GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,077
Erlang
29
GitHub Actions
19
Go
1,901
Maven
5,000+
npm
3,631
NuGet
638
pip
3,244
Pub
10
RubyGems
863
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+
200 advisories
Filter by severity
When sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC...
Moderate
Unreviewed
CVE-2021-23963
was published
May 24, 2022
Improper preservation of permissions in Nagios XI 5.7.4 allows a local, low-privileged,...
High
Unreviewed
CVE-2020-5796
was published
May 24, 2022
Insecure inherited permissions in firmware update tool for some Intel(R) NUCs may allow an...
High
Unreviewed
CVE-2020-24525
was published
May 24, 2022
Improper permissions in the Intel(R) Data Center Manager Console before version 3.6.2 may allow...
Moderate
Unreviewed
CVE-2020-12353
was published
May 24, 2022
Improper permissions in the installer for the Intel(R) Falcon 8+ UAS AscTec Thermal Viewer, all...
High
Unreviewed
CVE-2020-12330
was published
May 24, 2022
Improper permissions in the installer for the Intel(R) Advisor tools before version 2020 Update 2...
High
Unreviewed
CVE-2020-12334
was published
May 24, 2022
Improper permissions in the installer for the Intel(R) HID Event Filter Driver, all versions, may...
High
Unreviewed
CVE-2020-12332
was published
May 24, 2022
Improper permissions in the installer for the Intel(R) Processor Identification Utility before...
High
Unreviewed
CVE-2020-12335
was published
May 24, 2022
A security feature bypass vulnerability exists when Microsoft Windows fails to handle file...
Moderate
Unreviewed
CVE-2020-16910
was published
May 24, 2022
Inappropriate implementation in permissions in Google Chrome prior to 85.0.4183.83 allowed a...
Moderate
Unreviewed
CVE-2020-6564
was published
May 24, 2022
In Settings, there is a possible permissions bypass. This could lead to local information...
Moderate
Unreviewed
CVE-2020-0331
was published
May 24, 2022
In core networking, there is a missing permission check. This could lead to local information...
Moderate
Unreviewed
CVE-2020-0327
was published
May 24, 2022
In Telephony, there are possible leaks of sensitive data due to missing permission checks. This...
Moderate
Unreviewed
CVE-2020-0265
was published
May 24, 2022
In Android Auto Settings, there is a possible permission bypass due to an unsafe PendingIntent....
Moderate
Unreviewed
CVE-2020-0269
was published
May 24, 2022
Improper Preservation of Permissions in Apache Struts
High
CVE-2019-0233
was published
for
org.apache.struts:struts2-core
(Maven)
May 24, 2022
In Cacti before 1.2.11, disabling a user account does not immediately invalidate any permissions...
Moderate
Unreviewed
CVE-2020-13230
was published
May 24, 2022
In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR...
Moderate
Unreviewed
CVE-2020-7063
was published
May 24, 2022
Gentoo Portage through 2.3.84 allows local users to place a Trojan horse plugin in the /usr/lib64...
Moderate
Unreviewed
CVE-2019-20384
was published
May 24, 2022
Insufficient policy enforcement in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a...
Moderate
Unreviewed
CVE-2019-13727
was published
May 24, 2022
Missing permission check in Jenkins Support Core Plugin
Moderate
CVE-2019-16539
was published
for
org.jenkins-ci.plugins:support-core
(Maven)
May 24, 2022
OX App Suite through 7.10.2 has Insecure Permissions.
High
Unreviewed
CVE-2019-14226
was published
May 24, 2022
The PKI keys exported using the command "run request security pki key-pair export" on Junos OS...
Low
Unreviewed
CVE-2019-0073
was published
May 24, 2022
JetBrains YouTrack before 2019.2.53938 was using incorrect settings, allowing a user without...
Moderate
Unreviewed
CVE-2019-14956
was published
May 24, 2022
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before...
Moderate
Unreviewed
CVE-2019-6791
was published
May 24, 2022
An issue was discovered in GitLab Community and Enterprise Edition 8.x, 9.x, 10.x, and 11.x...
Moderate
Unreviewed
CVE-2019-6995
was published
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API