GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
                  
                    
                      
                      All reviewed
                    
                    
                      5,000+
                    
                  
                  
                    
                      
                      Composer
                    
                    
                      4,963
                    
                  
                  
                    
                      
                      Erlang
                    
                    
                      39
                    
                  
                  
                    
                      
                      GitHub Actions
                    
                    
                      38
                    
                  
                  
                    
                      
                      Go
                    
                    
                      2,614
                    
                  
                  
                    
                      
                      Maven
                    
                    
                      5,000+
                    
                  
                  
                    
                      
                      npm
                    
                    
                      4,254
                    
                  
                  
                    
                      
                      NuGet
                    
                    
                      760
                    
                  
                  
                    
                      
                      pip
                    
                    
                      4,031
                    
                  
                  
                    
                      
                      Pub
                    
                    
                      12
                    
                  
                  
                    
                      
                      RubyGems
                    
                    
                      953
                    
                  
                  
                    
                      
                      Rust
                    
                    
                      1,049
                    
                  
                  
                    
                      
                      Swift
                    
                    
                      45
                    
                  
                  Unreviewed advisories
                  
                    
                      
                      All unreviewed
                    
                    
                      5,000+
                    
                  
            113,422 advisories
        Filter by severity
        
      
      
    
                    
                      Nagios Log Server versions prior to 2024R2.0.2 contain a vulnerability in the cluster manager...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-34271
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios XI versions prior to 2024R1.2.2 contain a host header injection vulnerability. The...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-14006
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios XI versions prior to 2024R1.1.2 contain a missing authorization control when the 'Allow...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-13994
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios Log Server versions prior to 2024R1 contain an incorrect authorization vulnerability....
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2023-7322
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios XI versions prior to 2024R1.1.3, under certain circumstances, disclose the server's Active...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-13999
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios XI versions prior to 2024R1.1.2 may (confirmed in 2024R1.1 and 2024R1.1.1) disclose...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-13995
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios XI versions prior to 5.8.7 used a temporary directory for Highcharts exports with overly...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2021-47700
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.3 / Nagios XI 5.8.5 contains...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2021-47693
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios XI versions prior to 5.7.5 contain a SQL injection vulnerability in the SNMP Trap...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2020-36869
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios XI versions prior to 5.7.3 contain a command injection vulnerability in the report PDF...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2020-36867
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios XI versions prior to 5.7.3 contain a privilege escalation vulnerability in the getprofile...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2020-36868
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios XI versions prior to 5.4.13 contain a remote code execution vulnerability in the Component...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2018-25122
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios XI versions prior to 5.7.2 allow PHP files to be uploaded to the Audio Import directory...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2020-36863
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.0.7 / Nagios XI 5.7.4 contains...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2020-36859
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios XI versions prior to 5.5.7 contain a privilege escalation vulnerability in the MRTG...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2018-25123
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios XI versions prior to 2012R1.6 contain a shell command injection vulnerability in the Auto...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2013-10073
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios XI versions prior to 5.6.14 contain a post-authentication SQL injection vulnerability in...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2020-36857
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios XI versions prior to 5.2.4 contain a SQL injection vulnerability in the notification...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2016-15050
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios XI versions prior to 2012R1.3 contain a SQL injection vulnerability in the legacy Core...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2012-10063
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios XI versions prior to 2011R1.9 contain privilege escalation vulnerabilities in the scripts...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2011-10035
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios XI versions prior to 2012R1.6 contain an authorization flaw in the Auto-Discovery...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2013-10072
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      IBM Sterling Connect Direct for Unix 6.2.0.7 through 6.2.0.9 iFix004, 6.4.0.0 through 6.4.0.2...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-36137
                      
                      was published
                      Oct 30, 2025 
                    
                  
                    
                      Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 was discovered to store...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-63423
                      
                      was published
                      Oct 30, 2025 
                    
                  
                    
                      IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 21 could allow a remote attacker to...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-3356
                      
                      was published
                      Oct 30, 2025 
                    
                  
                    
                      IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 21 could allow a remote attacker to...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-3355
                      
                      was published
                      Oct 30, 2025 
                    
                  
        
        ProTip!
        Advisories are also available from the 
        GraphQL API