Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,871
Erlang
37
GitHub Actions
36
Go
2,517
Maven
5,000+
npm
4,150
NuGet
736
pip
3,952
Pub
12
RubyGems
946
Rust
1,026
Swift
39
Unreviewed advisories
All unreviewed
5,000+

15,095 advisories

Loading
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Critical Unreviewed
CVE-2023-38044 was published Aug 7, 2023
B1i module of SAP Business One - version 10.0, application allows an authenticated user with deep... High Unreviewed
CVE-2023-33993 was published Aug 8, 2023
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Critical Unreviewed
CVE-2023-3898 was published Aug 8, 2023
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected... High Unreviewed
CVE-2023-27411 was published Aug 8, 2023
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected... Critical Unreviewed
CVE-2023-37372 was published Aug 8, 2023
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Critical Unreviewed
CVE-2023-3717 was published Aug 8, 2023
Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the id... Critical Unreviewed
CVE-2023-37682 was published Aug 8, 2023
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Critical Unreviewed
CVE-2023-3716 was published Aug 8, 2023
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Critical Unreviewed
CVE-2023-3651 was published Aug 8, 2023
SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive... High Unreviewed
CVE-2023-38762 was published Aug 8, 2023
SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive... Moderate Unreviewed
CVE-2023-38763 was published Aug 8, 2023
SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive... High Unreviewed
CVE-2023-38764 was published Aug 8, 2023
SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive... High Unreviewed
CVE-2023-38760 was published Aug 8, 2023
SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive... High Unreviewed
CVE-2023-38767 was published Aug 8, 2023
SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive... High Unreviewed
CVE-2023-38765 was published Aug 8, 2023
SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive... High Unreviewed
CVE-2023-38768 was published Aug 8, 2023
SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive... High Unreviewed
CVE-2023-38769 was published Aug 8, 2023
SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive... High Unreviewed
CVE-2023-38771 was published Aug 8, 2023
SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive... High Unreviewed
CVE-2023-38770 was published Aug 8, 2023
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Critical Unreviewed
CVE-2023-3386 was published Aug 8, 2023
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Critical Unreviewed
CVE-2023-3522 was published Aug 8, 2023
A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL... Critical Unreviewed
CVE-2023-34545 was published Aug 9, 2023
A SQL injection vulnerability exists in the “admin brand portal” feature of the ScienceLogic SL1... High Unreviewed
CVE-2022-48585 was published Aug 9, 2023
A SQL injection vulnerability exists in the “schedule editor” feature of the ScienceLogic SL1... High Unreviewed
CVE-2022-48587 was published Aug 9, 2023
A SQL injection vulnerability exists in the “json walker” feature of the ScienceLogic SL1 that... High Unreviewed
CVE-2022-48586 was published Aug 9, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database