Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,270
Erlang
31
GitHub Actions
21
Go
2,046
Maven
5,000+
npm
3,737
NuGet
663
pip
3,415
Pub
12
RubyGems
891
Rust
868
Swift
36
Unreviewed advisories
All unreviewed
5,000+

62 advisories

Loading
Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on A77, A78, A78C,... Critical Unreviewed
CVE-2024-5660 was published Dec 10, 2024
An issue in Fronius Datalogger Web v.2.0.5-4, allows remote attackers to obtain sensitive... Critical Unreviewed
CVE-2023-37621 was published Feb 1, 2024
An issue in WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 allows unauthenticated attackers... Critical Unreviewed
CVE-2023-45911 was published Oct 18, 2023
Key management vulnerability on system. Successful exploitation of this vulnerability may affect... Critical Unreviewed
CVE-2023-3455 was published Jul 5, 2023
An issue found in DepositGame v.1.0 allows an attacker to gain sensitive information via the... Critical Unreviewed
CVE-2020-22647 was published Mar 16, 2023
CodenameOne Pending Intent vulnerability Critical
CVE-2022-4903 was published for com.codenameone:codenameone-core (Maven) Feb 10, 2023
globalpom-utils has Insecure Temporary File Critical
CVE-2018-25068 was published for com.anrisoftware.globalpom:globalpomutils (Maven) Jan 6, 2023
A network misconfiguration is present in versions prior to 1.0.9.90 of the NETGEAR RAX30 AX2400... Critical Unreviewed
CVE-2022-4390 was published Dec 9, 2022
When doing HTTP(S) transfers, libcurl might erroneously use the read callback (... Critical Unreviewed
CVE-2022-32221 was published Dec 6, 2022
Workers for local Dask clusters mistakenly listened on public interfaces Critical
GHSA-hwqr-f3v9-hwxr was published for distributed (pip) Jul 15, 2022
In a openshift node, there is a cron job to update mcollective facts that mishandles a temporary... Critical Unreviewed
CVE-2013-4561 was published Jul 1, 2022
Fast Food Ordering System v1.0 is vulnerable to Delete any file. via /ffos/classes/Master.php?f... Critical Unreviewed
CVE-2022-32328 was published Jun 15, 2022
An issue was discovered in Couchbase Server before 7.0.4. Random HTTP requests lead to leaked... Critical Unreviewed
CVE-2022-32559 was published Jun 15, 2022
Dell PowerStore versions 2.0.0.x, 2.0.1.x and 2.1.0.x contains an open port vulnerability. A... Critical Unreviewed
CVE-2022-26869 was published Jun 3, 2022
In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only... Critical Unreviewed
CVE-2021-20999 was published May 24, 2022
Improper Access Control vulnerability in the patchesUpdate API as implemented in Bitdefender... Critical Unreviewed
CVE-2021-3554 was published May 24, 2022
An improper access control vulnerability in GitHub Enterprise Server allowed a workflow job to... Critical Unreviewed
CVE-2021-22869 was published May 24, 2022
Improper control of program execution vulnerability in RevoWorks Browser 2.1.230 and earlier... Critical Unreviewed
CVE-2021-20790 was published May 24, 2022
IBM API Connect 5.0.0.0 through 5.0.8.11 could alllow a remote user to obtain sensitive... Critical Unreviewed
CVE-2021-29715 was published May 24, 2022
Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product... Critical Unreviewed
CVE-2021-35211 was published May 24, 2022
** DISPUTED ** TensorFlow through 2.5.0 allows attackers to overwrite arbitrary files via a... Critical Unreviewed
CVE-2021-35958 was published May 24, 2022
CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control. Critical Unreviewed
CVE-2021-30190 was published May 24, 2022
An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. getfile.asp allows... Critical Unreviewed
CVE-2021-27236 was published May 24, 2022
Winston 1.5.4 devices have a CORS configuration that trusts arbitrary origins. This allows... Critical Unreviewed
CVE-2020-16263 was published May 24, 2022
An issue was discovered in TitanHQ WebTitan before 5.18. The proxy service (which is typically... Critical Unreviewed
CVE-2019-19015 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database