Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,635
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+

15,516 advisories

Loading
SQL injection vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to execute... High Unreviewed
CVE-2012-5685 was published May 17, 2022
SQL injection vulnerability in OSK Advance-Flow 4.41 and earlier and Advance-Flow Forms 4.41 and... High Unreviewed
CVE-2014-3906 was published May 17, 2022
SQL injection vulnerability in the ossim-framework service in AlienVault OSSIM before 4.6.0... High Unreviewed
CVE-2014-5159 was published May 17, 2022
Multiple SQL injection vulnerabilities in Bank Soft Systems (BSS) RBS BS-Client 3.17.9 allow... High Unreviewed
CVE-2014-4197 was published May 17, 2022
plugins/useradmin/fingeruser.php in XRMS CRM, possibly 1.99.2, allows remote authenticated users... Moderate Unreviewed
CVE-2014-5521 was published May 17, 2022
SQL injection vulnerability in lib/admin.php in tenfourzero Shutter 0.1.4 allows remote attackers... High Unreviewed
CVE-2014-3904 was published May 17, 2022
SQL injection vulnerability in the Address visualization with Google Maps (st_address_map)... High Unreviewed
CVE-2014-6239 was published May 17, 2022
SQL injection vulnerability in Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta... High Unreviewed
CVE-2014-2376 was published May 17, 2022
SQL injection vulnerability in the editgallery function in admin/gallery_func.php in the Huge-IT... Moderate Unreviewed
CVE-2014-7153 was published May 17, 2022
Multiple SQL injection vulnerabilities in Postfix Admin (aka postfixadmin) before 2.3.5 allow... Moderate Unreviewed
CVE-2012-0811 was published May 17, 2022
SQL injection vulnerability in the Statistics (ke_stats) extension before 1.1.2 for TYPO3 allows... High Unreviewed
CVE-2014-6293 was published May 17, 2022
WEC Map (wec_map) extension for TYPO3 allows SQL Injection High
CVE-2014-6295 was published for jbartels/wec-map (Composer) May 17, 2022
SQL injection vulnerability in the Guest Login Portal in the Sophos Cyberoam appliances with... High Unreviewed
CVE-2014-5503 was published May 17, 2022
Multiple SQL injection vulnerabilities in TestLink 1.9.11 allow remote authenticated users to... High Unreviewed
CVE-2014-5308 was published May 17, 2022
SQL injection vulnerability in Joomla! CMS 3.1.x and 3.2.x before 3.2.3 allows remote attackers... High Unreviewed
CVE-2014-7981 was published May 17, 2022
The SQL*Net inspection engine in Cisco ASA Software 7.2 before 7.2(5.13), 8.2 before 8.2(5.50), 8... High Unreviewed
CVE-2014-3382 was published May 17, 2022
SQL injection vulnerability in joblogs.php in Bacula-Web 5.2.10 allows remote attackers to... High Unreviewed
CVE-2014-8295 was published May 17, 2022
Multiple SQL injection vulnerabilities in Voice Of Web AllMyGuests 0.4.1 allow remote attackers... High Unreviewed
CVE-2014-8294 was published May 17, 2022
Multiple SQL injection vulnerabilities in the search function in pi1/class.tx_dmmjobcontrol_pi1... High Unreviewed
CVE-2014-7201 was published May 17, 2022
SQL injection vulnerability in TomatoCart 1.1.8.6.1 allows remote authenticated users to execute... Moderate Unreviewed
CVE-2014-3978 was published May 17, 2022
SQL injection vulnerability in ss_handler.php in the WordPress Spreadsheet (wpSS) plugin 0.62 for... High Unreviewed
CVE-2014-8363 was published May 17, 2022
SQL injection vulnerability in XRMS CRM, possibly 1.99.2, allows remote attackers to execute... High Unreviewed
CVE-2014-5520 was published May 17, 2022
Multiple SQL injection vulnerabilities in ClassApps SelectSurvey.NET before 4.125.002 allow (1)... Moderate Unreviewed
CVE-2014-6030 was published May 17, 2022
SQL injection vulnerability in Data Basis (BW-WHM-DBA) in SAP NetWeaver Business Warehouse allows... High Unreviewed
CVE-2014-8663 was published May 17, 2022
SQL injection vulnerability in htdocs/modules/system/admin.php in XOOPS before 2.5.7 Final allows... Moderate Unreviewed
CVE-2014-8999 was published May 17, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database