GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,826
Erlang
36
GitHub Actions
32
Go
2,426
Maven
5,000+
npm
4,058
NuGet
723
pip
3,848
Pub
12
RubyGems
934
Rust
1,006
Swift
38
Unreviewed advisories
All unreviewed
5,000+
259 advisories
Filter by severity
Portainer before 1.18.0 supports unauthenticated requests to the websocket endpoint with an...
Critical
Unreviewed
CVE-2018-12678
was published
May 14, 2022
uniquesig0/InternalSite/InitParams.aspx in Microsoft Forefront Unified Access Gateway 2010 allows...
Critical
Unreviewed
CVE-2018-12571
was published
May 14, 2022
An SSRF vulnerability was discovered in idreamsoft iCMS V7.0.9 that allows attackers to read...
Critical
Unreviewed
CVE-2018-14514
was published
May 14, 2022
AdminTools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allows an attacker to...
Critical
Unreviewed
CVE-2018-2445
was published
May 14, 2022
An issue was discovered in SeaCMS 6.61. adm1n/admin_reslib.php has SSRF via the url parameter.
Critical
Unreviewed
CVE-2018-16444
was published
May 14, 2022
Typecho V1.1 allows remote attackers to send shell commands via base64-encoded serialized data,...
Critical
Unreviewed
CVE-2018-18753
was published
May 14, 2022
** DISPUTED ** mPDF through 7.1.6, if deployed as a web application that accepts arbitrary HTML,...
Critical
Unreviewed
CVE-2018-19047
was published
May 14, 2022
The Kubernetes integration in GitLab Enterprise Edition 11.x before 11.2.8, 11.3.x before 11.3.9,...
Critical
Unreviewed
CVE-2018-18843
was published
May 14, 2022
com/wavemaker/studio/StudioService.java in WaveMaker Studio 6.6 mishandles the studioService...
Critical
Unreviewed
CVE-2019-8982
was published
May 14, 2022
Rhymix CMS 1.9.8.1 allows SSRF via an index.php?module=admin&act=dispModuleAdminFileBox SVG upload.
Critical
Unreviewed
CVE-2018-19601
was published
May 14, 2022
An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before...
Critical
Unreviewed
CVE-2019-9174
was published
May 14, 2022
upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter.
Critical
Unreviewed
CVE-2018-14728
was published
May 14, 2022
Zoho ManageEngine ADSelfService Plus 5.x before build 5703 has SSRF.
Critical
Unreviewed
CVE-2019-3905
was published
May 14, 2022
Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an...
Critical
Unreviewed
CVE-2018-0398
was published
May 13, 2022
Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an...
Critical
Unreviewed
CVE-2018-0399
was published
May 13, 2022
Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center...
Critical
Unreviewed
CVE-2018-0403
was published
May 13, 2022
IBM API Connect v2018.1.0 through v2018.3.4 could allow an attacker to send a specially crafted...
Critical
Unreviewed
CVE-2018-1789
was published
May 13, 2022
Moodle Blind SSRF Risk in /badges/mybackpack.php
Critical
CVE-2019-3809
was published
for
moodle/moodle
(Composer)
May 13, 2022
IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal can be exploited by app developers to...
Critical
Unreviewed
CVE-2019-4203
was published
May 13, 2022
Server Side Request Forgery vulnerability in Vebto Pixie Image Editor 1.4 and 1.7 allows remote...
Critical
Unreviewed
CVE-2017-12905
was published
May 13, 2022
A vulnerability in Trend Micro Control Manager (versions 6.0 and 7.0) could allow an attacker to...
Critical
Unreviewed
CVE-2018-10511
was published
May 13, 2022
The WebDAV endpoint in Atlassian Confluence Server and Data Center before version 6.6.7 (the...
Critical
Unreviewed
CVE-2019-3395
was published
May 13, 2022
The iot-manager microservice 1.0.0 in Northern.tech Mender Enterprise before 3.2.2 allows SSRF...
Critical
Unreviewed
CVE-2022-29556
was published
Apr 29, 2022
Monstaftp v2.10.3 was discovered to allow attackers to execute Server-Side Request Forgery (SSRF).
Critical
Unreviewed
CVE-2022-27469
was published
Apr 27, 2022
ProTip!
Advisories are also available from the
GraphQL API