GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,740
Maven
5,000+
npm
4,338
NuGet
765
pip
4,112
Pub
12
RubyGems
960
Rust
1,068
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
24,161 advisories
Filter by severity
Unauthenticated Telnet enablement via cstecgi.cgi (auth bypass) leading to unauthenticated root...
Critical
Unreviewed
CVE-2025-13184
was published
Dec 10, 2025
Tinycontrol LAN Controller v3 LK3 version 1.58a contains an unauthenticated vulnerability that...
Critical
Unreviewed
CVE-2023-53739
was published
Dec 9, 2025
A malicious actor can access camera configuration information, including account credentials,...
Critical
Unreviewed
CVE-2025-13607
was published
Dec 10, 2025
Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1,...
Critical
Unreviewed
CVE-2025-34394
was published
Dec 10, 2025
Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does...
Critical
Unreviewed
CVE-2025-34392
was published
Dec 10, 2025
Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does...
Critical
Unreviewed
CVE-2025-34393
was published
Dec 10, 2025
Bypass vulnerability in the authentication method in the GTT Tax Information System application,...
Critical
Unreviewed
CVE-2025-13953
was published
Dec 10, 2025
Predictable default Wi-Fi Password in Access Point functionality in EZCast Pro II version 1.17478...
Critical
Unreviewed
CVE-2025-13955
was published
Dec 10, 2025
Hard-coded cryptographic keys in Admin UI of EZCast Pro II version 1.17478.146 allows attackers...
Critical
Unreviewed
CVE-2025-13954
was published
Dec 10, 2025
The Elated Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions...
Critical
Unreviewed
CVE-2025-13613
was published
Dec 10, 2025
ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input...
Critical
Unreviewed
CVE-2025-61809
was published
Dec 10, 2025
ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Unrestricted Upload...
Critical
Unreviewed
CVE-2025-61808
was published
Dec 10, 2025
COMMAX CVD-Axx DVR 5.1.4 contains weak default administrative credentials that allow remote...
Critical
Unreviewed
CVE-2021-47707
was published
Dec 9, 2025
COMMAX Smart Home System CDP-1020n contains an SQL injection vulnerability that allows attackers...
Critical
Unreviewed
CVE-2021-47708
was published
Dec 9, 2025
Selea Targa IP OCR-ANPR Camera contains an unauthenticated command injection vulnerability in...
Critical
Unreviewed
CVE-2021-47728
was published
Dec 9, 2025
MiniDVBLinux 5.4 contains an authentication bypass vulnerability that allows remote attackers to...
Critical
Unreviewed
CVE-2023-53771
was published
Dec 9, 2025
Selea Targa IP OCR-ANPR Camera contains a hard-coded developer password vulnerability that allows...
Critical
Unreviewed
CVE-2021-47731
was published
Dec 9, 2025
An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0,...
Critical
Unreviewed
CVE-2025-59719
was published
Dec 9, 2025
A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0...
Critical
Unreviewed
CVE-2025-59718
was published
Dec 9, 2025
Entrust Instant Financial Issuance (IFI) On Premise software (formerly referred to as CardWizard)...
Critical
Unreviewed
CVE-2025-34414
was published
Dec 9, 2025
Under certain conditions, a high privileged user could exploit a deserialization vulnerability in...
Critical
Unreviewed
CVE-2025-42928
was published
Dec 9, 2025
A vulnerability has been identified in COMOS V10.6 (All versions), COMOS V10.6 (All versions), JT...
Critical
Unreviewed
CVE-2025-40801
was published
Dec 9, 2025
A vulnerability has been identified in COMOS V10.6 (All versions), COMOS V10.6 (All versions), NX...
Critical
Unreviewed
CVE-2025-40800
was published
Dec 9, 2025
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in rethinkdb...
Critical
Unreviewed
CVE-2025-14310
was published
Dec 9, 2025
An integer overflow vulnerability exists in the write method of the Buffer class in Robocode...
Critical
Unreviewed
CVE-2025-14308
was published
Dec 9, 2025
ProTip!
Advisories are also available from the
GraphQL API