Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,638
Maven
5,000+
npm
4,264
NuGet
760
pip
4,060
Pub
12
RubyGems
956
Rust
1,056
Swift
45
Unreviewed advisories
All unreviewed
5,000+

15,536 advisories

Loading
SQL injection vulnerability in clientreport.php in the management console in Symantec Web Gateway... Moderate Unreviewed
CVE-2014-1651 was published May 14, 2022
Metasonic Doc WebClient 7.0.14.0 / 7.0.12.0 / 7.0.3.0 is vulnerable to a SQL injection attack in... Critical Unreviewed
CVE-2022-1731 was published May 17, 2022
ERP-Pro v3.7.5 was discovered to contain a SQL injection vulnerability via the component /base... Critical Unreviewed
CVE-2022-28930 was published May 16, 2022
Scubez Posty Readymade Classifieds has SQL Injection via the admin/user_activate_submit.php ID... High Unreviewed
CVE-2017-17567 was published May 14, 2022
IBM Financial Transaction Manager (FTM) for Multi-Platform (MP) 3.0.0.0 through 3.0.0.7 is... High Unreviewed
CVE-2017-1606 was published May 14, 2022
SQL injection vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to... High Unreviewed
CVE-2011-4521 was published May 14, 2022
Bus Booking Script has SQL Injection via the admin/view_seatseller.php sp_id parameter or the... High Unreviewed
CVE-2017-17829 was published May 14, 2022
SQL injection vulnerability in Password Recovery in GPWeb 8.4.61 allows remote attackers to... Critical Unreviewed
CVE-2017-15875 was published May 14, 2022
Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter. Critical Unreviewed
CVE-2017-17779 was published May 14, 2022
IBM Security Guardium 10.0 is vulnerable to SQL injection. A remote attacker could send specially... High Unreviewed
CVE-2017-1757 was published May 14, 2022
The Configuration component of Piwigo 2.9.2 is vulnerable to SQL Injection via the admin... Moderate Unreviewed
CVE-2017-17823 was published May 14, 2022
The List Users API of Piwigo 2.9.2 is vulnerable to SQL Injection via the /admin... Moderate Unreviewed
CVE-2017-17822 was published May 14, 2022
A SQL Injection issue was discovered in Ecava IntegraXor v 6.1.1030.1 and prior. The SQL... Moderate Unreviewed
CVE-2017-16733 was published May 14, 2022
A SQL Injection issue was discovered in Ecava IntegraXor v 6.1.1030.1 and prior. The SQL... Moderate Unreviewed
CVE-2017-16735 was published May 14, 2022
The Batch Manager component of Piwigo 2.9.2 is vulnerable to SQL Injection via the admin... Moderate Unreviewed
CVE-2017-17824 was published May 14, 2022
Best Student Result Management System v1.0 is vulnerable to SQL Injection via /upresult/upresult... Critical Unreviewed
CVE-2022-42021 was published Oct 20, 2022
SQL injection vulnerability in my.activation.php3 in F5 FirePass 6.0.0 through 6.1.0 and 7.0.0... High Unreviewed
CVE-2012-1777 was published May 14, 2022
A SQL injection vulnerability exists in the BIG-IP AFM management UI on versions 12.0.0, 12.1.0,... Moderate Unreviewed
CVE-2017-0304 was published May 14, 2022
Hastymail2 2.1.1 before RC2 allows remote attackers to execute arbitrary commands via the (1) rs... High Unreviewed
CVE-2011-4542 was published May 14, 2022
PHP Scripts Mall Muslim Matrimonial Script has SQL injection via the view-profile.php mem_id... High Unreviewed
CVE-2017-17983 was published May 14, 2022
SQL injection vulnerability in the KPI component in IBM Maximo Asset Management and Asset... Moderate Unreviewed
CVE-2011-4816 was published May 14, 2022
Readymade Video Sharing Script has SQL Injection via the viewsubs.php chnlid parameter or the... Critical Unreviewed
CVE-2017-17892 was published May 14, 2022
PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter. Critical Unreviewed
CVE-2017-17906 was published May 14, 2022
SQL injection vulnerability in admin/plib/api-rpc/Agent.php in Parallels Plesk Panel 7.x and 8.x... High Unreviewed
CVE-2012-1557 was published May 14, 2022
SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2,... Critical Unreviewed
CVE-2012-2576 was published May 14, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database