GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,354
Erlang
31
GitHub Actions
22
Go
2,120
Maven
5,000+
npm
3,779
NuGet
681
pip
3,460
Pub
12
RubyGems
892
Rust
888
Swift
38
Unreviewed advisories
All unreviewed
5,000+
161 advisories
Filter by severity
A vulnerability in the hardware crypto driver of Cisco IOS XE Software for Cisco 4300 Series...
High
Unreviewed
CVE-2020-3220
was published
May 24, 2022
A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow...
High
Unreviewed
CVE-2020-7487
was published
May 24, 2022
Magento 2 Community Edition Security Bypass
High
CVE-2019-8112
was published
for
magento/community-edition
(Composer)
May 24, 2022
RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below are vulnerable to a DNS unrelated...
High
Unreviewed
CVE-2019-3979
was published
May 24, 2022
Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by...
High
Unreviewed
CVE-2019-6475
was published
May 24, 2022
It was found that in icedtea-web up to and including 1.7.2 and 1.8.2 executable code could be...
High
Unreviewed
CVE-2019-10181
was published
May 24, 2022
Auth0 Passport-SharePoint does not validate JWT signature
High
CVE-2019-13483
was published
for
passport-sharepoint
(npm)
May 24, 2022
A vulnerability in Cisco Advanced Malware Protection (AMP) for Endpoints for Windows could allow...
High
Unreviewed
CVE-2019-1932
was published
May 24, 2022
Due to unencrypted and unauthenticated data communication, the wireless presenter Inateck WP2002...
High
Unreviewed
CVE-2019-12504
was published
May 24, 2022
Cloud Foundry BOSH Backup and Restore CLI, all versions prior to 1.5.0, does not check the...
High
Unreviewed
CVE-2019-3786
was published
May 24, 2022
The Hospira LifeCare PCA Infusion System before 7.0 does not validate network traffic associated...
High
Unreviewed
CVE-2014-5406
was published
May 17, 2022
** DISPUTED ** Mobile Devices (aka MDI) C4 OBD-II dongles with firmware 2.x and 3.4.x, as used in...
High
Unreviewed
CVE-2015-2908
was published
May 17, 2022
McAfee Advanced Threat Defense (ATD) before 3.4.8.178 might allow remote attackers to bypass...
High
Unreviewed
CVE-2016-3983
was published
May 17, 2022
Allround Automations PL/SQL Developer 11 before 11.0.6 relies on unverified HTTP data for updates...
High
Unreviewed
CVE-2016-2346
was published
May 17, 2022
Drupal Incorrect cache context on password reset page
High
CVE-2016-9450
was published
for
drupal/core
(Composer)
May 17, 2022
The upgrade functionality in Malwarebytes Anti-Malware (MBAM) consumer before 2.0.3 and...
High
Unreviewed
CVE-2014-4936
was published
May 17, 2022
iRZ RUH2 before 2b does not validate firmware patches, which allows remote authenticated users to...
High
Unreviewed
CVE-2016-2309
was published
May 17, 2022
Configuration and database backup archives are not signed or validated in Trend Micro Deep...
High
Unreviewed
CVE-2017-11379
was published
May 17, 2022
ASUS RT-AC68U, RT-AC66R, RT-AC66U, RT-AC56R, RT-AC56U, RT-N66R, RT-N66U, RT-N56R, RT-N56U, and...
High
Unreviewed
CVE-2014-2718
was published
May 17, 2022
A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which certain specific...
High
Unreviewed
CVE-2017-14091
was published
May 14, 2022
scripts/amsvis/powerpcAMS/amsnet.py in powerpc-utils-python uses the pickle Python module...
High
Unreviewed
CVE-2014-8165
was published
May 14, 2022
Secutech RiS-11, RiS-22, and RiS-33 devices with firmware V5.07.52_es_FRI01 allow DNS settings...
High
Unreviewed
CVE-2018-10080
was published
May 14, 2022
The autoupdate implementation in TimeDoctor Pro 1.4.72.3 on Windows relies on unsigned installer...
High
Unreviewed
CVE-2015-4674
was published
May 14, 2022
Intel Driver Update Utility before 2.4 retrieves driver updates in cleartext, which makes it...
High
Unreviewed
CVE-2016-1493
was published
May 14, 2022
Huawei AppGallery versions before 8.0.4.301 has an arbitrary Javascript running vulnerability. An...
High
Unreviewed
CVE-2018-7932
was published
May 13, 2022
ProTip!
Advisories are also available from the
GraphQL API