Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,635
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+

15,518 advisories

Loading
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Critical Unreviewed
CVE-2023-3386 was published Aug 8, 2023
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Critical Unreviewed
CVE-2023-3522 was published Aug 8, 2023
A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL... Critical Unreviewed
CVE-2023-34545 was published Aug 9, 2023
A SQL injection vulnerability exists in the “admin brand portal” feature of the ScienceLogic SL1... High Unreviewed
CVE-2022-48585 was published Aug 9, 2023
A SQL injection vulnerability exists in the “schedule editor” feature of the ScienceLogic SL1... High Unreviewed
CVE-2022-48587 was published Aug 9, 2023
A SQL injection vulnerability exists in the “json walker” feature of the ScienceLogic SL1 that... High Unreviewed
CVE-2022-48586 was published Aug 9, 2023
A SQL injection vulnerability exists in the “schedule editor decoupled” feature of the... High Unreviewed
CVE-2022-48588 was published Aug 9, 2023
A SQL injection vulnerability exists in the “reporting job editor” feature of the ScienceLogic... High Unreviewed
CVE-2022-48589 was published Aug 9, 2023
A SQL injection vulnerability exists in the “admin dynamic app mib errors” feature of the... High Unreviewed
CVE-2022-48590 was published Aug 9, 2023
A SQL injection vulnerability exists in the vendor_state parameter of the “vendor print report”... High Unreviewed
CVE-2022-48591 was published Aug 9, 2023
A SQL injection vulnerability exists in the “topology data service” feature of the ScienceLogic... High Unreviewed
CVE-2022-48593 was published Aug 9, 2023
A SQL injection vulnerability exists in the vendor_country parameter of the “vendor print report”... High Unreviewed
CVE-2022-48592 was published Aug 9, 2023
A SQL injection vulnerability exists in the “ticket watchers email” feature of the ScienceLogic... High Unreviewed
CVE-2022-48594 was published Aug 9, 2023
A SQL injection vulnerability exists in the “ticket template watchers” feature of the... High Unreviewed
CVE-2022-48595 was published Aug 9, 2023
A SQL injection vulnerability exists in the “ticket queue watchers” feature of the ScienceLogic... High Unreviewed
CVE-2022-48596 was published Aug 9, 2023
A SQL injection vulnerability exists in the “ticket event report” feature of the ScienceLogic SL1... High Unreviewed
CVE-2022-48597 was published Aug 9, 2023
A SQL injection vulnerability exists in the “reporter events type” feature of the ScienceLogic... High Unreviewed
CVE-2022-48599 was published Aug 9, 2023
A SQL injection vulnerability exists in the “notes view” feature of the ScienceLogic SL1 that... High Unreviewed
CVE-2022-48600 was published Aug 9, 2023
A SQL injection vulnerability exists in the “network print report” feature of the ScienceLogic... High Unreviewed
CVE-2022-48601 was published Aug 9, 2023
A SQL injection vulnerability exists in the “message viewer print” feature of the ScienceLogic... High Unreviewed
CVE-2022-48602 was published Aug 9, 2023
A SQL injection vulnerability exists in the “logging export” feature of the ScienceLogic SL1 that... High Unreviewed
CVE-2022-48604 was published Aug 9, 2023
A SQL injection vulnerability exists in the “message viewer iframe” feature of the ScienceLogic... High Unreviewed
CVE-2022-48603 was published Aug 9, 2023
There is a SQL injection (SQLi) vulnerability in the "column" parameter of index.php in... Critical Unreviewed
CVE-2023-36311 was published Aug 10, 2023
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the where parameter at... Critical Unreviewed
CVE-2023-39805 was published Aug 10, 2023
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the bakupdata function. Critical Unreviewed
CVE-2023-39806 was published Aug 10, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database