Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,871
Erlang
37
GitHub Actions
36
Go
2,517
Maven
5,000+
npm
4,150
NuGet
736
pip
3,952
Pub
12
RubyGems
946
Rust
1,026
Swift
39
Unreviewed advisories
All unreviewed
5,000+

15,095 advisories

Loading
A SQL injection vulnerability exists in the “schedule editor decoupled” feature of the... High Unreviewed
CVE-2022-48588 was published Aug 9, 2023
A SQL injection vulnerability exists in the “reporting job editor” feature of the ScienceLogic... High Unreviewed
CVE-2022-48589 was published Aug 9, 2023
A SQL injection vulnerability exists in the “admin dynamic app mib errors” feature of the... High Unreviewed
CVE-2022-48590 was published Aug 9, 2023
A SQL injection vulnerability exists in the vendor_state parameter of the “vendor print report”... High Unreviewed
CVE-2022-48591 was published Aug 9, 2023
A SQL injection vulnerability exists in the “topology data service” feature of the ScienceLogic... High Unreviewed
CVE-2022-48593 was published Aug 9, 2023
A SQL injection vulnerability exists in the vendor_country parameter of the “vendor print report”... High Unreviewed
CVE-2022-48592 was published Aug 9, 2023
A SQL injection vulnerability exists in the “ticket watchers email” feature of the ScienceLogic... High Unreviewed
CVE-2022-48594 was published Aug 9, 2023
A SQL injection vulnerability exists in the “ticket template watchers” feature of the... High Unreviewed
CVE-2022-48595 was published Aug 9, 2023
A SQL injection vulnerability exists in the “ticket queue watchers” feature of the ScienceLogic... High Unreviewed
CVE-2022-48596 was published Aug 9, 2023
A SQL injection vulnerability exists in the “ticket event report” feature of the ScienceLogic SL1... High Unreviewed
CVE-2022-48597 was published Aug 9, 2023
A SQL injection vulnerability exists in the “reporter events type” feature of the ScienceLogic... High Unreviewed
CVE-2022-48599 was published Aug 9, 2023
A SQL injection vulnerability exists in the “notes view” feature of the ScienceLogic SL1 that... High Unreviewed
CVE-2022-48600 was published Aug 9, 2023
A SQL injection vulnerability exists in the “network print report” feature of the ScienceLogic... High Unreviewed
CVE-2022-48601 was published Aug 9, 2023
A SQL injection vulnerability exists in the “message viewer print” feature of the ScienceLogic... High Unreviewed
CVE-2022-48602 was published Aug 9, 2023
A SQL injection vulnerability exists in the “logging export” feature of the ScienceLogic SL1 that... High Unreviewed
CVE-2022-48604 was published Aug 9, 2023
A SQL injection vulnerability exists in the “message viewer iframe” feature of the ScienceLogic... High Unreviewed
CVE-2022-48603 was published Aug 9, 2023
There is a SQL injection (SQLi) vulnerability in the "column" parameter of index.php in... Critical Unreviewed
CVE-2023-36311 was published Aug 10, 2023
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the where parameter at... Critical Unreviewed
CVE-2023-39805 was published Aug 10, 2023
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the bakupdata function. Critical Unreviewed
CVE-2023-39806 was published Aug 10, 2023
Download of Code Without Integrity Check vulnerability in Genians Genian NAC V4.0, Genians Genian... Critical Unreviewed
CVE-2023-40254 was published Aug 11, 2023
Blind SQL injection in a service running in Snow Software license manager from version 8.0.0 up... High Unreviewed
CVE-2023-3864 was published Aug 11, 2023
SQL Injection vulnerability in oretnom23 School Faculty Scheduling System version 1.0, allows... Critical Unreviewed
CVE-2020-36034 was published Aug 11, 2023
SQL Injection vulnerability in cskaza cszcms version 1.2.9, allows attackers to gain sensitive... High Unreviewed
CVE-2020-36136 was published Aug 11, 2023
SQL Injection in pear-admin-think version 2.1.2, allows attackers to execute arbitrary code and... High Unreviewed
CVE-2021-29378 was published Aug 11, 2023
novel-plus v3.6.2 was discovered to contain a SQL injection vulnerability. Critical Unreviewed
CVE-2023-37847 was published Aug 14, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database