GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,319
Erlang
31
GitHub Actions
21
Go
2,077
Maven
5,000+
npm
3,746
NuGet
674
pip
3,435
Pub
12
RubyGems
892
Rust
881
Swift
37
Unreviewed advisories
All unreviewed
5,000+
975 advisories
Filter by severity
ruby-saml vulnerable to XPath injection
Critical
CVE-2015-20108
was published
for
ruby-saml
(RubyGems)
May 27, 2023
An os command injection vulnerability exists in the adm.cgi set_ledonoff() functionality of...
Critical
Unreviewed
CVE-2024-37186
was published
Jan 14, 2025
An os command injection vulnerability exists in the nas.cgi remove_dir() functionality of Wavlink...
Critical
Unreviewed
CVE-2024-39360
was published
Jan 14, 2025
An os command injection vulnerability exists in the firewall.cgi iptablesWebsFilterRun()...
Critical
Unreviewed
CVE-2024-39367
was published
Jan 14, 2025
An os command injection vulnerability exists in the touchlist_sync.cgi touchlistsync()...
Critical
Unreviewed
CVE-2024-34166
was published
Jan 14, 2025
Tenda ac9 v1.0 firmware v15.03.05.19 is vulnerable to command injection in /goform/SetSambaCfg,...
Critical
Unreviewed
CVE-2025-22949
was published
Jan 10, 2025
Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of...
Critical
Unreviewed
CVE-2024-39782
was published
Jan 14, 2025
Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of...
Critical
Unreviewed
CVE-2024-39781
was published
Jan 14, 2025
Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing()...
Critical
Unreviewed
CVE-2024-39764
was published
Jan 14, 2025
Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of...
Critical
Unreviewed
CVE-2024-39783
was published
Jan 14, 2025
Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing()...
Critical
Unreviewed
CVE-2024-39762
was published
Jan 14, 2025
Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality...
Critical
Unreviewed
CVE-2024-39760
was published
Jan 14, 2025
Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality...
Critical
Unreviewed
CVE-2024-39759
was published
Jan 14, 2025
Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing()...
Critical
Unreviewed
CVE-2024-39765
was published
Jan 14, 2025
Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing()...
Critical
Unreviewed
CVE-2024-39763
was published
Jan 14, 2025
Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality...
Critical
Unreviewed
CVE-2024-39761
was published
Jan 14, 2025
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the...
Critical
Unreviewed
CVE-2024-57225
was published
Jan 10, 2025
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the...
Critical
Unreviewed
CVE-2024-57223
was published
Jan 10, 2025
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the...
Critical
Unreviewed
CVE-2024-57224
was published
Jan 10, 2025
LB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL...
Critical
Unreviewed
CVE-2023-26801
was published
Mar 26, 2023
A vulnerability exits in driver SmSerl64.sys in Motorola SM56 Modem WDM Driver v6.12.23.0, which...
Critical
Unreviewed
CVE-2024-55414
was published
Jan 7, 2025
D-Link GO-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 is vulnerable to Command...
Critical
Unreviewed
CVE-2022-37056
was published
Aug 29, 2022
D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to...
Critical
Unreviewed
CVE-2022-37057
was published
Aug 29, 2022
D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnap_main...
Critical
Unreviewed
CVE-2024-33112
was published
May 6, 2024
SeaCMS <=13.0 is vulnerable to command execution in phome.php via the function...
Critical
Unreviewed
CVE-2024-55461
was published
Dec 19, 2024
ProTip!
Advisories are also available from the
GraphQL API