Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,635
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+

2,855 advisories

Loading
The integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote authenticated... High Unreviewed
CVE-2013-6926 was published May 13, 2022
Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 58.0.3029.81 for Mac,... Moderate Unreviewed
CVE-2017-5060 was published May 13, 2022
Incorrect Authorization in Apache Tomcat High
CVE-2016-6797 was published for org.apache.tomcat:tomcat (Maven) May 13, 2022
sunSUNQ
Credited to sunSUNQ
An exploitable improper authorization vulnerability exists in miner_setGasPrice API of cpp... High Unreviewed
CVE-2017-12116 was published May 13, 2022
An exploitable improper authorization vulnerability exists in admin_addPeer API of cpp-ethereum's... High Unreviewed
CVE-2017-12112 was published May 13, 2022
An exploitable improper authorization vulnerability exists in admin_nodeInfo API of cpp-ethereum... High Unreviewed
CVE-2017-12113 was published May 13, 2022
An exploitable improper authorization vulnerability exists in admin_peers API of cpp-ethereum's... Moderate Unreviewed
CVE-2017-12114 was published May 13, 2022
An exploitable improper authorization vulnerability exists in miner_setEtherbase API of cpp... High Unreviewed
CVE-2017-12115 was published May 13, 2022
An exploitable improper authorization vulnerability exists in miner_stop API of cpp-ethereum's... High Unreviewed
CVE-2017-12118 was published May 13, 2022
An exploitable improper authorization vulnerability exists in miner_start API of cpp-ethereum's... High Unreviewed
CVE-2017-12117 was published May 13, 2022
Incorrect Authorization in Jenkins Moderate
CVE-2018-1999004 was published for org.jenkins-ci.main:jenkins-core (Maven) May 13, 2022
Incorrect Authorization in Jenkins Moderate
CVE-2018-1999003 was published for org.jenkins-ci.main:jenkins-core (Maven) May 13, 2022
The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows... High Unreviewed
CVE-2022-30594 was published May 13, 2022
RESI Gemini-Net Web 4.2 is affected by Improper Access Control in authorization logic. An... Moderate Unreviewed
CVE-2022-29538 was published May 13, 2022
Improper access control for the Intel(R) Killer(TM) Control Center software before version 2.4... High Unreviewed
CVE-2021-26258 was published May 13, 2022
ZTE's ZXMP M721 product has a permission and access control vulnerability. Since the folder... High Unreviewed
CVE-2022-23139 was published May 13, 2022
Sysaid – Pro Plus Edition, SysAid Help Desk Broken Access Control v20.4.74 b10, v22.1.20 b62, v22... High Unreviewed
CVE-2022-22798 was published May 13, 2022
Users are able to read group conversations without actively taking part in them. Next to one to... Moderate Unreviewed
CVE-2021-27772 was published May 13, 2022
It was possible to disclose details of confidential notes created via the API in Gitlab CE/EE... Moderate Unreviewed
CVE-2022-1545 was published May 12, 2022
Under certain conditions, the SAP Host Agent logfile shows information which would otherwise be... Moderate Unreviewed
CVE-2022-28774 was published May 12, 2022
An improper authorization issue has been discovered in GitLab CE/EE affecting all versions prior... Moderate Unreviewed
CVE-2022-1124 was published May 12, 2022
An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables... Moderate Unreviewed
CVE-2022-0027 was published May 12, 2022
Insufficient checks in System Management Unit (SMU) FeatureConfig may result in reenabling... Moderate Unreviewed
CVE-2021-26376 was published May 12, 2022
Incorrect access control in Yubico OTP functionality of the YubiKey hardware tokens along with... Moderate Unreviewed
CVE-2022-24584 was published May 12, 2022
Mitel 6800 and 6900 Series SIP phone devices through 2022-04-27 have "undocumented functionality.... High Unreviewed
CVE-2022-29855 was published May 12, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database