Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,635
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+

1,267 advisories

Loading
mySCADA myPRO: Versions 8.20.0 and prior has a feature where the password can be specified, which... Critical Unreviewed
CVE-2021-23198 was published Dec 24, 2021
mySCADA myPRO: Versions 8.20.0 and prior has a feature where the firmware can be updated, which... Critical Unreviewed
CVE-2021-43984 was published Dec 24, 2021
mySCADA myPRO: Versions 8.20.0 and prior has a feature to send emails, which may allow an... Critical Unreviewed
CVE-2021-43981 was published Dec 24, 2021
mySCADA myPRO: Versions 8.20.0 and prior has a vulnerable debug interface which includes a ping... Critical Unreviewed
CVE-2021-44453 was published Dec 24, 2021
A specially-crafted HTTP request can lead to arbitrary command execution in RSA keypasswd... Critical Unreviewed
CVE-2021-21873 was published Dec 23, 2021
An OS command injection vulnerability exists in the Web Manager Diagnostics: Traceroute... Critical Unreviewed
CVE-2021-21872 was published Dec 23, 2021
A specially-crafted HTTP request can lead to arbitrary command execution in DSA keypasswd... Critical Unreviewed
CVE-2021-21874 was published Dec 23, 2021
A specially-crafted HTTP request can lead to arbitrary command execution in EC keypasswd... Critical Unreviewed
CVE-2021-21875 was published Dec 23, 2021
Specially-crafted HTTP requests can lead to arbitrary command execution in PUT requests. An... Critical Unreviewed
CVE-2021-21876 was published Dec 23, 2021
Specially-crafted HTTP requests can lead to arbitrary command execution in “GET” requests. An... Critical Unreviewed
CVE-2021-21877 was published Dec 23, 2021
An OS command injection vulnerability exists in the Web Manager Wireless Network Scanner... Critical Unreviewed
CVE-2021-21881 was published Dec 23, 2021
An OS command injection vulnerability exists in the Web Manager SslGenerateCSR functionality of... Critical Unreviewed
CVE-2021-21884 was published Dec 23, 2021
An OS command injection vulnerability exists in the Web Manager Diagnostics: Ping functionality... Critical Unreviewed
CVE-2021-21883 was published Dec 23, 2021
An OS command injection vulnerability exists in the Web Manager SslGenerateCertificate... Critical Unreviewed
CVE-2021-21888 was published Dec 23, 2021
Command injection in github-todos Critical
CVE-2021-44684 was published for github-todos (npm) Dec 10, 2021
dwisiswant0
Credited to dwisiswant0
A command execution vulnerability exists in the wifi_country_code_update functionality of the... Critical Unreviewed
CVE-2021-21954 was published Dec 10, 2021
OS Command Injection in adb-driver Critical
CVE-2020-7636 was published for adb-driver (npm) Dec 9, 2021
OS Command Injection in heroku-addonpool Critical
CVE-2020-7634 was published for heroku-addonpool (npm) Dec 9, 2021
Command injection in git-it-electron Critical
CVE-2021-44685 was published for git-it-electron (npm) Dec 8, 2021
dwisiswant0
Credited to dwisiswant0
OS Command Injection Vulnerability and Potential Zip Slip Vulnerability in baserCMS Critical
CVE-2021-41243 was published for baserproject/basercms (Composer) Dec 1, 2021
# Vulnerability in `pygmalion`, `pygmalion-virtualenv` and `refined` themes **Description**:... Critical Unreviewed
CVE-2021-3769 was published Dec 1, 2021
# Vulnerability in `rand-quote` and `hitokoto` plugins **Description**: the `rand-quote` and ... Critical Unreviewed
CVE-2021-3727 was published Dec 1, 2021
# Vulnerability in `title` function **Description**: the `title` function defined in `lib... Critical Unreviewed
CVE-2021-3726 was published Dec 1, 2021
This issue was discovered when the ipTIME C200 IP Camera was synchronized with the ipTIME NAS. It... Critical Unreviewed
CVE-2020-7879 was published Dec 1, 2021
A command injection vulnerability has been reported to affect QNAP device, VioStor. If exploited,... Critical Unreviewed
CVE-2021-38685 was published Nov 27, 2021
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database