GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,050
Erlang
29
GitHub Actions
19
Go
1,876
Maven
5,000+
npm
3,602
NuGet
638
pip
3,199
Pub
10
RubyGems
852
Rust
813
Swift
35
Unreviewed advisories
All unreviewed
5,000+
5,949 advisories
Filter by severity
The Database Backup for WordPress plugin before 2.5.2 does not have CSRF check in place when...
Moderate
Unreviewed
CVE-2022-1577
was published
Jun 9, 2022
Cross-site request forgery (CSRF) vulnerability in Planetluc RateMe 1.3.3 allows remote attackers...
Moderate
Unreviewed
CVE-2008-4899
was published
May 17, 2022
Cross-site request forgery (CSRF) vulnerability in cmd.cgi in (1) Nagios 3.0.5 and (2) op5...
Moderate
Unreviewed
CVE-2008-5028
was published
May 17, 2022
Multiple cross-site request forgery (CSRF) vulnerabilities in PHParanoid before 0.4 allow remote...
Moderate
Unreviewed
CVE-2008-5672
was published
May 17, 2022
Cross-site request forgery (CSRF) vulnerability in I-O DATA DEVICE HDL-F160, HDL-F250, HDL-F300,...
Moderate
Unreviewed
CVE-2008-5382
was published
May 17, 2022
The WP Survey Plus WordPress plugin through 1.0 does not have any authorisation and CSRF checks...
Moderate
Unreviewed
CVE-2021-24801
was published
May 24, 2022
The Wechat Reward WordPress plugin through 1.7 does not sanitise or escape its QR settings, nor...
Moderate
Unreviewed
CVE-2021-24615
was published
May 24, 2022
The St-Daily-Tip WordPress plugin through 4.7 does not have any CSRF check in place when saving...
High
Unreviewed
CVE-2021-24487
was published
May 24, 2022
Employee Leaves Management System (ELMS) V 2.1 is vulnerable to Cross Site Request Forgery (CSRF)...
Moderate
Unreviewed
CVE-2022-30931
was published
Jun 15, 2022
The OMGF WordPress plugin before 4.5.4 does not enforce path validation, authorisation and CSRF...
High
Unreviewed
CVE-2021-24639
was published
May 24, 2022
The Quick Subscribe WordPress plugin through 1.7.1 does not have CSRF check in place when...
Moderate
Unreviewed
CVE-2022-1792
was published
Jun 14, 2022
The HC Custom WP-Admin URL WordPress plugin through 1.4 does not have CSRF check in place when...
Moderate
Unreviewed
CVE-2022-1594
was published
Jun 14, 2022
Due to missing checks the Change Uploaded File Permissions WordPress plugin through 4.0.0 is...
Moderate
Unreviewed
CVE-2022-1788
was published
Jun 14, 2022
The Private Files WordPress plugin through 0.40 is missing CSRF check when disabling the...
Moderate
Unreviewed
CVE-2022-1793
was published
Jun 14, 2022
IBM InfoSphere Master Data Management Server 10.1, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable...
High
Unreviewed
CVE-2016-9714
was published
May 17, 2022
A vulnerability classified as problematic has been found in OpenACS bug-tracker. Affected is an...
High
Unreviewed
CVE-2016-15009
was published
Jan 5, 2023
services/system_io/actionprocessor/System.rails in ConnectWise Manage 2017.5 is vulnerable to...
High
Unreviewed
CVE-2017-11726
was published
May 17, 2022
The Genki Pre-Publish Reminder WordPress plugin through 1.4.1 does not have CSRF check in place...
High
Unreviewed
CVE-2022-1758
was published
Jun 14, 2022
The Webriti SMTP Mail WordPress plugin through 1.0 does not have CSRF check in place when...
Moderate
Unreviewed
CVE-2022-1612
was published
Jun 14, 2022
Cross-site request forgery (CSRF) vulnerability in the user options page in GNU Mailman 2.1.x...
High
Unreviewed
CVE-2016-6893
was published
May 17, 2022
Cross Site Request Forgery (CSRF) exists in the Blacklist and Whitelist IP Wizard in init.php in...
High
Unreviewed
CVE-2017-12651
was published
May 17, 2022
In the VikRentCar Car Rental Management System WordPress plugin before 1.1.7, there is a custom...
Moderate
Unreviewed
CVE-2021-24388
was published
May 24, 2022
The WP LMS – Best WordPress LMS Plugin WordPress plugin through 1.1.2 does not properly...
Moderate
Unreviewed
CVE-2021-24504
was published
May 24, 2022
The Scroll Baner WordPress plugin through 1.0 does not have CSRF check in place when saving its...
Moderate
Unreviewed
CVE-2021-24642
was published
May 24, 2022
The Wp Cookie Choice WordPress plugin through 1.1.0 is lacking any CSRF check when saving its...
Moderate
Unreviewed
CVE-2021-24595
was published
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API