Site map
Everything on OpenAdvisories
Every section of the site in one place: vulnerability lists, advisories by source, tools, ways to browse the data, feeds and the API.
Vulnerabilities
Browse
Advisories
National CERTs & open source
Industrial & vendor PSIRTs
Linux distributions
Tools
- Check a version Is my package version vulnerable?
- Scan a lockfile or SBOM package-lock, composer.lock, CycloneDX, SPDX…
- Scan a server Installed packages on Linux and containers
- Daily notifications One push a day — no e-mail, no account
- Malicious packages Known malicious npm, PyPI, RubyGems … packages
Resources
Browse the data
Every vulnerability is tagged by vendor, product, platform, weakness and package ecosystem.
Vendors
- Linux
- Microsoft
- Oracle
- IBM
- Adobe
- Apple
- Cisco
- Qualcomm
- Apache Software Foundation
- Red Hat
- Mozilla
- SourceCodester
- Dell
- Siemens
- Jenkins Project
- SAP_SE
- Huawei
- Samsung Mobile
- code-projects
- NVIDIA
- GitLab
- MediaTek
- Juniper Networks
- Fortinet
- D-Link
- Tenda
- Hewlett Packard Enterprise (HPE)
- Foxit
- PHPGurukul
- itsourcecode
- OpenClaw
- Unisoc (Shanghai) Technologies
- QNAP Systems
- Campcodes
- Drupal
- Totolink
- JetBrains
- Mattermost
- Trend Micro
Weaknesses (CWE)
- Cross-site Scripting
- Improper Neutralization of Special Elements used in an SQL Command
- Missing Authorization
- Improper Access Control
- Improper Limitation of a Pathname to a Restricted Directory
- Cross-Site Request Forgery
- Improper Input Validation
- Exposure of Sensitive Information to an Unauthorized Actor
- Use After Free
- Out-of-bounds Read
- Out-of-bounds Write
- Injection
- OS Command Injection
- Improper Control of Generation of Code
- Incorrect Authorization
- Stack-based Buffer Overflow
- Uncontrolled Resource Consumption
- Heap-based Buffer Overflow
- Server-Side Request Forgery
- Improper Restriction of Operations within the Bounds of a Memory Buffer
- Unrestricted Upload of File with Dangerous Type
- Deserialization of Untrusted Data
- Buffer Copy without Checking Size of Input
- Authorization Bypass Through User-Controlled Key
Feeds & machine-readable
- Atom feed: all new vulnerabilities Every list has one: add /feed.xml to its address
- Atom feed: weekly digest One entry per week
- JSON API Version checks, lockfile, SBOM and server scans, vulnerability records
- llms.txt Plain-text overview for language models and AI agents
- XML sitemap For search engines