Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,077
Erlang
29
GitHub Actions
19
Go
1,902
Maven
5,000+
npm
3,631
NuGet
638
pip
3,246
Pub
10
RubyGems
863
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+

80 advisories

Loading
Skia, as used in Google Chrome before 50.0.2661.94, allows remote attackers to bypass the Same... High Unreviewed
CVE-2016-5168 was published May 17, 2022
An issue was discovered in Smiths-Medical CADD-Solis Medication Safety Software, Version 1.0; 2.0... High Unreviewed
CVE-2016-8358 was published May 17, 2022
Thinfinity VNC v4.0.0.1 contains a Cross-Origin Resource Sharing (CORS) vulnerability which can... High Unreviewed
CVE-2022-25227 was published May 21, 2022
The Upgrade-Insecure-Requests (UIR) specification states that if UIR is enabled through Content... High Unreviewed
CVE-2019-9803 was published May 24, 2022
A vulnerability exists during the installation of add-ons where the initial fetch ignored the... High Unreviewed
CVE-2019-11723 was published May 24, 2022
An exploitable denial-of-service vulnerability exists in the Weave error reporting functionality... High Unreviewed
CVE-2019-5036 was published May 24, 2022
Dino before 2019-09-10 does not properly check the source of a carbons message in module/xep... High Unreviewed
CVE-2019-16235 was published May 24, 2022
Dino before 2019-09-10 does not properly check the source of an MAM message in module/xep... High Unreviewed
CVE-2019-16237 was published May 24, 2022
Adobe Flash Player 32.0.0.238 and earlier versions, 32.0.0.207 and earlier versions have a Same... High Unreviewed
CVE-2019-8069 was published May 24, 2022
Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass... High Unreviewed
CVE-2019-8075 was published May 24, 2022
An issue was discovered in TitanHQ WebTitan before 5.18. It contains a Remote Code Execution... High Unreviewed
CVE-2019-19019 was published May 24, 2022
CardGate Payments plugin for WooCommerce does not validate request origin High
CVE-2020-8819 was published for cardgate/woocommerce (Composer) May 24, 2022
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to... High Unreviewed
CVE-2020-16951 was published May 24, 2022
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to... High Unreviewed
CVE-2020-16952 was published May 24, 2022
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.6 and... High Unreviewed
CVE-2020-9903 was published May 24, 2022
A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7... High Unreviewed
CVE-2020-3864 was published May 24, 2022
ZTE E8810/E8820/E8822 series routers have an MQTT DoS vulnerability, which is caused by the... High Unreviewed
CVE-2020-6881 was published May 24, 2022
IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused... High Unreviewed
CVE-2020-4881 was published May 24, 2022
DSUtility.dll in Pelco Digital Sentry Server before 7.19.67 has an arbitrary file write... High Unreviewed
CVE-2021-27197 was published May 24, 2022
An issue was discovered in Acronis Cyber Protect before 15 Update 1 build 26172. Because the... High Unreviewed
CVE-2020-35556 was published May 24, 2022
The server in npupnp before 4.1.4 is affected by DNS rebinding in the embedded web server ... High Unreviewed
CVE-2021-31718 was published May 24, 2022
In Ping Identity RSA SecurID Integration Kit before 3.2, user impersonation can occur. High Unreviewed
CVE-2021-39270 was published May 24, 2022
Yandex Browser for Android 20.8.4 allows remote attackers to perform SOP bypass and addresss bar... High Unreviewed
CVE-2020-27969 was published May 24, 2022
Origin validation error vulnerability in NeoRS’s ActiveX moudle allows attackers to download and... High Unreviewed
CVE-2022-23763 was published Jun 29, 2022
A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause... High Unreviewed
CVE-2022-26137 was published Jul 21, 2022
ProTip! Advisories are also available from the GraphQL API