Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,318
Erlang
31
GitHub Actions
21
Go
2,074
Maven
5,000+
npm
3,746
NuGet
674
pip
3,434
Pub
12
RubyGems
892
Rust
880
Swift
37
Unreviewed advisories
All unreviewed
5,000+

143 advisories

Loading
In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible way to... High Unreviewed
CVE-2022-20223 was published Jul 14, 2022
Externally Controlled Reference to a Resource in Another Sphere in ruby-mysql Moderate
CVE-2021-3779 was published for ruby-mysql (RubyGems) Jun 29, 2022
ACEweb Online Portal 3.5.065 was discovered to contain an External Controlled File Path and Name... High Unreviewed
CVE-2022-24241 was published Jun 3, 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability. High Unreviewed
CVE-2022-30190 was published Jun 2, 2022
In runDumpHeap of ActivityManagerShellCommand.java, there is a possible deletion of system files... High Unreviewed
CVE-2021-0708 was published May 24, 2022
In sendDevicePickedIntent of DevicePickerFragment.java, there is a possible way to invoke a... High Unreviewed
CVE-2021-0593 was published May 24, 2022
In sendReplyIntentToReceiver of BluetoothPermissionActivity.java, there is a possible way to... High Unreviewed
CVE-2021-0591 was published May 24, 2022
An arbitrary file deletion vulnerability exists within Maccms10. Moderate Unreviewed
CVE-2020-21363 was published May 24, 2022
A vulnerability in all versions of Nim-lang allows unauthenticated attackers to write files to... Moderate Unreviewed
CVE-2020-23171 was published May 24, 2022
Acronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to... High Unreviewed
CVE-2021-32576 was published May 24, 2022
Acronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to... High Unreviewed
CVE-2021-32578 was published May 24, 2022
A component of the HarmonyOS has a External Control of System or Configuration Setting... High Unreviewed
CVE-2021-22420 was published May 24, 2022
In scheduleTimeoutLocked of NotificationRecord.java, there is a possible disclosure of a... Moderate Unreviewed
CVE-2021-0599 was published May 24, 2022
A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built... Moderate Unreviewed
CVE-2021-29965 was published May 24, 2022
In dropFile of WiFiInstaller, there is a way to delete files accessible to CertInstaller due to a... High Unreviewed
CVE-2021-0536 was published May 24, 2022
In onLoadFailed of AnnotateActivity.java, there is a possible way to gain WRITE_EXTERNAL_STORAGE... High Unreviewed
CVE-2021-0550 was published May 24, 2022
In handleAppLaunch of AppLaunchActivity.java, there is a possible arbitrary activity launch due... High Unreviewed
CVE-2021-0608 was published May 24, 2022
A vulnerability in the restricted shell of Cisco Evolved Programmable Network (EPN) Manager,... Low Unreviewed
CVE-2021-1306 was published May 24, 2022
Externally controlled reference to a resource in another sphere in quarantine functionality in... High Unreviewed
CVE-2021-27648 was published May 24, 2022
An issue was discovered in MDaemon before 20.0.4. Administrators can use Remote Administration to... High Unreviewed
CVE-2021-27183 was published May 24, 2022
The project received a report that all versions of Apache OpenOffice through 4.1.8 can open non... High Unreviewed
CVE-2021-30245 was published May 24, 2022
The WADashboard component of WebAccess/SCADA Versions 9.0 and prior may allow an attacker to... High Unreviewed
CVE-2020-25161 was published May 24, 2022
A frame-injection issue in the online help in Redwood Report2Web 4.3.4.5 allows remote attackers... Moderate Unreviewed
CVE-2021-26711 was published May 24, 2022
An exploitable code execution vulnerability exists in the multiple devices functionality of F2fs... High Unreviewed
CVE-2020-6105 was published May 24, 2022
In MediaProvider, there is a possible bypass of a permissions check due to a confused deputy.... Moderate Unreviewed
CVE-2020-0337 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database