Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,780
Erlang
36
GitHub Actions
29
Go
2,344
Maven
5,000+
npm
3,973
NuGet
719
pip
3,770
Pub
12
RubyGems
923
Rust
978
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

1,965 advisories

Loading
Authenticated user can execute arbitrary commands in the context of the root user by providing... High Unreviewed
CVE-2023-49254 was published Jan 12, 2024
H3C GR2200 MiniGR1A0V100R014 was discovered to contain a command injection vulnerability via the... High Unreviewed
CVE-2022-36510 was published Aug 26, 2022
H3C GR3200 MiniGR1B0V100R014 was discovered to contain a command injection vulnerability via the... High Unreviewed
CVE-2022-36509 was published Aug 26, 2022
Some Hikvision Wireless Access Point are vulnerable to authenticated remote command execution due... High Unreviewed
CVE-2025-39240 was published Jun 13, 2025
A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated... High Unreviewed
CVE-2025-4230 was published Jun 13, 2025
The ImageMagick Engine ImageMagick Engine WordPress plugin before 1.7.11 for WordPress is... High Unreviewed
CVE-2024-6486 was published May 15, 2025
An unauthenticated remote attacker in a man-in-the-middle position can inject arbitrary commands... High Unreviewed
CVE-2025-41663 was published Jun 11, 2025
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')... High Unreviewed
CVE-2025-31104 was published Jun 10, 2025
An OS command injection vulnerability within the update functionality may allow an authenticated... High Unreviewed
CVE-2024-13089 was published Jun 10, 2025
CWE-78: I Improper Neutralization of Special Elements used in an OS Command ('OS Command... High Unreviewed
CVE-2025-5743 was published Jun 10, 2025
File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()`... High Unreviewed
CVE-2011-10007 was published Jun 5, 2025
ASUS RT-AX55 v3.0.0.4.386.51598 was discovered to contain an authenticated command injection... High Unreviewed
CVE-2023-39780 was published Sep 11, 2023
An OS Command Injection issue exists in wivia 5 all versions. If this vulnerability is exploited,... High Unreviewed
CVE-2025-41385 was published May 30, 2025
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote... High Unreviewed
CVE-2022-37878 was published Sep 21, 2022
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote... High Unreviewed
CVE-2022-37880 was published Sep 21, 2022
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote... High Unreviewed
CVE-2022-37882 was published Sep 21, 2022
A vulnerability, which was classified as critical, has been found in Tenda AC8, AC10 and AC18 16... High Unreviewed
CVE-2025-0528 was published Jan 17, 2025
On MOBOTIX P3 cameras before MX-V4.7.2.18 and Mx6 cameras before MX-V5.2.0.61, the tcpdump... High Unreviewed
CVE-2023-34873 was published May 23, 2025
Unsanitized input when setting a locale file leads to shell injection in mIPC camera firmware 5.3... High Unreviewed
CVE-2022-40785 was published Sep 27, 2022
eCharge Hardy Barth cPH2 nwcheckexec.php dest Command Injection Remote Code Execution... High Unreviewed
CVE-2025-3882 was published May 22, 2025
eCharge Hardy Barth cPH2 index.php Command Injection Remote Code Execution Vulnerability. This... High Unreviewed
CVE-2025-3883 was published May 22, 2025
eCharge Hardy Barth cPH2 check_req.php ntp Command Injection Remote Code Execution Vulnerability.... High Unreviewed
CVE-2025-3881 was published May 22, 2025
The vCenter Server contains an authenticated command-execution vulnerability. A malicious actor... High Unreviewed
CVE-2025-41225 was published May 20, 2025
Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG... High Unreviewed
CVE-2022-41751 was published Oct 17, 2022
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions with... High Unreviewed
CVE-2025-40582 was published May 13, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database