GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
                  
                    
                      
                      All reviewed
                    
                    
                      5,000+
                    
                  
                  
                    
                      
                      Composer
                    
                    
                      4,963
                    
                  
                  
                    
                      
                      Erlang
                    
                    
                      39
                    
                  
                  
                    
                      
                      GitHub Actions
                    
                    
                      38
                    
                  
                  
                    
                      
                      Go
                    
                    
                      2,614
                    
                  
                  
                    
                      
                      Maven
                    
                    
                      5,000+
                    
                  
                  
                    
                      
                      npm
                    
                    
                      4,254
                    
                  
                  
                    
                      
                      NuGet
                    
                    
                      760
                    
                  
                  
                    
                      
                      pip
                    
                    
                      4,031
                    
                  
                  
                    
                      
                      Pub
                    
                    
                      12
                    
                  
                  
                    
                      
                      RubyGems
                    
                    
                      953
                    
                  
                  
                    
                      
                      Rust
                    
                    
                      1,049
                    
                  
                  
                    
                      
                      Swift
                    
                    
                      45
                    
                  
                  Unreviewed advisories
                  
                    
                      
                      All unreviewed
                    
                    
                      5,000+
                    
                  
            113,410 advisories
        Filter by severity
        
      
      
    
                    
                      SQL injection in Revive Adserver 6.0.0 causes potential disruption or information access when...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-52664
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation if...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-48982
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios Log Server versions prior to 2024R1.3.2 contain a privilege escalation vulnerability in...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-34298
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios XI versions prior to 2024R2 contain an improperly owned script, process_perfdata.pl, which...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-34287
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Scrapy versions up to 2.13.2 are vulnerable to a denial of service (DoS) attack due to a flaw in...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-6176
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios Network Analyzer versions prior to 2024R2.0.1 contain a vulnerability in the LDAP...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-34280
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios XI versions prior to 2024R1.1.4 contain a local file inclusion (LFI) vulnerability via its...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-14002
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios XI versions prior to 2024R1.2 contain a privilege escalation vulnerability related to...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-14004
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios Log Server versions prior to 2024R1.0.2 contain a local privilege escalation vulnerability...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-58273
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios Log Server versions prior to 2024R2.0.3 contain an incorrect authorization vulnerability...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-34273
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios Fusion versions prior to R2.1 contain a vulnerability due to the application not requiring...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-34269
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios XI versions prior to 2024R1.4.2 revealed API keys to users who were not authorized for API...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-34283
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios Log Server versions prior to 2024R2.0.2 contain a vulnerability in the cluster manager...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-34271
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios XI versions prior to 2024R1.2.2 contain a host header injection vulnerability. The...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-14006
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios XI versions prior to 2024R1.1.2 contain a missing authorization control when the 'Allow...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-13994
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios Log Server versions prior to 2024R1 contain an incorrect authorization vulnerability....
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2023-7322
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios XI versions prior to 2024R1.1.3, under certain circumstances, disclose the server's Active...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-13999
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios XI versions prior to 2024R1.1.2 may (confirmed in 2024R1.1 and 2024R1.1.1) disclose...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-13995
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios XI versions prior to 5.8.7 used a temporary directory for Highcharts exports with overly...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2021-47700
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.3 / Nagios XI 5.8.5 contains...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2021-47693
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios XI versions prior to 5.7.5 contain a SQL injection vulnerability in the SNMP Trap...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2020-36869
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios XI versions prior to 5.7.3 contain a command injection vulnerability in the report PDF...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2020-36867
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios XI versions prior to 5.4.13 contain a remote code execution vulnerability in the Component...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2018-25122
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      Nagios XI versions prior to 5.7.2 allow PHP files to be uploaded to the Audio Import directory...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2020-36863
                      
                      was published
                      Oct 31, 2025 
                    
                  
                    
                      The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.0.7 / Nagios XI 5.7.4 contains...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2020-36859
                      
                      was published
                      Oct 31, 2025 
                    
                  
        
        ProTip!
        Advisories are also available from the 
        GraphQL API