Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
3,968
Erlang
29
GitHub Actions
16
Go
1,752
Maven
4,982
npm
3,516
NuGet
609
pip
3,090
Pub
10
RubyGems
832
Rust
782
Swift
34
Unreviewed advisories
All unreviewed
5,000+

383 advisories

Loading
A memory corruption vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader,... High Unreviewed
CVE-2022-22150 was published Feb 11, 2022
In btif, there is a possible memory corruption due to incorrect error handling. This could lead... Moderate Unreviewed
CVE-2022-20057 was published Mar 11, 2022
Improper exception handling in Aedes High
CVE-2020-13410 was published for aedes (npm) May 6, 2021
A flaw was found in darkhttpd. Invalid error handling allows remote attackers to cause denial-of... High Unreviewed
CVE-2020-25691 was published Apr 3, 2022
Improper exception handling in Samsung Pass prior to version 3.7.07.5 allows physical attacker to... Moderate Unreviewed
CVE-2022-27841 was published Apr 12, 2022
In atf (hwfde), there is a possible leak of sensitive information due to incorrect error handling... Moderate Unreviewed
CVE-2022-20066 was published Apr 12, 2022
In ged, there is a possible memory corruption due to an incorrect error handling. This could lead... Moderate Unreviewed
CVE-2022-20076 was published Apr 12, 2022
A specially crafted packet sent to the Fernhill SCADA Server Version 3.77 and earlier may cause... High Unreviewed
CVE-2022-21155 was published Apr 13, 2022
An improper handling of exceptional conditions vulnerability exists in the DNS proxy feature of... Moderate Unreviewed
CVE-2022-0023 was published Apr 14, 2022
Dell EMC PowerScale OneFS versions 8.1.2 – 9.1.0 contain an issue where the OneFS SMB directory... Moderate Unreviewed
CVE-2020-26195 was published May 24, 2022
Receipt of a specifically malformed NDP packet sent from the local area network (LAN) to a device... Moderate Unreviewed
CVE-2020-1681 was published May 24, 2022
When an attacker sends a specific crafted Ethernet Operation, Administration, and Maintenance ... Moderate Unreviewed
CVE-2020-1639 was published May 24, 2022
A missing error check exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera... Critical Unreviewed
CVE-2017-2877 was published May 13, 2022
An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10.0 (MTK... High Unreviewed
CVE-2020-11875 was published May 24, 2022
rdiffweb 2.4.1 Missing Custom Error Page Moderate
CVE-2022-3175 was published for rdiffweb (pip) Sep 14, 2022
Shadankun Server Security Type (excluding normal blocking method types) Ver.1.5.3 and earlier... Moderate Unreviewed
CVE-2020-5622 was published May 24, 2022
Improper Handling of Insufficient Permissions or Privileges vulnerability in Waterplugin prior to... Moderate Unreviewed
CVE-2022-36874 was published Sep 10, 2022
A security feature bypass vulnerability exists in Microsoft Word software when it fails to... High Unreviewed
CVE-2020-16933 was published May 24, 2022
The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled... Moderate Unreviewed
CVE-2020-12888 was published May 24, 2022
An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a host OS crash... Moderate Unreviewed
CVE-2020-15566 was published May 24, 2022
There is a denial of service vulnerability in some huawei products. In specific scenarios, due to... High Unreviewed
CVE-2020-9213 was published May 24, 2022
In FreeBSD 12.2-STABLE before r365772, 11.4-STABLE before r365773, 12.1-RELEASE before p10, 11.4... High Unreviewed
CVE-2020-7468 was published May 24, 2022
An attacker-controlled memory allocation size can be passed to the C++ new operator in RnaDaSvr... High Unreviewed
CVE-2020-5802 was published May 24, 2022
There is a denial of service vulnerability in some versions of ManageOne. There is a logic error... Moderate Unreviewed
CVE-2021-22409 was published May 24, 2022
An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-005. Hashing is mishandled for... High Unreviewed
CVE-2021-34549 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API