Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,050
Erlang
29
GitHub Actions
19
Go
1,876
Maven
5,000+
npm
3,602
NuGet
638
pip
3,198
Pub
10
RubyGems
852
Rust
812
Swift
35
Unreviewed advisories
All unreviewed
5,000+

5,949 advisories

A Cross-Site Request Forgery (CSRF) in the component delete_categorie.php of Warehouse Inventory... High Unreviewed
CVE-2024-42582 was published Aug 20, 2024
A Cross-Site Request Forgery (CSRF) in the component delete_user.php of Warehouse Inventory... High Unreviewed
CVE-2024-42583 was published Aug 20, 2024
A Cross-Site Request Forgery (CSRF) in the component delete_media.php of Warehouse Inventory... High Unreviewed
CVE-2024-42585 was published Aug 20, 2024
A Cross-Site Request Forgery (CSRF) in the component categorie.php of Warehouse Inventory System... High Unreviewed
CVE-2024-42586 was published Aug 20, 2024
A Cross-Site Request Forgery (CSRF) in the component edit_categorie.php of Warehouse Inventory... High Unreviewed
CVE-2024-42576 was published Aug 20, 2024
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ... High Unreviewed
CVE-2024-42617 was published Aug 20, 2024
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin... High Unreviewed
CVE-2024-42611 was published Aug 20, 2024
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ... High Unreviewed
CVE-2024-35556 was published May 22, 2024
A Cross-Site Request Forgery (CSRF) in the component admin_room_removed.php of Hotel Management... High Unreviewed
CVE-2024-42555 was published Aug 20, 2024
A Cross-Site Request Forgery (CSRF) in the component admin_room_added.php of Hotel Management... High Unreviewed
CVE-2024-42553 was published Aug 20, 2024
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ... High Unreviewed
CVE-2024-35010 was published May 14, 2024
The Floating Social Buttons plugin for WordPress is vulnerable to Cross-Site Request Forgery in... Moderate Unreviewed
CVE-2024-6405 was published Jun 29, 2024
A Cross-Site Request Forgery (CSRF) in the component edit_product.php of Warehouse Inventory... High Unreviewed
CVE-2024-42578 was published Aug 20, 2024
Dolibarr vulnerable to Cross-Site Request Forgery High
CVE-2024-31503 was published for dolibarr/dolibarr (Composer) Apr 17, 2024
The BP Profile Search plugin for WordPress is vulnerable to Cross-Site Request Forgery in all... Moderate Unreviewed
CVE-2024-7850 was published Aug 20, 2024
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ... Moderate Unreviewed
CVE-2024-28672 was published Mar 13, 2024
Cross-Site Request Forgery (CSRF) in automad/automad Moderate
CVE-2023-7038 was published for automad/automad (Composer) Dec 21, 2023
marcantondahmen
BOSSCMS v3.10 is vulnerable to Cross Site Request Forgery (CSRF) in name="head_code" or name=... Moderate Unreviewed
CVE-2024-31613 was published Jun 10, 2024
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component http... Moderate Unreviewed
CVE-2024-39021 was published Jul 5, 2024
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ... Moderate Unreviewed
CVE-2024-35561 was published May 22, 2024
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ... Moderate Unreviewed
CVE-2024-35011 was published May 14, 2024
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component... Moderate Unreviewed
CVE-2024-34957 was published May 16, 2024
The Bricks theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and... Moderate Unreviewed
CVE-2023-3408 was published Aug 17, 2024
The Bricks theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and... Moderate Unreviewed
CVE-2023-3409 was published Aug 17, 2024
The Short URL plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to,... Moderate Unreviewed
CVE-2023-1604 was published Aug 17, 2024
ProTip! Advisories are also available from the GraphQL API