Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,871
Erlang
37
GitHub Actions
36
Go
2,517
Maven
5,000+
npm
4,154
NuGet
736
pip
3,953
Pub
12
RubyGems
946
Rust
1,026
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

2,263 advisories

Loading
A remote authentication restriction bypass vulnerability was discovered in Aruba AirWave... High Unreviewed
CVE-2021-26964 was published May 24, 2022
A ZTE product has an information leak vulnerability. An attacker with higher authority can go... Moderate Unreviewed
CVE-2021-21725 was published May 24, 2022
Zoho ManageEngine Desktop Central before build 10.0.647 allows a single authentication secret... Critical Unreviewed
CVE-2020-28050 was published May 24, 2022
Improper Access Control vulnerability in web service of Secomea SiteManager allows remote... High Unreviewed
CVE-2020-29020 was published May 24, 2022
Improper memory access control in RKP in Samsung mobile devices prior to SMR Mar-2021 Release 1... Moderate Unreviewed
CVE-2021-25338 was published May 24, 2022
Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021... High Unreviewed
CVE-2021-25337 was published May 24, 2022
Improper access control vulnerability in Samsung keyboard version prior to SMR Feb-2021 Release 1... Low Unreviewed
CVE-2021-25340 was published May 24, 2022
Improper access control in NotificationManagerService in Samsung mobile devices prior to SMR Mar... Moderate Unreviewed
CVE-2021-25336 was published May 24, 2022
An improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0, 1.2.9 and below... Moderate Unreviewed
CVE-2021-22128 was published May 24, 2022
An improper access control vulnerability was identified in GitHub Enterprise Server that allowed... Moderate Unreviewed
CVE-2021-22862 was published May 24, 2022
An improper access control vulnerability was identified in GitHub Enterprise Server that allowed... Moderate Unreviewed
CVE-2021-22861 was published May 24, 2022
An improper access control vulnerability was identified in the GitHub Enterprise Server GraphQL... High Unreviewed
CVE-2021-22863 was published May 24, 2022
In Bitnami Containers, all Laravel container versions prior to: 6.20.0-debian-10-r107 for Laravel... High Unreviewed
CVE-2021-21979 was published May 24, 2022
WPS Hide Login 1.6.1 allows remote attackers to bypass a protection mechanism via post_password. Critical Unreviewed
CVE-2021-3332 was published May 24, 2022
In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration... Moderate Unreviewed
CVE-2021-27225 was published May 24, 2022
Improper access control vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM)... Moderate Unreviewed
CVE-2021-26563 was published May 24, 2022
A component of Kaspersky custom boot loader allowed loading of untrusted UEFI modules due to... Moderate Unreviewed
CVE-2020-26200 was published May 24, 2022
Improper Access Control in the RCP+ server of the Bosch Video Recording Manager (VRM) component... Critical Unreviewed
CVE-2019-11684 was published May 24, 2022
Improper access control vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows... Moderate Unreviewed
CVE-2021-20657 was published May 24, 2022
Improper access control when using mmap with the kgsl driver with a special offset value that can... High Unreviewed
CVE-2020-11282 was published May 24, 2022
In Visualware MyConnection Server before 11.0b build 5382, each published report is not... High Unreviewed
CVE-2021-27509 was published May 24, 2022
Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers for Linux before... Moderate Unreviewed
CVE-2020-24503 was published May 24, 2022
Insufficient access control in the firmware for the Intel(R) 722 Ethernet Controllers before... Moderate Unreviewed
CVE-2020-24494 was published May 24, 2022
Insufficient access control in the firmware for the Intel(R) 700-series of Ethernet Controllers... Moderate Unreviewed
CVE-2020-24493 was published May 24, 2022
Insufficient Access Control in the firmware for Intel(R) E810 Ethernet Controllers before version... Moderate Unreviewed
CVE-2020-24497 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database