Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,714
Erlang
34
GitHub Actions
28
Go
2,297
Maven
5,000+
npm
3,942
NuGet
708
pip
3,711
Pub
12
RubyGems
920
Rust
959
Swift
38
Unreviewed advisories
All unreviewed
5,000+

310 advisories

Loading
ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block... Moderate Unreviewed
CVE-2020-11868 was published May 24, 2022
By encoding Unicode whitespace characters within the From email header, an attacker can spoof the... Moderate Unreviewed
CVE-2020-12397 was published May 24, 2022
Temi firmware 20190419.165201 does not properly verify that the source of data or communication... Moderate Unreviewed
CVE-2020-16168 was published May 24, 2022
By observing the stack trace for JavaScript errors in web workers, it was possible to leak the... Moderate Unreviewed
CVE-2020-15652 was published May 24, 2022
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to... High Unreviewed
CVE-2020-16951 was published May 24, 2022
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to... High Unreviewed
CVE-2020-16952 was published May 24, 2022
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.6 and... High Unreviewed
CVE-2020-9903 was published May 24, 2022
When a link to an external protocol was clicked, a prompt was presented that allowed the user to... Moderate Unreviewed
CVE-2020-15682 was published May 24, 2022
A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of... Moderate Unreviewed
CVE-2019-8754 was published May 24, 2022
A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7... High Unreviewed
CVE-2020-3864 was published May 24, 2022
An Origin Validation Error vulnerability in the SafePay component of Bitdefender Antivirus Plus... Moderate Unreviewed
CVE-2020-15733 was published May 24, 2022
ZTE E8810/E8820/E8822 series routers have an MQTT DoS vulnerability, which is caused by the... High Unreviewed
CVE-2020-6881 was published May 24, 2022
IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused... High Unreviewed
CVE-2020-4881 was published May 24, 2022
Inappropriate implementation in Performance API in Google Chrome prior to 88.0.4324.96 allowed a... Moderate Unreviewed
CVE-2021-21135 was published May 24, 2022
Insufficient policy enforcement in WebView in Google Chrome on Android prior to 88.0.4324.96... Moderate Unreviewed
CVE-2021-21136 was published May 24, 2022
DSUtility.dll in Pelco Digital Sentry Server before 7.19.67 has an arbitrary file write... High Unreviewed
CVE-2021-27197 was published May 24, 2022
An issue was discovered in Acronis Cyber Protect before 15 Update 1 build 26172. Because the... High Unreviewed
CVE-2020-35556 was published May 24, 2022
A vulnerability in the Link Layer Discovery Protocol (LLDP) for Nexus 9000 Series Fabric Switches... Moderate Unreviewed
CVE-2021-1231 was published May 24, 2022
Insufficient data validation in Reader Mode in Google Chrome on iOS prior to 89.0.4389.72 allowed... Moderate Unreviewed
CVE-2021-21163 was published May 24, 2022
Insufficient data validation in Chrome on iOS in Google Chrome on iOS prior to 89.0.4389.72... Moderate Unreviewed
CVE-2021-21164 was published May 24, 2022
Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a... Moderate Unreviewed
CVE-2021-21175 was published May 24, 2022
Inappropriate implementation in performance APIs in Google Chrome prior to 89.0.4389.72 allowed a... Moderate Unreviewed
CVE-2021-21184 was published May 24, 2022
Inappropriate implementation in performance APIs in Google Chrome prior to 89.0.4389.72 allowed a... Moderate Unreviewed
CVE-2021-21183 was published May 24, 2022
A malicious extension with the 'search' permission could have installed a new search engine whose... Moderate Unreviewed
CVE-2021-23986 was published May 24, 2022
An Origin Validation Error vulnerability in Bitdefender Safepay allows an attacker to manipulate... Moderate Unreviewed
CVE-2020-15734 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database