Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,134
Erlang
29
GitHub Actions
19
Go
1,941
Maven
5,000+
npm
3,681
NuGet
650
pip
3,298
Pub
11
RubyGems
877
Rust
830
Swift
35
Unreviewed advisories
All unreviewed
5,000+

1,100 advisories

Loading
The Ping() function in ui/api/target.go in Harbor through 1.3.0-rc4 has SSRF via the endpoint... High Unreviewed
CVE-2017-17697 was published May 13, 2022
IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal can be exploited by app developers to... Critical Unreviewed
CVE-2019-4203 was published May 13, 2022
Server Side Request Forgery vulnerability in Vebto Pixie Image Editor 1.4 and 1.7 allows remote... Critical Unreviewed
CVE-2017-12905 was published May 13, 2022
A vulnerability in Trend Micro Control Manager (versions 6.0 and 7.0) could allow an attacker to... Critical Unreviewed
CVE-2018-10511 was published May 13, 2022
A Server Side Request Forgery (SSRF) vulnerability in tools/files/importers/remote.php in... High Unreviewed
CVE-2018-13790 was published May 13, 2022
elFinder Server Side Request Forgery (SSRF) High
CVE-2019-6257 was published for studio-42/elfinder (Composer) May 13, 2022
The WebDAV endpoint in Atlassian Confluence Server and Data Center before version 6.6.7 (the... Critical Unreviewed
CVE-2019-3395 was published May 13, 2022
The VerifyPopServerConnection resource in Atlassian Jira before version 7.6.10, from version 7.7... Moderate Unreviewed
CVE-2018-13404 was published May 13, 2022
Server-Side Request Forgery in Jenkins Moderate
CVE-2018-1000067 was published for org.jenkins-ci.main:jenkins-core (Maven) May 13, 2022
In Progress Ipswitch WhatsUp Gold 17.0.0 through 21.1.1, and 22.0.0, it is possible for an... Moderate Unreviewed
CVE-2022-29848 was published May 12, 2022
In Progress Ipswitch WhatsUp Gold 21.0.0 through 21.1.1, and 22.0.0, it is possible for an... High Unreviewed
CVE-2022-29847 was published May 12, 2022
Server-Side Request Forgery in scout-browser High
CVE-2022-1592 was published for scout-browser (pip) May 6, 2022
Jspxcms v10.2.0 allows attackers to execute a Server-Side Request Forgery (SSRF) via /cmscp/ext... Moderate Unreviewed
CVE-2022-28090 was published May 5, 2022
Talend Administration Center has a vulnerability that allows an authenticated user to use the... Moderate Unreviewed
CVE-2022-29942 was published May 5, 2022
GeoServer allows SSRF via the option for setting a proxy host High
CVE-2021-40822 was published for org.geoserver:gs-main (Maven) May 3, 2022
ProxyScotch is vulnerable to a server-side Request Forgery (SSRF) High
CVE-2022-25850 was published for github.com/hoppscotch/proxyscotch (Go) May 3, 2022
The HubSpot WordPress plugin before 8.8.15 does not validate the proxy URL given to the proxy... High Unreviewed
CVE-2022-1239 was published May 3, 2022
DB4Web server, when configured to use verbose debug messages, allows remote attackers to use... High Unreviewed
CVE-2002-1484 was published Apr 30, 2022
RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an... High Unreviewed
CVE-2004-2061 was published Apr 29, 2022
A Server-Side Request Forgery (SSRF) in feed_parser class of Navigate CMS v2.9.4 allows remote... Moderate Unreviewed
CVE-2022-28117 was published Apr 29, 2022
The iot-manager microservice 1.0.0 in Northern.tech Mender Enterprise before 3.2.2 allows SSRF... Critical Unreviewed
CVE-2022-29556 was published Apr 29, 2022
Monstaftp v2.10.3 was discovered to allow attackers to execute Server-Side Request Forgery (SSRF). Critical Unreviewed
CVE-2022-27469 was published Apr 27, 2022
Server side request forgery in gibbon Critical
CVE-2022-27311 was published for gibbon (RubyGems) Apr 26, 2022
Plsr
Jizhicms v1.9.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via ... Critical Unreviewed
CVE-2022-27429 was published Apr 26, 2022
A vulnerability in all versions of SCT/SCT Pro prior to version 14.2.2 allows a remote... Critical Unreviewed
CVE-2021-36203 was published Apr 23, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database