GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,050
Erlang
29
GitHub Actions
19
Go
1,876
Maven
5,000+
npm
3,602
NuGet
638
pip
3,198
Pub
10
RubyGems
852
Rust
812
Swift
35
Unreviewed advisories
All unreviewed
5,000+
5,949 advisories
Filter by severity
A Cross-Site Request Forgery (CSRF) in the component delete_categorie.php of Warehouse Inventory...
High
Unreviewed
CVE-2024-42582
was published
Aug 20, 2024
A Cross-Site Request Forgery (CSRF) in the component delete_user.php of Warehouse Inventory...
High
Unreviewed
CVE-2024-42583
was published
Aug 20, 2024
A Cross-Site Request Forgery (CSRF) in the component delete_media.php of Warehouse Inventory...
High
Unreviewed
CVE-2024-42585
was published
Aug 20, 2024
A Cross-Site Request Forgery (CSRF) in the component categorie.php of Warehouse Inventory System...
High
Unreviewed
CVE-2024-42586
was published
Aug 20, 2024
A Cross-Site Request Forgery (CSRF) in the component edit_categorie.php of Warehouse Inventory...
High
Unreviewed
CVE-2024-42576
was published
Aug 20, 2024
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...
High
Unreviewed
CVE-2024-42617
was published
Aug 20, 2024
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin...
High
Unreviewed
CVE-2024-42611
was published
Aug 20, 2024
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...
High
Unreviewed
CVE-2024-35556
was published
May 22, 2024
A Cross-Site Request Forgery (CSRF) in the component admin_room_removed.php of Hotel Management...
High
Unreviewed
CVE-2024-42555
was published
Aug 20, 2024
A Cross-Site Request Forgery (CSRF) in the component admin_room_added.php of Hotel Management...
High
Unreviewed
CVE-2024-42553
was published
Aug 20, 2024
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...
High
Unreviewed
CVE-2024-35010
was published
May 14, 2024
The Floating Social Buttons plugin for WordPress is vulnerable to Cross-Site Request Forgery in...
Moderate
Unreviewed
CVE-2024-6405
was published
Jun 29, 2024
A Cross-Site Request Forgery (CSRF) in the component edit_product.php of Warehouse Inventory...
High
Unreviewed
CVE-2024-42578
was published
Aug 20, 2024
Dolibarr vulnerable to Cross-Site Request Forgery
High
CVE-2024-31503
was published
for
dolibarr/dolibarr
(Composer)
Apr 17, 2024
The BP Profile Search plugin for WordPress is vulnerable to Cross-Site Request Forgery in all...
Moderate
Unreviewed
CVE-2024-7850
was published
Aug 20, 2024
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...
Moderate
Unreviewed
CVE-2024-28672
was published
Mar 13, 2024
Cross-Site Request Forgery (CSRF) in automad/automad
Moderate
CVE-2023-7038
was published
for
automad/automad
(Composer)
Dec 21, 2023
BOSSCMS v3.10 is vulnerable to Cross Site Request Forgery (CSRF) in name="head_code" or name=...
Moderate
Unreviewed
CVE-2024-31613
was published
Jun 10, 2024
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component http...
Moderate
Unreviewed
CVE-2024-39021
was published
Jul 5, 2024
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...
Moderate
Unreviewed
CVE-2024-35561
was published
May 22, 2024
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...
Moderate
Unreviewed
CVE-2024-35011
was published
May 14, 2024
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component...
Moderate
Unreviewed
CVE-2024-34957
was published
May 16, 2024
The Bricks theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and...
Moderate
Unreviewed
CVE-2023-3408
was published
Aug 17, 2024
The Bricks theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and...
Moderate
Unreviewed
CVE-2023-3409
was published
Aug 17, 2024
The Short URL plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to,...
Moderate
Unreviewed
CVE-2023-1604
was published
Aug 17, 2024
ProTip!
Advisories are also available from the
GraphQL API