Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,161
Rust
1,598
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

10,083 advisories

Loading
XWiki Platform Web Templates vulnerable to Missing Authorization, Exposure of Private Personal Information to Unauthorized Actor High
CVE-2022-36091 was published for org.xwiki.platform:xwiki-platform-web (Maven) Sep 16, 2022
Improper Authorization in ThinkSAAS v2.7 allows remote attackers to modify the description of any... Moderate Unreviewed
CVE-2020-18741 was published May 24, 2022
An issue was discovered in Emote Remote Mouse through 4.0.0.0. Attackers can maximize or minimize... Moderate Unreviewed
CVE-2021-27569 was published May 24, 2022
Jact OpenClinic 0.8.20160412 allows the attacker to read server files after login to the the... High Unreviewed
CVE-2020-20444 was published May 24, 2022
KDiskMark before 3.1.0 lacks authorization checking for D-Bus methods such as Helper:... High Unreviewed
CVE-2022-40673 was published Sep 15, 2022
A vulnerability in the Spectrum Scale 5.1 core component and IBM Elastic Storage System 6.1 could... Critical Unreviewed
CVE-2020-4926 was published May 25, 2022
A vulnerability in Cisco Connected Mobile Experiences (CMX) API authorizations could allow an... Moderate Unreviewed
CVE-2021-1143 was published May 24, 2022
An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is a luci_service... High Unreviewed
CVE-2020-35756 was published May 24, 2022
An issue has been discovered in GitLab affecting versions starting with 13.5 up to 13.9.7.... Moderate Unreviewed
CVE-2021-22208 was published May 24, 2022
An issue was discovered in Emote Remote Mouse through 4.0.0.0. Attackers can retrieve recently... Moderate Unreviewed
CVE-2021-27571 was published May 24, 2022
Jira Data Center, Jira Core Data Center, Jira Software Data Center from version 6.3.0 before 8.5... Critical Unreviewed
CVE-2020-36239 was published May 24, 2022
An arbitrary file deletion vulnerability in rConfig 3.9.5 has been fixed for 3.9.6. This... Critical Unreviewed
CVE-2020-25359 was published May 24, 2022
File Deletion vulnerability in Halo 0.4.3 via delBackup. Critical Unreviewed
CVE-2020-19038 was published May 24, 2022
The import_data function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4... High Unreviewed
CVE-2021-24353 was published May 24, 2022
When a user has already allowed a website to access microphone and camera, disabling camera... Moderate Unreviewed
CVE-2021-29959 was published May 24, 2022
Improper access in Notification setting prior to SMR JUN-2021 Release 1 allows physically... Low Unreviewed
CVE-2021-25409 was published May 24, 2022
It has been discovered that redhat-certification does not perform an authorization check and it... Critical Unreviewed
CVE-2018-10866 was published May 24, 2022
In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, a lack of capability... High Unreviewed
CVE-2021-24356 was published May 24, 2022
In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, the lack of capability... Moderate Unreviewed
CVE-2021-24355 was published May 24, 2022
Improper access control vulnerability in My Files prior to version 13.1.00.193 allows attackers... Moderate Unreviewed
CVE-2022-30731 was published Jun 8, 2022
It has been discovered that redhat-certification does not perform an authorization check and... High Unreviewed
CVE-2018-10865 was published May 24, 2022
The Filr WordPress plugin before 1.2.2.1 does not have authorisation check in two of its AJAX... High Unreviewed
CVE-2022-1777 was published Jun 14, 2022
Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote... High Unreviewed
CVE-2021-1505 was published May 24, 2022
Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older initiate SSH... Moderate Unreviewed
CVE-2021-20989 was published May 24, 2022
The S3 buckets and keys in a secure Apache Ozone Cluster must be inaccessible to anonymous access... High Unreviewed
CVE-2020-17517 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database