Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,454
Erlang
33
GitHub Actions
22
Go
2,150
Maven
5,000+
npm
3,815
NuGet
690
pip
3,490
Pub
12
RubyGems
902
Rust
900
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

141 advisories

Loading
Eclipse Keti is a service that was designed to protect RESTfuls API using Attribute Based Access... Critical Unreviewed
CVE-2021-32835 was published May 24, 2022
A vulnerability in the multimedia viewer feature of Cisco Webex Meetings and Cisco Webex Meetings... Moderate Unreviewed
CVE-2021-1517 was published May 24, 2022
This vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7 prior... High Unreviewed
CVE-2021-27245 was published May 24, 2022
Multiple Cisco products are affected by a vulnerability with TCP Fast Open (TFO) when used in... Moderate Unreviewed
CVE-2021-1224 was published May 24, 2022
Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could... High Unreviewed
CVE-2021-1223 was published May 24, 2022
Multiple vulnerabilities in the secure boot process of Cisco Adaptive Security Appliance (ASA)... Moderate Unreviewed
CVE-2020-3458 was published May 24, 2022
Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could... Moderate Unreviewed
CVE-2020-3299 was published May 24, 2022
Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could... Moderate Unreviewed
CVE-2020-3315 was published May 24, 2022
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) ... Moderate Unreviewed
CVE-2019-13924 was published May 24, 2022
A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) protocol... High Unreviewed
CVE-2019-1970 was published May 24, 2022
The Roundcube component of Analogic Poste.io 2.1.6 uses .htaccess to protect the logs/ folder,... Moderate Unreviewed
CVE-2019-12938 was published May 24, 2022
A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) protocol parser... Moderate Unreviewed
CVE-2019-1833 was published May 24, 2022
A vulnerability in the detection engine of Cisco Firepower Threat Defense (FTD) Software could... High Unreviewed
CVE-2019-1832 was published May 24, 2022
Client-side enforcement using JavaScript of server-side security options on the Cohu 3960HD... Critical Unreviewed
CVE-2017-8864 was published May 17, 2022
The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series,... High Unreviewed
CVE-2018-9314 was published May 14, 2022
The Telematics Control Unit (aka Telematic Communication Box or TCB), when present on BMW... Critical Unreviewed
CVE-2018-9311 was published May 14, 2022
The Telematics Control Unit (aka Telematic Communication Box or TCB), when present on BMW... Critical Unreviewed
CVE-2018-9318 was published May 14, 2022
The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series,... Moderate Unreviewed
CVE-2018-9313 was published May 14, 2022
The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series,... High Unreviewed
CVE-2018-9320 was published May 14, 2022
The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series,... High Unreviewed
CVE-2018-9312 was published May 14, 2022
The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series,... High Unreviewed
CVE-2018-9322 was published May 14, 2022
The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5... Moderate Unreviewed
CVE-2016-0772 was published May 14, 2022
Suricata before 4.0.4 is prone to an HTTP detection bypass vulnerability in detect.c and stream... Moderate Unreviewed
CVE-2018-6794 was published May 14, 2022
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7... High Unreviewed
CVE-2013-2465 was published May 14, 2022
A vulnerability in the detection engine of Cisco Firepower System Software could allow an... Moderate Unreviewed
CVE-2018-0138 was published May 13, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database