Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,783
Erlang
36
GitHub Actions
29
Go
2,357
Maven
5,000+
npm
3,978
NuGet
720
pip
3,775
Pub
12
RubyGems
923
Rust
981
Swift
38
Unreviewed advisories
All unreviewed
5,000+

4,946 advisories

Loading
Path traversal in elFinder.NetCore High
CVE-2021-23428 was published for elFinder.NetCore (NuGet) Sep 2, 2021
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.4 and... High Unreviewed
CVE-2022-22653 was published Mar 19, 2022
SolarWinds received a report of a vulnerability related to an input that was not sanitized in... High Unreviewed
CVE-2021-35254 was published Mar 26, 2022
Improper Input Validation vulnerability in request line parsing of Apache Traffic Server allows... High Unreviewed
CVE-2021-44040 was published Mar 24, 2022
The lack of validation of a key-value field in the Splunk-to-Splunk protocol results in a denial... High Unreviewed
CVE-2021-3422 was published Mar 26, 2022
This vulnerability can be exploited by parsing maliciously crafted project files with Horner... High Unreviewed
CVE-2021-44462 was published Mar 26, 2022
Unrestricted Upload of File with Dangerous Type in Gogs High
CVE-2022-0415 was published for gogs.io/gogs (Go) Mar 28, 2022
wuhan005
The (1) ActiveMatrix Runtime and (2) ActiveMatrix Administrator components in TIBCO ActiveMatrix... High Unreviewed
CVE-2010-3491 was published May 17, 2022
In Settings, there is a possible way to make the user enable WiFi due to improper input... High Unreviewed
CVE-2021-39763 was published Mar 31, 2022
Improper input validation vulnerability in pfSense CE and pfSense Plus (pfSense CE software... High Unreviewed
CVE-2022-24299 was published Apr 1, 2022
In Settings, there is a possible way to misrepresent which app wants to add a wifi network due to... High Unreviewed
CVE-2021-39771 was published Mar 31, 2022
In Audio Aurisys HAL, there is a possible permission bypass due to a missing permission check.... High Unreviewed
CVE-2021-0673 was published Dec 18, 2021
In Settings, there is a possible way to display an incorrect app name due to improper input... High Unreviewed
CVE-2021-39764 was published Mar 31, 2022
Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control... High Unreviewed
CVE-2021-22277 was published Apr 3, 2022
Improper input validation in all versions of GitLab CE/EE using sendmail to send emails allowed... High Unreviewed
CVE-2022-0741 was published Apr 3, 2022
Data can be copied without validation in the built-in web server in Moxa NPort IAW5000A-I/O... High Unreviewed
CVE-2021-32970 was published Apr 3, 2022
An local privilege escalation vulnerability due to a "runasroot" command in eScan Anti-Virus.... High Unreviewed
CVE-2021-26624 was published Apr 3, 2022
IBM WebSphere Application Server (WAS) 7.x before 7.0.0.13, and WebSphere Application Server... High Unreviewed
CVE-2010-3186 was published May 17, 2022
Improper validation vulnerability in MediaMonitorDimension prior to SMR Apr-2022 Release 1 allows... High Unreviewed
CVE-2022-27827 was published Apr 12, 2022
Improper validation vulnerability in MediaMonitorEvent prior to SMR Apr-2022 Release 1 allows... High Unreviewed
CVE-2022-27828 was published Apr 12, 2022
Improper validation vulnerability in VerifyCredentialResponse prior to SMR Apr-2022 Release 1... High Unreviewed
CVE-2022-27829 was published Apr 12, 2022
Improper validation vulnerability in SemSuspendDialogInfo prior to SMR Apr-2022 Release 1 allows... High Unreviewed
CVE-2022-27826 was published Apr 12, 2022
Improper validation vulnerability in SemBlurInfo prior to SMR Apr-2022 Release 1 allows attackers... High Unreviewed
CVE-2022-27830 was published Apr 12, 2022
Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser... High Unreviewed
CVE-2021-44355 was published Apr 15, 2022
A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE... High Unreviewed
CVE-2022-28328 was published Apr 13, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database