Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,645
Maven
5,000+
npm
4,271
NuGet
760
pip
4,065
Pub
12
RubyGems
957
Rust
1,057
Swift
45
Unreviewed advisories
All unreviewed
5,000+

3,002 advisories

Loading
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.... High Unreviewed
CVE-2022-37899 was published Dec 12, 2022
There is a command injection vulnerability that could lead to unauthenticated remote code... Critical Unreviewed
CVE-2022-37897 was published Dec 12, 2022
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.... High Unreviewed
CVE-2022-37898 was published Dec 12, 2022
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.... High Unreviewed
CVE-2022-37901 was published Dec 12, 2022
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in... Moderate Unreviewed
CVE-2025-44848 was published May 1, 2025
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in... Moderate Unreviewed
CVE-2025-44845 was published May 1, 2025
TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in... Moderate Unreviewed
CVE-2025-44860 was published May 2, 2025
TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in... Moderate Unreviewed
CVE-2025-44863 was published May 2, 2025
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in... Moderate Unreviewed
CVE-2025-44841 was published May 1, 2025
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in... Moderate Unreviewed
CVE-2025-44842 was published May 1, 2025
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in... Moderate Unreviewed
CVE-2025-44840 was published May 1, 2025
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in... Moderate Unreviewed
CVE-2025-44839 was published May 1, 2025
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in... Moderate Unreviewed
CVE-2025-44844 was published May 1, 2025
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in... Moderate Unreviewed
CVE-2025-44843 was published May 1, 2025
TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection... Moderate Unreviewed
CVE-2025-44838 was published May 1, 2025
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in... Moderate Unreviewed
CVE-2025-44847 was published May 1, 2025
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.... High Unreviewed
CVE-2022-37912 was published Dec 12, 2022
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.... High Unreviewed
CVE-2022-37902 was published Dec 12, 2022
TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in... Moderate Unreviewed
CVE-2025-44862 was published May 2, 2025
Lack of input validation/sanitization in the 'setLanCfg' API endpoint in httpd in the Tenda RX2... High Unreviewed
CVE-2025-46625 was published May 2, 2025
Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the... Moderate Unreviewed
CVE-2025-44866 was published May 2, 2025
Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the... Moderate Unreviewed
CVE-2025-44867 was published May 2, 2025
Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the... Moderate Unreviewed
CVE-2025-44864 was published May 2, 2025
TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in... Moderate Unreviewed
CVE-2025-44861 was published May 2, 2025
Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the... Moderate Unreviewed
CVE-2025-44865 was published May 2, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database