GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,635
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+
4,100 advisories
Filter by severity
A vulnerability classified as critical was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This...
Moderate
Unreviewed
CVE-2025-2096
was published
Mar 8, 2025
A vulnerability classified as critical has been found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316....
Moderate
Unreviewed
CVE-2025-2095
was published
Mar 8, 2025
A vulnerability was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. It has been rated as...
Moderate
Unreviewed
CVE-2025-2094
was published
Mar 8, 2025
A command injection vulnerability has been reported to affect several QNAP operating system...
Moderate
Unreviewed
CVE-2024-53692
was published
Mar 7, 2025
A command injection vulnerability has been reported to affect QHora. If exploited, the...
High
Unreviewed
CVE-2024-50390
was published
Mar 7, 2025
Smartwares cameras CIP-37210AT and C724IP, as well as others which share the same firmware in...
High
Unreviewed
CVE-2024-13892
was published
Mar 6, 2025
Edimax IC-7100 does not properly neutralize requests. An attacker can create specially crafted...
Critical
Unreviewed
CVE-2025-1316
was published
Mar 5, 2025
A vulnerability regarding improper neutralization of special elements used in an OS command ('OS...
High
Unreviewed
CVE-2024-39351
was published
Mar 4, 2025
A vulnerability regarding improper neutralization of special elements used in an OS command ('OS...
High
Unreviewed
CVE-2023-47802
was published
Mar 4, 2025
t0mer BroadlinkManager v5.9.1 was discovered to contain an OS command injection vulnerability via...
Moderate
Unreviewed
CVE-2025-26320
was published
Mar 4, 2025
A vulnerability was found in TOTOLINK X18 9.1.0cu.2024_B20220329. It has been declared as...
Moderate
Unreviewed
CVE-2025-1829
was published
Mar 2, 2025
A vulnerability, which was classified as critical, was found in Tenda AC7 1200M 15.03.06.44....
Moderate
Unreviewed
CVE-2025-1819
was published
Mar 2, 2025
A vulnerability in the software upgrade process of Cisco Nexus 3000 Series Switches and Cisco...
Moderate
Unreviewed
CVE-2025-20161
was published
Feb 26, 2025
In MITRE Caldera through 4.2.0 and 5.0.0 before 35bc06e, a Remote Code Execution (RCE)...
Critical
Unreviewed
CVE-2025-27364
was published
Feb 24, 2025
An improper input validation vulnerability was discovered in the NTP server configuration field...
High
Unreviewed
CVE-2025-22495
was published
Feb 24, 2025
A vulnerability, which was classified as critical, has been found in FiberHome AN5506-01A ONU...
Moderate
Unreviewed
CVE-2025-1616
was published
Feb 24, 2025
A vulnerability was found in LB-LINK AC1900 Router 1.0.2 and classified as critical. Affected by...
Moderate
Unreviewed
CVE-2025-1610
was published
Feb 24, 2025
A vulnerability has been found in LB-LINK AC1900 Router 1.0.2 and classified as critical....
Moderate
Unreviewed
CVE-2025-1609
was published
Feb 24, 2025
A vulnerability, which was classified as critical, was found in LB-LINK AC1900 Router 1.0.2....
Moderate
Unreviewed
CVE-2025-1608
was published
Feb 24, 2025
A vulnerability has been found in BDCOM Behavior Management and Auditing System up to 20250210...
Moderate
Unreviewed
CVE-2025-1546
was published
Feb 21, 2025
An OS command injection vulnerability exists in Vinci Protocol Analyzer that could allow an...
Critical
Unreviewed
CVE-2025-1265
was published
Feb 20, 2025
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue...
High
Unreviewed
CVE-2025-26856
was published
Feb 20, 2025
An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the public_type...
High
Unreviewed
CVE-2025-25895
was published
Feb 19, 2025
An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the samba_wg...
High
Unreviewed
CVE-2025-25894
was published
Feb 19, 2025
An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the inIP,...
High
Unreviewed
CVE-2025-25893
was published
Feb 19, 2025
ProTip!
Advisories are also available from the
GraphQL API