Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,475
Maven
5,000+
npm
5,000+
NuGet
1,091
pip
5,000+
Pub
13
RubyGems
1,144
Rust
1,510
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

74 advisories

Loading
VIN-DS783E-E6 developed by Vacron has a Hidden Functionality vulnerability, allowing... Critical Unreviewed
CVE-2026-18191 was published Jul 29, 2026
Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability... Critical Unreviewed
CVE-2026-4769 was published Jul 13, 2026
A hidden, persistent backdoor was found in Yarbo firmware v2.3.9 that provides remote,... High Unreviewed
CVE-2026-7413 was published May 7, 2026
Delta Electronics AS320T has denial of service via the undocumented subfunction vulnerability. Critical Unreviewed
CVE-2026-1952 was published Apr 24, 2026
Electron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference High
CVE-2026-34769 was published for electron (npm) Apr 3, 2026
Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to... Moderate Unreviewed
CVE-2026-4621 was published Mar 27, 2026
Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker... High Unreviewed
CVE-2026-33280 was published Mar 27, 2026
Hidden functionality in the /goform/setSysTools endpoint in Nexxt Solutions Nebula 300+ firmware... High Unreviewed
CVE-2026-31847 was published Mar 23, 2026
An unauthenticated remote attacker can exploit a hidden function in the CLI prompt to escape the... Critical Unreviewed
CVE-2026-3587 was published Mar 23, 2026
The WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) exposes an unprotected UART interface... Critical Unreviewed
CVE-2026-30704 was published Mar 18, 2026
A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer... Moderate Unreviewed
CVE-2025-48418 was published Mar 10, 2026
A vulnerability was determined in EFM ipTIME A8004T 14.18.2. Affected is the function... Moderate Unreviewed
CVE-2026-1741 was published Feb 2, 2026
Hidden functionality issue exists in multiple MFPs provided by Brother Industries, Ltd., which... Moderate Unreviewed
CVE-2025-55704 was published Jan 29, 2026
Improper Validation of Integrity Check Value vulnerability in Sharp Display Solutions projectors... Critical Unreviewed
CVE-2025-11544 was published Dec 22, 2025
Mercku M6a devices through 2.1.0 allow TELNET sessions via a router.telnet.enabled.update request... Low Unreviewed
CVE-2025-62773 was published Oct 22, 2025
Multiple versions of RG-EST300 provided by Ruijie Networks provide SSH server functionality. It... High Unreviewed
CVE-2025-58778 was published Oct 16, 2025
SOOP-CLM developed by PiExtract has a Hidden Functionality vulnerability, allowing privileged... High Unreviewed
CVE-2025-11673 was published Oct 13, 2025
Hidden functionality issue exists in WN-7D36QR and WN-7D36QR/UE. If this vulnerability is... Moderate Unreviewed
CVE-2025-55075 was published Sep 17, 2025
A weakness has been identified in FNKvision Y215 CCTV Camera 10.194.120.40. This vulnerability... Moderate Unreviewed
CVE-2025-9382 was published Aug 24, 2025
A malicious backdoor was embedded in the official ProFTPD 1.3.3c source tarball distributed... Critical Unreviewed
CVE-2010-20103 was published Aug 20, 2025
A vulnerability was found in TOTOLINK N350R 1.2.3-B20130826. This issue affects the function... Moderate Unreviewed
CVE-2025-8938 was published Aug 14, 2025
Hidden functionality issue exists in WRC-BE36QS-B and WRC-W701-B. If exploited, the product's... Moderate Unreviewed
CVE-2025-46267 was published Jul 22, 2025
A vulnerability, which was classified as critical, has been found in Conjure Position Department... Moderate Unreviewed
CVE-2025-6839 was published Jun 29, 2025
The SIMCom SIM7600G modem supports an undocumented AT command, which allows an attacker to... Moderate Unreviewed
CVE-2025-26412 was published Jun 11, 2025
An OpenSSH daemon listens on TCP port 22. There is a hard-coded entry in the "/etc/shadow" file... High Unreviewed
CVE-2025-48416 was published May 21, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database