GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,638
Maven
5,000+
npm
4,264
NuGet
760
pip
4,060
Pub
12
RubyGems
956
Rust
1,056
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
2,093 advisories
Filter by severity
The vulnerabilities can be exploited to cause the web visualization component of the PLC to stop...
High
Unreviewed
CVE-2020-24686
was published
May 24, 2022
UniFi Protect before v1.17.1 allows an attacker to use spoofed cameras to perform a denial-of...
High
Unreviewed
CVE-2021-22882
was published
May 24, 2022
Possible denial of service due to RTT responder consistently rejects all FTMR by transmitting...
High
Unreviewed
CVE-2020-11270
was published
May 24, 2022
Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet...
High
Unreviewed
CVE-2021-22174
was published
May 24, 2022
Any git operation is passed through Jetty and a session is created. No expiry is set for the...
High
Unreviewed
CVE-2021-22553
was published
May 24, 2022
A vulnerability in the SSH service of the Cisco StarOS operating system could allow an...
High
Unreviewed
CVE-2021-1378
was published
May 24, 2022
Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers for Linux before...
Moderate
Unreviewed
CVE-2020-24504
was published
May 24, 2022
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is...
Moderate
Unreviewed
CVE-2020-35559
was published
May 24, 2022
IBM Spectrum Protect Operations Center 7.1 and 8.1 is vulnerable to a denial of service, caused...
Moderate
Unreviewed
CVE-2020-4956
was published
May 24, 2022
On BIG-IP APM version 16.0.x before 16.0.1.1, under certain conditions, when processing VPN...
High
Unreviewed
CVE-2021-22985
was published
May 24, 2022
On BIG-IP Advanced WAF and ASM version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x...
High
Unreviewed
CVE-2021-22976
was published
May 24, 2022
A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet...
High
Unreviewed
CVE-2020-35498
was published
May 24, 2022
IBM Spectrum Protect Plus 10.1.0 through 10.1.7 could allow a remote user to inject arbitrary...
High
Unreviewed
CVE-2020-5023
was published
May 24, 2022
There is a denial of service (DoS) vulnerability in eCNS280 versions V100R005C00, V100R005C10....
High
Unreviewed
CVE-2021-22292
was published
May 24, 2022
A vulnerability in the REST API of Cisco Managed Services Accelerator (MSX) could allow an...
Moderate
Unreviewed
CVE-2021-1266
was published
May 24, 2022
ZIV Automation 4CCT-EA6-334126BF firmware version 3.23.80.27.36371, allows an unauthenticated,...
High
Unreviewed
CVE-2021-25909
was published
May 24, 2022
Resource management errors vulnerability in a robot controller of MELFA FR Series(controller ...
High
Unreviewed
CVE-2021-20586
was published
May 24, 2022
A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local...
Moderate
Unreviewed
CVE-2021-25224
was published
May 24, 2022
A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local...
Moderate
Unreviewed
CVE-2021-25226
was published
May 24, 2022
A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local...
Moderate
Unreviewed
CVE-2021-25225
was published
May 24, 2022
A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows users to...
Moderate
Unreviewed
CVE-2020-8293
was published
May 24, 2022
A wrong check in Nextcloud Server 19 and prior allowed to perform a denial of service attack when...
High
Unreviewed
CVE-2020-8295
was published
May 24, 2022
The affected product has uncontrolled resource consumption issues, which may allow an attacker to...
High
Unreviewed
CVE-2020-27295
was published
May 24, 2022
IBM MQ Internet Pass-Thru 2.1 and 9.2 could allow a remote user to cause a denial of service by...
High
Unreviewed
CVE-2020-4766
was published
May 24, 2022
This affects all versions of package jquery-ui; all versions of package org.fujion.webjars:jquery...
High
Unreviewed
CVE-2020-28488
was published
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API