GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,049
Erlang
29
GitHub Actions
18
Go
1,871
Maven
5,000+
npm
3,597
NuGet
638
pip
3,189
Pub
10
RubyGems
852
Rust
809
Swift
35
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
328 advisories
Filter by severity
A vulnerability in the External RESTful Services (ERS) API of the Cisco Identity Services Engine ...
Moderate
Unreviewed
CVE-2019-1851
was published
May 24, 2022
Open-Xchange GmbH OX Cloud Plugins 1.4.0 and earlier is affected by: Missing Authorization.
High
Unreviewed
CVE-2017-8777
was published
May 24, 2022
An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5...
High
Unreviewed
CVE-2018-13382
was published
May 24, 2022
A vulnerability in the Secure Shell (SSH) authentication function of Cisco IOS XR Software could...
Moderate
Unreviewed
CVE-2019-1842
was published
May 24, 2022
A vulnerability has been identified in Siveillance VMS 2017 R2 (All versions < V11.2a),...
High
Unreviewed
CVE-2019-6581
was published
May 24, 2022
A vulnerability has been identified in Siveillance VMS 2017 R2 (All versions < V11.2a),...
High
Unreviewed
CVE-2019-6582
was published
May 24, 2022
Kernel can inject faults in computations during the execution of TrustZone leading to information...
Moderate
Unreviewed
CVE-2017-8252
was published
May 24, 2022
Truncated access authentication token leads to weakened access control for stored secure...
High
Unreviewed
CVE-2018-13908
was published
May 24, 2022
cfme-gemset versions 5.10.4.3 and below, 5.9.9.3 and below are vulnerable to a data leak, due to...
Moderate
Unreviewed
CVE-2019-10159
was published
May 24, 2022
Insufficient policy enforcement in site isolation in Google Chrome prior to 69.0.3497.81 allowed...
Moderate
Unreviewed
CVE-2018-16073
was published
May 24, 2022
Insufficient policy enforcement in site isolation in Google Chrome prior to 69.0.3497.81 allowed...
Moderate
Unreviewed
CVE-2018-16074
was published
May 24, 2022
Object lifecycle issue in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker...
Moderate
Unreviewed
CVE-2018-16077
was published
May 24, 2022
Insufficient policy enforcement in extensions API in Google Chrome prior to 69.0.3497.81 allowed...
Moderate
Unreviewed
CVE-2018-16086
was published
May 24, 2022
An issue was discovered on D-Link DCS-1130 devices. The device requires that a user logging to...
High
Unreviewed
CVE-2017-8409
was published
May 24, 2022
The provided secure solrconfig.xml sample configuration does not enforce Sentry authorization on ...
High
Unreviewed
CVE-2017-9325
was published
May 24, 2022
GitLab CE/EE, versions 8.8 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1,...
High
Unreviewed
CVE-2018-19569
was published
May 24, 2022
GitLab EE, version 11.5 before 11.5.1, is vulnerable to an insecure object reference issue that...
Moderate
Unreviewed
CVE-2018-19578
was published
May 24, 2022
GitLab EE, versions 8.3 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is...
High
Unreviewed
CVE-2018-19581
was published
May 24, 2022
An issue was discovered in PrinterOn Central Print Services (CPS) through 4.1.4. The core...
High
Unreviewed
CVE-2018-17210
was published
May 24, 2022
cPanel before 11.54.0.0 allows unauthorized password changes via Webmail API commands (SEC-65).
High
Unreviewed
CVE-2016-10859
was published
May 24, 2022
cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/quotacheck (SEC-81).
High
Unreviewed
CVE-2016-10848
was published
May 24, 2022
cPanel before 70.0.23 allows jailshell escape because of incorrect crontab parsing (SEC-382).
Low
Unreviewed
CVE-2018-20927
was published
May 24, 2022
bin/csvprocess in cPanel before 68.0.27 allows insecure file operations (SEC-354).
High
Unreviewed
CVE-2018-20945
was published
May 24, 2022
After user deletion in MongoDB Server the improper invalidation of authorization sessions allows...
Moderate
Unreviewed
CVE-2019-2386
was published
May 24, 2022
A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches...
Critical
Unreviewed
CVE-2019-1912
was published
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API