GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,869
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,122
NuGet
735
pip
3,942
Pub
12
RubyGems
945
Rust
1,019
Swift
39
Unreviewed advisories
All unreviewed
5,000+
26,859 advisories
Filter by severity
In ESPEC North America Web Controller 3 before 3.3.4, /api/v4/auth/ with any invalid...
Critical
Unreviewed
CVE-2025-27845
was published
Aug 14, 2025
An issue was discovered on KuWFi GC111 devices (Hardware Version: CPE-LM321_V3.2, Software...
Critical
Unreviewed
CVE-2025-43984
was published
Aug 14, 2025
Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of...
Critical
Unreviewed
CVE-2025-8875
was published
Aug 14, 2025
Improper Input Validation vulnerability in N-able N-central allows OS Command Injection.This...
Critical
Unreviewed
CVE-2025-8876
was published
Aug 14, 2025
An authenticated RCE vulnerability in Phoca Commander component 1.0.0-4.0.0 and 5.0.0-5.0.1 for...
Critical
Unreviewed
CVE-2025-54473
was published
Aug 15, 2025
The Icons Factory plugin for WordPress is vulnerable to Arbitrary File Deletion due to...
Critical
Unreviewed
CVE-2025-7778
was published
Aug 15, 2025
The Bit Form builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing...
Critical
Unreviewed
CVE-2025-6679
was published
Aug 15, 2025
myBB version 1.6.4 was distributed with an unauthorized backdoor embedded in the source code. The...
Critical
Unreviewed
CVE-2011-10018
was published
Aug 13, 2025
Flowise JS injection remote code execution
Critical
CVE-2025-55346
was published
for
flowise
(npm)
Aug 14, 2025
An issue in Studio 3T v.2025.1.0 and before allows a remote attacker to execute arbitrary code...
Critical
Unreviewed
CVE-2025-52385
was published
Aug 13, 2025
An issue was discovered in /Code/Websites/DanpheEMR/Controllers/Settings...
Critical
Unreviewed
CVE-2025-50594
was published
Aug 13, 2025
A security issue exists due to the web-based debugger agent enabled on Rockwell Automation...
Critical
Unreviewed
CVE-2025-7353
was published
Aug 14, 2025
The disable-right-click-powered-by-pixterme through v1.2 and pixter-image-digital-license thtough...
Critical
Unreviewed
CVE-2025-8047
was published
Aug 14, 2025
Shenzhen Tuoshi NR500-EA RG500UEAABxCOMSLICv3.4.2731.16.43 devices enable the SSH service by...
Critical
Unreviewed
CVE-2025-43982
was published
Aug 13, 2025
An issue was discovered on KuWFi GC111 GC111-GL-LM321_V3.0_20191211 devices. The TELNET service...
Critical
Unreviewed
CVE-2025-43986
was published
Aug 13, 2025
In TOTOLINK A7000R firmware 9.1.0u.6115_B20201022, an attacker can bypass login by sending a...
Critical
Unreviewed
CVE-2025-51452
was published
Aug 13, 2025
In TOTOLINK EX1200T firmware 4.1.2cu.5215, an attacker can bypass login by sending a specific...
Critical
Unreviewed
CVE-2025-51451
was published
Aug 13, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
Critical
Unreviewed
CVE-2025-54707
was published
Aug 14, 2025
Deserialization of Untrusted Data vulnerability in scriptsbundle Exertio allows Object Injection....
Critical
Unreviewed
CVE-2025-54686
was published
Aug 14, 2025
Unrestricted Upload of File with Dangerous Type vulnerability in epiphyt Form Block allows Upload...
Critical
Unreviewed
CVE-2025-54693
was published
Aug 14, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
Critical
Unreviewed
CVE-2025-49059
was published
Aug 14, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
Critical
Unreviewed
CVE-2025-54678
was published
Aug 14, 2025
Improper Control of Generation of Code ('Code Injection') vulnerability in WPFactory Product XML...
Critical
Unreviewed
CVE-2025-49887
was published
Aug 14, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
Critical
Unreviewed
CVE-2025-52720
was published
Aug 14, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
Critical
Unreviewed
CVE-2025-54669
was published
Aug 14, 2025
ProTip!
Advisories are also available from the
GraphQL API