GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,077
Erlang
29
GitHub Actions
19
Go
1,903
Maven
5,000+
npm
3,632
NuGet
638
pip
3,249
Pub
10
RubyGems
864
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+
257 advisories
Filter by severity
Incorrect access to deleted scripts vulnerability in McAfee Database Security (DBSec) prior to 4...
High
Unreviewed
CVE-2021-31831
was published
May 24, 2022
It has been discovered that redhat-certification is not properly configured and it lists all...
High
Unreviewed
CVE-2018-10863
was published
May 24, 2022
It has been discovered that redhat-certification does not restrict file access in the /update...
Critical
Unreviewed
CVE-2018-10867
was published
May 24, 2022
In InvoicePlane 1.5.11 a misconfigured web server allows unauthenticated directory listing and...
High
Unreviewed
CVE-2021-29024
was published
May 24, 2022
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker...
Moderate
Unreviewed
CVE-2021-1512
was published
May 24, 2022
A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an...
Moderate
Unreviewed
CVE-2021-1256
was published
May 24, 2022
The Theme Editor WordPress plugin before 2.6 did not validate the GET file parameter before...
Moderate
Unreviewed
CVE-2021-24154
was published
May 24, 2022
A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local...
Moderate
Unreviewed
CVE-2021-1434
was published
May 24, 2022
It has been discovered in redhat-certification that any unauthorized user may download any file...
Moderate
Unreviewed
CVE-2019-3897
was published
May 24, 2022
A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape...
High
Unreviewed
CVE-2021-20253
was published
May 24, 2022
A vulnerability in the implementation of an internal file management service for Cisco Nexus 3000...
Critical
Unreviewed
CVE-2021-1361
was published
May 24, 2022
Directory Indexing in Login Portal of Login Portal of TOTOLINK-A702R-V1.0.0-B20161227.1023 allows...
Moderate
Unreviewed
CVE-2020-27368
was published
May 24, 2022
An issue was discovered in Aviatrix Controller before R5.4.1290. The htaccess protection...
High
Unreviewed
CVE-2020-26549
was published
May 24, 2022
Improper authorization of the Screen Lock feature in WhatsApp and WhatsApp Business for iOS prior...
Moderate
Unreviewed
CVE-2020-1908
was published
May 24, 2022
Dell EMC NetWorker versions prior to 19.3.0.2 contain an improper authorization vulnerability....
Moderate
Unreviewed
CVE-2020-26183
was published
May 24, 2022
Dell EMC NetWorker versions prior to 19.3.0.2 contain an incorrect privilege assignment...
Moderate
Unreviewed
CVE-2020-26182
was published
May 24, 2022
A local file inclusion vulnerability in B&R SiteManager versions <9.2.620236042 allows...
Moderate
Unreviewed
CVE-2020-11641
was published
May 24, 2022
The local file inclusion vulnerability present in B&R SiteManager versions <9.2.620236042 allows...
Moderate
Unreviewed
CVE-2020-11642
was published
May 24, 2022
A vulnerability in the API subsystem of Cisco Unified Contact Center Express (Unified CCX) could...
High
Unreviewed
CVE-2020-3267
was published
May 24, 2022
Information Exposure vulnerability in eXtplorer makes the /usr/ and /etc/extplorer/ system...
High
Unreviewed
CVE-2019-7305
was published
May 24, 2022
The fetch function in OAuth/Curl.php in Dropbox-PHP, as used in ownCloud Server before 6.0.8, 7.x...
Moderate
Unreviewed
CVE-2015-4715
was published
May 24, 2022
Podman has Files or Directories Accessible to External Parties
Moderate
CVE-2020-1726
was published
for
github.com/containers/podman
(Go)
May 24, 2022
A vulnerability has been identified in OZW672 (All versions < V10.00), OZW772 (All versions < V10...
Moderate
Unreviewed
CVE-2019-13941
was published
May 24, 2022
An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the...
High
Unreviewed
CVE-2020-3926
was published
May 24, 2022
An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the...
High
Unreviewed
CVE-2020-3927
was published
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API