Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,339
Erlang
31
GitHub Actions
22
Go
2,099
Maven
5,000+
npm
3,763
NuGet
678
pip
3,448
Pub
12
RubyGems
892
Rust
883
Swift
37
Unreviewed advisories
All unreviewed
5,000+

13,138 advisories

Loading
Avi Load Balancer contains an unauthenticated blind SQL Injection vulnerability which was... High Unreviewed
CVE-2025-22217 was published Jan 28, 2025
The WP eCommerce plugin for WordPress is vulnerable to time-based blind SQL Injection via the ... Critical Unreviewed
CVE-2024-1514 was published Feb 28, 2024
The Eventer plugin for WordPress is vulnerable to SQL Injection via the 'event' parameter in the ... High Unreviewed
CVE-2024-11135 was published Jan 28, 2025
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 is vulnerable to... Moderate Unreviewed
CVE-2023-50316 was published Jan 28, 2025
An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which ... High Unreviewed
CVE-2023-46748 was published Oct 26, 2023
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Critical Unreviewed
CVE-2025-24612 was published Jan 27, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Critical Unreviewed
CVE-2025-24667 was published Jan 27, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Critical Unreviewed
CVE-2025-24664 was published Jan 27, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Critical Unreviewed
CVE-2025-24665 was published Jan 27, 2025
The Quiz Maker Business, Developer, and Agency plugins for WordPress is vulnerable to SQL... High Unreviewed
CVE-2024-10628 was published Jan 26, 2025
IBM Maximo Application Suite 8.10.10, 8.11.7, and 9.0 - Monitor Component is vulnerable to SQL... Moderate Unreviewed
CVE-2024-35148 was published Jan 25, 2025
A SQL Injection vulnerability exists in the login form of Online Food Ordering System v1.0. The... Critical Unreviewed
CVE-2024-57328 was published Jan 24, 2025
An issue was discovered in Centreon centreon-web 24.10.x before 24.10.3, 24.04.x before 24.04.9,... Critical Unreviewed
CVE-2024-55573 was published Jan 24, 2025
An issue was discovered in Centreon Web 24.10.x before 24.10.3, 24.04.x before 24.04.9, 23.10.x... Critical Unreviewed
CVE-2024-53923 was published Jan 24, 2025
The Tutor LMS plugin for WordPress is vulnerable to time-based SQL Injection via the ‘question_id... High Unreviewed
CVE-2024-4318 was published May 16, 2024
A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and... Moderate Unreviewed
CVE-2023-2660 was published May 11, 2023
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2025-24659 was published Jan 24, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2025-24672 was published Jan 24, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2025-24669 was published Jan 24, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2025-24728 was published Jan 24, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2025-24587 was published Jan 24, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2025-24663 was published Jan 24, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2025-24683 was published Jan 24, 2025
The Simple Downloads List plugin for WordPress is vulnerable to SQL Injection via the 'category'... Moderate Unreviewed
CVE-2024-13594 was published Jan 24, 2025
The Form Builder CP plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of... Moderate Unreviewed
CVE-2024-13680 was published Jan 24, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database