GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,273
Erlang
31
GitHub Actions
21
Go
2,055
Maven
5,000+
npm
3,739
NuGet
668
pip
3,417
Pub
12
RubyGems
891
Rust
872
Swift
36
Unreviewed advisories
All unreviewed
5,000+
257 advisories
Filter by severity
An exploitable code execution vulnerability exists in the ss-manager binary of Shadowsocks-libev...
Moderate
Unreviewed
CVE-2019-5164
was published
May 24, 2022
A vulnerability has been identified in SPPA-T3000 Application Server (All versions). The...
Moderate
Unreviewed
CVE-2019-18284
was published
May 24, 2022
A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An...
Moderate
Unreviewed
CVE-2019-18311
was published
May 24, 2022
An exploitable information disclosure vulnerability exists in the network packet handling...
Moderate
Unreviewed
CVE-2019-5152
was published
May 24, 2022
Zoho ManageEngine Applications Manager 14590 and before allows a remote unauthenticated attacker...
Moderate
Unreviewed
CVE-2019-19799
was published
May 24, 2022
Zoho ManageEngine Desktop Central allows unauthenticated users to access PDFGenerationServlet,...
Moderate
Unreviewed
CVE-2020-8509
was published
May 24, 2022
auth_svc in Caldera before 2.6.5 allows authentication bypass (for REST API requests) via a...
Moderate
Unreviewed
CVE-2020-10807
was published
May 24, 2022
CB3 SW Version 3.3 and upwards, e-series SW Version 5.0 and upwards allow authenticated access to...
Moderate
Unreviewed
CVE-2020-10264
was published
May 24, 2022
SAP Solution Manager (Diagnostics Agent), version 7.2, does not perform the authentication check...
Moderate
Unreviewed
CVE-2020-6235
was published
May 24, 2022
Moxa Service in Moxa NPort 5150A firmware version 1.5 and earlier allows attackers to obtain...
Moderate
Unreviewed
CVE-2020-12117
was published
May 24, 2022
An issue was discovered on WAVLINK WL-WN579G3 M79X3.V5030.180719, WL-WN575A3 RPT75A3.V4300.180801...
Moderate
Unreviewed
CVE-2020-12266
was published
May 24, 2022
An unprotected logging route may allow an attacker to write endless log statements into the...
Moderate
Unreviewed
CVE-2020-10641
was published
May 24, 2022
An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. A page is exposed...
Moderate
Unreviewed
CVE-2020-10972
was published
May 24, 2022
An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices, affecting /cgi-bin...
Moderate
Unreviewed
CVE-2020-10973
was published
May 24, 2022
An issue was discovered on Wavlink WL-WN579G3 - M79X3.V5030.180719 and WL-WN575A3 - RPT75A3.V4300...
Moderate
Unreviewed
CVE-2020-10974
was published
May 24, 2022
It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path...
Moderate
Unreviewed
CVE-2020-10754
was published
May 24, 2022
A vulnerability has been identified in LOGO!8 BM (incl. SIPLUS variants) (All versions). The...
Moderate
Unreviewed
CVE-2020-7589
was published
May 24, 2022
openSIS through 7.4 has Incorrect Access Control.
Moderate
Unreviewed
CVE-2020-13382
was published
May 24, 2022
D-link DSL-2750U ISL2750UEME3.V1E devices allow approximately 90 seconds of access to the control...
Moderate
Unreviewed
CVE-2020-13150
was published
May 24, 2022
In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize...
Moderate
Unreviewed
CVE-2020-12028
was published
May 24, 2022
An Authentication Bypass vulnerability in the Published Area of the web conferencing component of...
Moderate
Unreviewed
CVE-2020-11797
was published
May 24, 2022
The Mitel MiCollab application before 9.1.332 for iOS could allow an unauthorized user to access...
Moderate
Unreviewed
CVE-2020-13767
was published
May 24, 2022
User Interface (UI) Misrepresentation of Critical Information vulnerability in the address bar of...
Moderate
Unreviewed
CVE-2020-7369
was published
May 24, 2022
User Interface (UI) Misrepresentation of Critical Information vulnerability in the address bar of...
Moderate
Unreviewed
CVE-2020-7370
was published
May 24, 2022
SOOIL Developments CoLtd DiabecareRS, AnyDana-i, AnyDana-A, The communication protocol of the...
Moderate
Unreviewed
CVE-2020-27272
was published
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API