Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,279
Erlang
31
GitHub Actions
21
Go
2,056
Maven
5,000+
npm
3,740
NuGet
668
pip
3,421
Pub
12
RubyGems
891
Rust
873
Swift
36
Unreviewed advisories
All unreviewed
5,000+

3,329 advisories

Loading
The Four-Faith router models F3x24 and F3x36 are affected by an operating system (OS) command... High Unreviewed
CVE-2024-12856 was published Dec 27, 2024
home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain an OS command injection... High Unreviewed
CVE-2024-45721 was published Dec 23, 2024
home 5G HR02 and Wi-Fi STATION SH-54C contain an OS command injection vulnerability in the... High Unreviewed
CVE-2024-54082 was published Dec 23, 2024
A command injection is possible through the user interface, allowing arbitrary command execution... High Unreviewed
CVE-2020-13712 was published Dec 21, 2024
GoCast OS Command Injection vulnerability Critical
CVE-2024-28892 was published for github.com/mayuresh82/gocast (Go) Dec 20, 2024
Malayke
IBM Security Directory Integrator 7.2.0 through 7.2.0.13 and 10.0.0 through 10.0.3 could allow a... Moderate Unreviewed
CVE-2024-28767 was published Dec 20, 2024
Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability. This... High Unreviewed
CVE-2024-12829 was published Dec 20, 2024
An OS command injection (CWE-78) vulnerability in FortiWAN version 4.5.7 and below Command Line... High Unreviewed
CVE-2021-26115 was published Dec 19, 2024
A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS)... Moderate Unreviewed
CVE-2024-12686 was published Dec 18, 2024
Craft CMS has potential RCE when PHP `register_argc_argv` config setting is enabled Critical
CVE-2024-56145 was published for craftcms/cms (Composer) Dec 18, 2024
akues-an
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')... High Unreviewed
CVE-2024-48889 was published Dec 18, 2024
An OS command injection vulnerability exists in the web interface configuration upload... High Unreviewed
CVE-2024-21786 was published Dec 18, 2024
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue... High Unreviewed
CVE-2024-53688 was published Dec 18, 2024
rizin before v0.6.3 is vulnerable to Improper Neutralization of Special Elements via meta_set... Critical Unreviewed
CVE-2024-31668 was published Dec 18, 2024
An OS command injection vulnerability exists in the NAT parameter of GoCast 1.1.3. A specially... Critical Unreviewed
CVE-2024-29224 was published Dec 18, 2024
CyberPanel before 2.3.8 allows remote authenticated users to execute arbitrary commands via shell... High Unreviewed
CVE-2024-53376 was published Dec 16, 2024
A flaw was found in Radare2, which contains a command injection vulnerability caused by... High Unreviewed
CVE-2024-11858 was published Dec 15, 2024
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')... High Unreviewed
CVE-2024-52058 was published Dec 13, 2024
An authenticated Remote Code Execution (RCE) vulnerability exists in the AirWave CLI. Successful... High Unreviewed
CVE-2024-54008 was published Dec 10, 2024
An unauthenticated attacker with network access to the affected device's web interface can... High Unreviewed
CVE-2024-28138 was published Dec 10, 2024
A vulnerability was found in WeiYe-Jing datax-web 2.1.1. It has been classified as critical. This... Moderate Unreviewed
CVE-2024-12358 was published Dec 9, 2024
IBM AIX 7.2, 7.3 and VIOS 3.1 and 4.1 could allow a local user to execute arbitrary commands on... High Unreviewed
CVE-2024-47115 was published Dec 7, 2024
The affected product is vulnerable to a command injection. An unauthenticated attacker could send... Critical Unreviewed
CVE-2024-52320 was published Dec 6, 2024
A command injection vulnerability has been reported to affect several QNAP operating system... High Unreviewed
CVE-2024-50393 was published Dec 6, 2024
A command injection vulnerability has been reported to affect License Center. If exploited, the... High Unreviewed
CVE-2024-48863 was published Dec 6, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database