Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,094
Erlang
29
GitHub Actions
19
Go
1,920
Maven
5,000+
npm
3,648
NuGet
638
pip
3,263
Pub
10
RubyGems
873
Rust
822
Swift
35
Unreviewed advisories
All unreviewed
5,000+

189 advisories

Loading
phpMyAdmin cross-site scripting Vulnerability in Table or Column Names Low
CVE-2014-4986 was published for phpmyadmin/phpmyadmin (Composer) May 17, 2022
phpMyAdmin Cross-site scripting (XSS) vulnerability via pageNumber value Low
CVE-2013-5002 was published for phpmyadmin/phpmyadmin (Composer) May 17, 2022
phpMyAdmin cookie-attribute injection Low
CVE-2016-5702 was published for phpmyadmin/phpmyadmin (Composer) May 17, 2022
TYPO3 Cross-site scripting (XSS) vulnerability in the click enlarge functionality Low
CVE-2010-5097 was published for typo3/cms-frontend (Composer) May 17, 2022
TYPO3 Cross-site scripting (XSS) vulnerability in the FORM content object Low
CVE-2010-5098 was published for typo3/cms-frontend (Composer) May 17, 2022
TYPO3 Cross-Site Scripting vulnerability in the Install Tool Low
CVE-2010-5100 was published for typo3/cms-install (Composer) May 17, 2022
Typo3 Backend XSS Vulnerability Low
CVE-2012-3528 was published for typo3/cms (Composer) May 17, 2022
Typo3 Backend Configuration XSS Vulnerability Low
CVE-2012-3529 was published for typo3/cms (Composer) May 17, 2022
Typo3 Backend History Module Vulnerable to XSS Low
CVE-2012-6145 was published for typo3/cms (Composer) May 17, 2022
Typo3 Function Menu API XSS Vulnerability Low
CVE-2012-6148 was published for typo3/cms (Composer) May 17, 2022
Typo3 Backend API XSS Vulnerability Low
CVE-2012-6147 was published for typo3/cms (Composer) May 17, 2022
TYPO3 Cross-Site Scripting (XSS) vulnerabilities in Content Editing Wizards component Low
CVE-2013-7074 was published for typo3/cms (Composer) May 17, 2022
TYPO3 Cross-site scripting (XSS) vulnerability in the Extbase Framework Low
CVE-2013-7078 was published for typo3/cms-core (Composer) May 17, 2022
Typo3 XSS Vulnerabilities Low
CVE-2014-3943 was published for typo3/cms (Composer) May 14, 2022
TYPO3 cross-site scripting (XSS) Low
CVE-2015-5956 was published for typo3/cms (Composer) May 14, 2022
Symfony Session Fixation Vulnerability Low
CVE-2015-8124 was published for symfony/security (Composer) May 14, 2022
phpMyAdmin cross-site scripting vulnerability in crafted view name Low
CVE-2014-5274 was published for phpmyadmin/phpmyadmin (Composer) May 14, 2022
Moodle's login_as feature leaks information from external repositories Low
CVE-2013-1835 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
Moodle Multiple cross-site scripting (XSS) vulnerabilities in the File Picker module Low
CVE-2013-1833 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
Moodle cross-site scripting (XSS) vulnerability Low
CVE-2014-2571 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
Moodle does not set the RISK_XSS bit for graders Low
CVE-2015-0216 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
Moodle cross-site scripting (XSS) vulnerability Low
CVE-2015-3178 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
Moodle XSS Vulnerability Low
CVE-2015-2269 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
Moodle does not set the RISK_XSS bit for graders Low
CVE-2015-3174 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
Moodle cross-site scripting (XSS) vulnerability Low
CVE-2015-2273 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database