GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,050
Erlang
29
GitHub Actions
19
Go
1,876
Maven
5,000+
npm
3,602
NuGet
638
pip
3,198
Pub
10
RubyGems
852
Rust
812
Swift
35
Unreviewed advisories
All unreviewed
5,000+
5,949 advisories
Filter by severity
Cross-site request forgery (CSRF) vulnerability in multiple Century Systems routers including XR...
Moderate
Unreviewed
CVE-2008-6449
was published
May 17, 2022
HelpDEZk 1.1.1 has CSRF in admin/home#/logos/ with an impact of remote execution of arbitrary PHP...
High
Unreviewed
CVE-2017-7447
was published
May 17, 2022
The Per page add to head WordPress plugin before 1.4.4 is lacking any CSRF check when saving its...
Moderate
Unreviewed
CVE-2021-24586
was published
May 24, 2022
The Flat Preloader WordPress plugin before 1.5.4 does not enforce nonce checks when saving its...
Moderate
Unreviewed
CVE-2021-24685
was published
May 24, 2022
Cross-site request forgery (CSRF) vulnerability in admin.php in AjaXplorer 2.3.3 and 2.3.4 allows...
Moderate
Unreviewed
CVE-2008-6639
was published
May 17, 2022
Cross-site request forgery (CSRF) vulnerability in the Localization client 5.x before 5.x-1.1 and...
Moderate
Unreviewed
CVE-2008-6169
was published
May 17, 2022
The Contact Form 7 Captcha WordPress plugin before 0.0.9 does not have any CSRF check in place...
High
Unreviewed
CVE-2021-24565
was published
May 24, 2022
Multiple cross-site request forgery (CSRF) vulnerabilities in Comment Mail 5.x before 5.x-1.1, a...
Moderate
Unreviewed
CVE-2008-6384
was published
May 17, 2022
Cross-site request forgery (CSRF) vulnerability in Vivvo CMS before 4.0.4 allows remote attackers...
Moderate
Unreviewed
CVE-2008-6801
was published
May 17, 2022
The WP Simple Adsense Insertion WordPress plugin before 2.1 does not perform CSRF checks on...
Moderate
Unreviewed
CVE-2022-1695
was published
Jun 9, 2022
A vulnerability, which was classified as problematic, has been found in Solare Solar-Log 2.8.4-56...
High
Unreviewed
CVE-2017-20020
was published
Jun 10, 2022
Cross-site request forgery (CSRF) vulnerability in Live 5.x before 5.x-0.1, a module for Drupal,...
Moderate
Unreviewed
CVE-2008-7151
was published
May 17, 2022
Cross-site request forgery (CSRF) vulnerability in the web-based management interface on Cisco...
High
Unreviewed
CVE-2016-1470
was published
May 17, 2022
The Discy WordPress theme before 5.2 lacks CSRF checks in some AJAX actions, allowing an attacker...
Moderate
Unreviewed
CVE-2022-1421
was published
Jun 9, 2022
The Discy WordPress theme before 5.2 does not check for CSRF tokens in the AJAX action...
Moderate
Unreviewed
CVE-2022-1422
was published
Jun 9, 2022
The RB Internal Links WordPress plugin through 2.0.16 does not have CSRF check in place when...
Moderate
Unreviewed
CVE-2022-1759
was published
Jun 14, 2022
Multiple cross-site request forgery (CSRF) vulnerabilities in the Chaos Tool Suite (aka CTools)...
Moderate
Unreviewed
CVE-2010-1547
was published
May 17, 2022
CSRF exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw...
High
Unreviewed
CVE-2017-8836
was published
May 17, 2022
Windows DVD Maker in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Vista SP2...
Moderate
Unreviewed
CVE-2017-0045
was published
May 17, 2022
The Chameleon CSS WordPress plugin through 1.2 does not have any CSRF and capability checks in...
High
Unreviewed
CVE-2021-24626
was published
May 24, 2022
The jQuery Reply to Comment WordPress plugin through 1.31 does not have any CSRF check when...
Moderate
Unreviewed
CVE-2021-24543
was published
May 24, 2022
The Accept Donations with PayPal WordPress plugin before 1.3.1 offers a function to create...
Moderate
Unreviewed
CVE-2021-24570
was published
May 24, 2022
Cross-Site Request Forgery (CSRF) vulnerability in Social Share Buttons by Supsystic plugin <= 2...
Moderate
Unreviewed
CVE-2021-36890
was published
Jun 3, 2022
The daac_delete_booking_callback function, hooked to the daac_delete_booking AJAX action, takes...
High
Unreviewed
CVE-2021-24555
was published
May 24, 2022
The Weather Effect WordPress plugin before 1.3.4 does not have any CSRF checks in place when...
Moderate
Unreviewed
CVE-2021-24683
was published
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API