Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,636
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+

7,167 advisories

Loading
SQL injection vulnerability in accesscontrol.php in PhpPass 2 allows remote attackers to execute... High Unreviewed
CVE-2003-1533 was published Apr 29, 2022
SQL injection vulnerability in compte.php in PhpMyShop 1.00 allows remote attackers to execute... High Unreviewed
CVE-2003-1532 was published Apr 29, 2022
SQL injection vulnerability in the IMAP daemon in dbmail 1.1 allows remote attackers to execute... High Unreviewed
CVE-2003-1523 was published Apr 29, 2022
SQL injection vulnerability in variables.php in Goldlink 3.0 allows remote attackers to execute... High Unreviewed
CVE-2003-1504 was published Apr 29, 2022
SQL injection vulnerability in Profile.php in ttCMS 2.2 and ttForum allows remote attackers to... High Unreviewed
CVE-2003-1458 was published Apr 29, 2022
SQL injection vulnerability in PHP-Nuke 5.6 and 6.0 allows remote attackers to execute arbitrary... High Unreviewed
CVE-2003-1435 was published Apr 29, 2022
SQL injection vulnerability in page_header.php in phpBB 2.0, 2.0.1 and 2.0.2 allows remote... High Unreviewed
CVE-2003-1244 was published Apr 29, 2022
Unknown vulnerability in the HSQLDB component in JBoss 3.2.1 and 3.0.8 on Java 1.4.x platforms,... High Unreviewed
CVE-2003-0845 was published Apr 29, 2022
SQL injection vulnerability in the web-based administration interface for iisPROTECT 2.2-r4, and... High Unreviewed
CVE-2003-0377 was published Apr 29, 2022
SQL injection vulnerability in register.asp in Snitz Forums 2000 before 3.4.03, and possibly 3.4... High Unreviewed
CVE-2003-0286 was published Apr 29, 2022
Authenticated SQL Injection (SQLi) vulnerability in Mufeng's Hermit ????? plugin <= 3.1.6 on... High Unreviewed
CVE-2022-29410 was published Apr 29, 2022
SQL Injection vulnerability in Victor CMS v1.0, via the user_name parameter to /includes/login.php. High Unreviewed
CVE-2022-28060 was published Apr 29, 2022
A SQL Injection vulnerability exists in UniverSIS UniverSIS-API through 1.2.1 via the $select... High Unreviewed
CVE-2022-29603 was published Apr 26, 2022
The Advanced Page Visit Counter WordPress plugin through 5.0.8 does not escape the artID... High Unreviewed
CVE-2021-24957 was published Apr 26, 2022
SQL Injection (SQLi) vulnerability in Don Crowther's 3xSocializer plugin <= 0.98.22 at WordPress... High Unreviewed
CVE-2022-29419 was published Apr 26, 2022
Contao core SQL Injection Vulnerability High
CVE-2012-4383 was published for contao/core (Composer) Apr 23, 2022
SQL injection vulnerability in the Brainstorming extension 0.1.8 and earlier for TYPO3 allows... High Unreviewed
CVE-2010-1006 was published Apr 23, 2022
SQL injection vulnerability in the Yet another TYPO3 search engine (YATSE) extension before 0.3.2... High Unreviewed
CVE-2010-1004 was published Apr 23, 2022
SQL Injection found in Pimcore High
CVE-2022-1429 was published for pimcore/pimcore (Composer) Apr 23, 2022
SQL injection in blazer High
CVE-2022-29498 was published for blazer (RubyGems) Apr 22, 2022
tdunlap607
Credited to tdunlap607
A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM ... High Unreviewed
CVE-2022-20786 was published Apr 22, 2022
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via... High Unreviewed
CVE-2022-28006 was published Apr 22, 2022
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via... High Unreviewed
CVE-2022-28016 was published Apr 22, 2022
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via... High Unreviewed
CVE-2022-28007 was published Apr 22, 2022
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via... High Unreviewed
CVE-2022-28015 was published Apr 22, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database