Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,126
NuGet
735
pip
3,943
Pub
12
RubyGems
945
Rust
1,021
Swift
39
Unreviewed advisories
All unreviewed
5,000+

12,432 advisories

Loading
Certain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15,... Low Unreviewed
CVE-2017-18828 was published May 24, 2022
NETGEAR WAC510 devices before 5.0.10.2 are affected by disclosure of sensitive information. Low Unreviewed
CVE-2019-20744 was published May 24, 2022
Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This... Low Unreviewed
CVE-2017-18797 was published May 24, 2022
A local, authenticated user with shell can obtain the hashed values of login passwords via... Low Unreviewed
CVE-2020-1621 was published May 24, 2022
NETGEAR WAC510 devices before 8.0.1.3 are affected by stored XSS. Low Unreviewed
CVE-2019-20743 was published May 24, 2022
An information exposure vulnerability in the logging component of Palo Alto Networks Global... Low Unreviewed
CVE-2020-1987 was published May 24, 2022
Certain NETGEAR devices are affected by stored XSS. This affects D6100 before 1.0.0.57, DM200... Low Unreviewed
CVE-2018-21167 was published May 24, 2022
There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send... Low Unreviewed
CVE-2019-5303 was published May 24, 2022
An issue was discovered on LG mobile devices with Android OS 9.0 (Qualcomm SDM450, SDM845, SM6150... Low Unreviewed
CVE-2019-20775 was published May 24, 2022
An issue was discovered on Samsung mobile devices with M(6.x) (Exynos or Qualcomm chipsets)... Low Unreviewed
CVE-2018-21074 was published May 24, 2022
An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.x) software. There... Low Unreviewed
CVE-2018-21077 was published May 24, 2022
IBM DOORS Next Generation (DNG/RRC) 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site... Low Unreviewed
CVE-2019-4740 was published May 24, 2022
An integer overflow was found in QEMU 4.0.1 through 4.2.0 in the way it implemented ATI VGA... Low Unreviewed
CVE-2020-11869 was published May 24, 2022
An issue was discovered on Samsung mobile devices with O(8.x) software. The Smartwatch displays... Low Unreviewed
CVE-2018-21056 was published May 24, 2022
In set_shared_key of the FPC IRIS TrustZone app, there is a possible out of bounds read due to a... Low Unreviewed
CVE-2020-0075 was published May 24, 2022
Privilege escalation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0... Low Unreviewed
CVE-2020-7257 was published May 24, 2022
In versions of NGINX Controller prior to 3.3.0, the helper.sh script, which is used optionally in... Low Unreviewed
CVE-2020-5866 was published May 24, 2022
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication... Low Unreviewed
CVE-2020-2926 was published May 24, 2022
An improper neutralization of input vulnerability in the dashboard of FortiADC may allow an... Low Unreviewed
CVE-2020-6647 was published May 24, 2022
An issue was discovered on Samsung mobile devices with O(8.x) software. There is clipboard Data... Low Unreviewed
CVE-2018-21046 was published May 24, 2022
An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows logged-in... Low Unreviewed
CVE-2020-11508 was published May 24, 2022
NETGEAR WAC510 devices before 8.0.1.3 are affected by stored XSS. Low Unreviewed
CVE-2019-20742 was published May 24, 2022
MikroTik WinBox 3.22 and below stores the user's cleartext password in the settings.cfg.viw... Low Unreviewed
CVE-2020-5721 was published May 24, 2022
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects WAC505... Low Unreviewed
CVE-2019-20698 was published May 24, 2022
IBM UrbanCode Deploy (UCD) 7.0.4.0 stores user credentials in plain in clear text which can be... Low Unreviewed
CVE-2019-4668 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database