Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,645
Maven
5,000+
npm
4,271
NuGet
760
pip
4,065
Pub
12
RubyGems
957
Rust
1,057
Swift
45
Unreviewed advisories
All unreviewed
5,000+

3,002 advisories

Loading
The Delta Electronics DVW-W02W2-E2 devices expose a web administration interface to users. This... High Unreviewed
CVE-2024-3871 was published Apr 16, 2024
llama-index-core Command Injection vulnerability Critical
CVE-2024-3271 was published for llama-index-core (pip) Apr 16, 2024
Insecure default configurations in Hikvision Interactive Tablet DS-D5B86RB/B V2.3.0 build220119,... High Unreviewed
CVE-2023-33806 was published Apr 16, 2024
gix-transport indirect code execution via malicious username Moderate
CVE-2024-32884 was published for gitoxide (Rust) Apr 15, 2024
EliahKagan
Credited to EliahKagan
Command injection vulnerability in MZK-MF300N all firmware versions allows a network-adjacent... High Unreviewed
CVE-2024-30220 was published Apr 15, 2024
A command injection vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS... Critical Unreviewed
CVE-2024-3400 was published Apr 12, 2024
An issue discovered in Telesquare TLR-2005Ksh 1.0.0 and 1.1.4 allows attackers to run arbitrary... High Unreviewed
CVE-2024-29269 was published Apr 10, 2024
A command inject vulnerability allows an attacker to perform command injection on Windows... Critical Unreviewed
CVE-2024-3566 was published Apr 10, 2024
Microsoft Defender for IoT Remote Code Execution Vulnerability High Unreviewed
CVE-2024-21322 was published Apr 9, 2024
A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link... High Unreviewed
CVE-2023-49134 was published Apr 9, 2024
A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link... High Unreviewed
CVE-2023-49133 was published Apr 9, 2024
TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE)... High Unreviewed
CVE-2024-31811 was published Apr 8, 2024
A command injection vulnerability exists in /goform/exeCommand in Tenda AC18 v15.03.05.05, which... High Unreviewed
CVE-2024-30891 was published Apr 5, 2024
A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi... Critical Unreviewed
CVE-2024-27981 was published Apr 5, 2024
pgAdmin Remote Code Execution (RCE) vulnerability High
CVE-2024-3116 was published for pgadmin4 (pip) Apr 4, 2024
A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS... High Unreviewed
CVE-2024-3273 was published Apr 4, 2024
Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the... High Unreviewed
CVE-2024-30572 was published Apr 3, 2024
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability... Critical Unreviewed
CVE-2024-27972 was published Apr 3, 2024
VMware SD-WAN Edge contains an unauthenticated command injection vulnerability potentially... High Unreviewed
CVE-2024-22246 was published Apr 2, 2024
There is a command injection vulnerability in some Hikvision NVRs. This could allow an... High Unreviewed
CVE-2024-29949 was published Apr 2, 2024
An issue discovered in Alldata v0.4.6 allows attacker to run arbitrary commands via the processId... Moderate Unreviewed
CVE-2024-29435 was published Apr 1, 2024
A command injection vulnerability in Ivanti Sentry prior to 9.19.0 allows unauthenticated threat... Critical Unreviewed
CVE-2023-41724 was published Mar 31, 2024
aliyundrive-webdav vulnerable to Command Injection High
CVE-2024-29640 was published for aliyundrive-webdav (pip) Mar 29, 2024
Tenda F1202 v1.2.0.20(408) has a command injection vulnerablility in the formWriteFacMac function... High Unreviewed
CVE-2024-30637 was published Mar 29, 2024
Dell vApp Manager, versions prior to 9.2.4.9 contain a Command Injection Vulnerability. An... High Unreviewed
CVE-2024-25955 was published Mar 28, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database