Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,871
Erlang
37
GitHub Actions
36
Go
2,517
Maven
5,000+
npm
4,152
NuGet
736
pip
3,953
Pub
12
RubyGems
946
Rust
1,026
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

386 advisories

Loading
RRC sends a connection establishment success to NAS even though connection setup validation... High Unreviewed
CVE-2020-11243 was published May 24, 2022
VIGRA Computer Vision Library Version-1-11-1 contains a segmentation fault vulnerability in the... Moderate Unreviewed
CVE-2021-30046 was published May 24, 2022
In FreeBSD 12.2-STABLE before r365772, 11.4-STABLE before r365773, 12.1-RELEASE before p10, 11.4... High Unreviewed
CVE-2020-7468 was published May 24, 2022
Multiple vulnerabilities in the web UI of Cisco IOS XE Software could allow an authenticated,... Moderate Unreviewed
CVE-2021-1356 was published May 24, 2022
There is a denial of service vulnerability in some huawei products. In specific scenarios, due to... High Unreviewed
CVE-2020-9213 was published May 24, 2022
decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result... High Unreviewed
CVE-2021-28831 was published May 24, 2022
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions). The... Moderate Unreviewed
CVE-2020-25236 was published May 24, 2022
Improper handling of length parameter inconsistency vulnerability in Mitsubishi Electric FA... Critical Unreviewed
CVE-2021-20588 was published May 24, 2022
Improper check or handling of exceptional conditions in LOGITEC LAN-W300N/RS allows a remote... Moderate Unreviewed
CVE-2021-20642 was published May 24, 2022
Improper check or handling of exceptional conditions in LOGITEC LAN-W300N/PR5B allows a remote... Moderate Unreviewed
CVE-2021-20637 was published May 24, 2022
An attacker-controlled memory allocation size can be passed to the C++ new operator in RnaDaSvr... High Unreviewed
CVE-2020-5802 was published May 24, 2022
An attacker can craft and send an OpenNamespace message to port 4241 with valid session-id that... High Unreviewed
CVE-2020-5801 was published May 24, 2022
An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to... High Unreviewed
CVE-2020-5807 was published May 24, 2022
Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5U(C) CPU unit... High Unreviewed
CVE-2020-5665 was published May 24, 2022
An improper handling of exceptional conditions vulnerability in Cortex XDR Agent allows a local... Moderate Unreviewed
CVE-2020-2020 was published May 24, 2022
A user authorized to perform database queries may cause denial of service by issuing a specially... Moderate Unreviewed
CVE-2020-7926 was published May 24, 2022
Uncaught exception in the Intel(R) 50GbE IP Core for Intel(R) Quartus Prime before version 20.2... Moderate Unreviewed
CVE-2020-8767 was published May 24, 2022
A vulnerability in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM... Moderate Unreviewed
CVE-2020-27121 was published May 24, 2022
Visual Components (owned by KUKA) is a robotic simulator that allows simulating factories and... High Unreviewed
CVE-2020-10292 was published May 24, 2022
A security feature bypass vulnerability exists in Microsoft Word software when it fails to... High Unreviewed
CVE-2020-16933 was published May 24, 2022
An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly... High Unreviewed
CVE-2020-16895 was published May 24, 2022
When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle SAML... High Unreviewed
CVE-2020-1676 was published May 24, 2022
Receipt of a specifically malformed NDP packet sent from the local area network (LAN) to a device... Moderate Unreviewed
CVE-2020-1681 was published May 24, 2022
A privilege escalation vulnerability exists in the Duo Authentication for Windows Logon and RDP... High Unreviewed
CVE-2020-3427 was published May 24, 2022
In appendFormatV of String8.cpp, there is a possible out of bounds write due to incorrect error... High Unreviewed
CVE-2020-0421 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database