Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,810
Erlang
36
GitHub Actions
31
Go
2,395
Maven
5,000+
npm
4,030
NuGet
721
pip
3,820
Pub
12
RubyGems
932
Rust
988
Swift
38
Unreviewed advisories
All unreviewed
5,000+

109,805 advisories

Loading
Directory traversal vulnerability in CrosDisks in Google Chrome OS before 33.0.1750.152 has... High Unreviewed
CVE-2014-1707 was published May 17, 2022
Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X,... High Unreviewed
CVE-2013-1371 was published May 17, 2022
IBM PureApplication System 2.2.3.0 through 2.2.5.3 could allow an authenticated user with local... High Unreviewed
CVE-2019-4241 was published May 24, 2022
Sophos Web Appliance before 3.7.8.2 allows (1) remote attackers to execute arbitrary commands via... High Unreviewed
CVE-2013-2642 was published May 17, 2022
Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X,... High Unreviewed
CVE-2013-1378 was published May 17, 2022
gtkutils.c in Pidgin before 2.10.8 on Windows allows user-assisted remote attackers to execute... High Unreviewed
CVE-2013-6486 was published May 17, 2022
crosh in Google Chrome OS before 33.0.1750.152 allows attackers to inject commands via... High Unreviewed
CVE-2014-1706 was published May 17, 2022
An unspecified Enghouse Interactive Professional Services "addon product" in Enghouse Interactive... High Unreviewed
CVE-2013-6838 was published May 17, 2022
Unspecified vulnerability in JustSystems Sanshiro 2007 before update 3, 2008 before update 5,... High Unreviewed
CVE-2014-0810 was published May 17, 2022
A vulnerability classified as problematic has been found in Kakao PotPlayer. This affects an... High Unreviewed
CVE-2022-4246 was published Dec 1, 2022
LINE client for iOS before 12.17.0 might be crashed by sharing an invalid shared key of e2ee in... High Unreviewed
CVE-2022-41568 was published Nov 29, 2022
StarWind SAN and NAS v0.2 build 1914 allow remote code execution. High Unreviewed
CVE-2022-32268 was published Jun 4, 2022
Goomph before 3.37.2 allows malicious zip file to write contents to arbitrary locations High
CVE-2022-26049 was published for com.diffplug.gradle:goomph (Maven) Sep 12, 2022
** DISPUTED ** The User-Defined Functions (UDF) feature in TigerGraph 3.6.0 allows installation... High Unreviewed
CVE-2022-30331 was published Sep 6, 2022
Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code... High Unreviewed
CVE-2014-1248 was published May 17, 2022
Integer overflow in xnview.exe in XnView 2.13 allows remote attackers to execute arbitrary code... High Unreviewed
CVE-2013-3938 was published May 17, 2022
A potential vulnerability in the SMI callback function used in the NVME driver in some Lenovo... High Unreviewed
CVE-2021-4210 was published Apr 23, 2022
A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) V15 (All versions), SIMATIC... High Unreviewed
CVE-2021-42029 was published Apr 13, 2022
Stack-based buffer overflow in pepoly.dll in Quick Heal AntiVirus Pro 7.0.0.1 allows local users... High Unreviewed
CVE-2013-6767 was published May 17, 2022
Insufficient access control vulnerability was discovered in the Crestron AirMedia Windows... High Unreviewed
CVE-2022-34102 was published Sep 14, 2022
In addOrUpdateNetwork of WifiServiceImpl.java, there is a possible way for a guest user to... High Unreviewed
CVE-2022-20398 was published Sep 14, 2022
In checkAccess of MediaProvider.java, there is a possible file deletion due to a path traversal... High Unreviewed
CVE-2022-20395 was published Sep 14, 2022
Improper Input Validation vulnerability in the handling of a malformed IEC 104 TCP packet in the... High Unreviewed
CVE-2022-29492 was published Sep 15, 2022
recoveryconsole/bpl/snmpd.php in Unitrends Enterprise Backup 7.3.0 allows remote attackers to... High Unreviewed
CVE-2014-3139 was published May 17, 2022
The Conceptronic C54APM access point with runtime code 1.26 has a default password of admin for... High Unreviewed
CVE-2014-1408 was published May 17, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database