE-2021-24931 was published Feb 11, 2022
HMS v1.0 was discovered to contain a SQL injection vulnerability via patientlogin.php. Critical Unreviewed
CVE-2022-23366 was published Feb 11, 2022
AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php. Critical Unreviewed
CVE-2022-24223 was published Feb 10, 2022
Emlog v6.0 was discovered to contain a SQL injection vulnerability via the $TagID parameter of... Critical Unreviewed
CVE-2022-23379 was published Feb 10, 2022
Unauthenticated SQL Injection (SQLi) vulnerability discovered in [GWA] AutoResponder WordPress... Critical Unreviewed
CVE-2021-44779 was published Feb 10, 2022
SQL injection without credentials in ming-soft MCMS Critical
CVE-2020-23262 was published for net.mingsoft:ms-mcms (Maven) Feb 9, 2022
A SQL injection vulnerability in Voipmonitor GUI before v24.96 allows attackers to escalate... Critical Unreviewed
CVE-2022-24260 was published Feb 9, 2022
Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in ... Critical Unreviewed
CVE-2022-24263 was published Feb 8, 2022
Improper neutralization of special elements used in an SQL command ('SQL Injection')... Critical Unreviewed
CVE-2021-43926 was published Feb 8, 2022
Improper neutralization of special elements used in an SQL command ('SQL Injection')... Critical Unreviewed
CVE-2021-43925 was published Feb 8, 2022
Improper neutralization of special elements used in an SQL command ('SQL Injection')... Critical Unreviewed
CVE-2021-43927 was published Feb 8, 2022
The Paid Memberships Pro WordPress plugin before 2.6.7 does not escape the discount_code in one... Critical Unreviewed
CVE-2021-25114 was published Feb 8, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database