Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,354
Erlang
31
GitHub Actions
22
Go
2,120
Maven
5,000+
npm
3,779
NuGet
681
pip
3,460
Pub
12
RubyGems
892
Rust
888
Swift
38
Unreviewed advisories
All unreviewed
5,000+

991 advisories

Loading
OX App Suite 7.10.5 allows Information Exposure because a caching mechanism can caused a Modified... Moderate Unreviewed
CVE-2021-38378 was published May 24, 2022
IBM QRadar Network Security 5.4.0 and 5.5.0 could allow a remote attacker to obtain sensitive... Moderate Unreviewed
CVE-2020-4160 was published May 24, 2022
InBody App for iOS versions prior to 2.3.30 and InBody App for Android versions prior to 2.2.90... Moderate Unreviewed
CVE-2021-20832 was published May 24, 2022
Potential speculative code store bypass in all supported CPU products, in conjunction with... Moderate Unreviewed
CVE-2021-26313 was published May 24, 2022
Information exposure vulnerability in SemIWCMonitor prior to SMR Jun-2022 Release 1 allows local... Low Unreviewed
CVE-2022-30714 was published Jun 8, 2022
Sensitive information exposure in Sign-out log in Samsung Account prior to version 13.2.00.6... Moderate Unreviewed
CVE-2022-30734 was published Jun 8, 2022
All versions of Elastic Cloud Enterprise has the Elasticsearch “anonymous” user enabled by... High Unreviewed
CVE-2021-22146 was published May 24, 2022
The issue was addressed with improved permissions logic. This issue is fixed in iOS 15 and iPadOS... Low Unreviewed
CVE-2021-30816 was published May 24, 2022
In all versions of GitLab CE/EE since version 10.6, a project export leaks the external webhook... Moderate Unreviewed
CVE-2021-39898 was published May 24, 2022
Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54... Moderate Unreviewed
CVE-2021-37968 was published May 24, 2022
Azure RTOS Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-26444, CVE... Low Unreviewed
CVE-2021-42323 was published May 24, 2022
An access issue was addressed with improved access restrictions. This issue is fixed in Security... High Unreviewed
CVE-2021-30850 was published May 24, 2022
Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain... High Unreviewed
CVE-2020-19155 was published May 24, 2022
The vCenter Server contains a local information disclosure vulnerability in the Analytics service... Moderate Unreviewed
CVE-2021-22007 was published May 24, 2022
The vCenter Server contains an information disclosure vulnerability due to an unauthenticated... High Unreviewed
CVE-2021-22012 was published May 24, 2022
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big... Moderate Unreviewed
CVE-2021-30673 was published May 24, 2022
Lack of strict validation of bootmode can lead to information disclosure in Snapdragon Auto,... Moderate Unreviewed
CVE-2021-1929 was published May 24, 2022
This release addresses a potential information leakage vulnerability in NetIQ Access Manager... Moderate Unreviewed
CVE-2021-22525 was published May 24, 2022
ExportToPdfCmd Arbitrary File Read Information Disclosure Vulnerability using ImportAlert... Moderate Unreviewed
CVE-2021-35219 was published May 24, 2022
Child process can leak information from parent process due to numeric pids are getting compared... Moderate Unreviewed
CVE-2021-1904 was published May 24, 2022
IBM API Connect 5.0.0.0 through 5.0.8.11 could alllow a remote user to obtain sensitive... Critical Unreviewed
CVE-2021-29715 was published May 24, 2022
NetSarang Xshell 7 before Build 0077 includes unintended code strings in paste operations. Moderate Unreviewed
CVE-2021-37326 was published May 24, 2022
Sensitive information exposure in low-battery dumpstate log prior to SMR Jun-2022 Release 1... Low Unreviewed
CVE-2022-28794 was published Jun 8, 2022
An access issue was addressed with improved memory management. This issue is fixed in iOS 14.5... High Unreviewed
CVE-2021-30656 was published May 24, 2022
Viewing restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2 allows a... Moderate Unreviewed
CVE-2021-20755 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database