Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,645
Maven
5,000+
npm
4,271
NuGet
760
pip
4,065
Pub
12
RubyGems
957
Rust
1,057
Swift
45
Unreviewed advisories
All unreviewed
5,000+

3,834 advisories

Loading
Sophos HitmanPro.Alert before build 861 allows local elevation of privilege. Moderate Unreviewed
CVE-2020-9540 was published May 24, 2022
PCManager with versions earlier than 10.0.5.51 have a privilege escalation vulnerability in... Moderate Unreviewed
CVE-2020-1844 was published May 24, 2022
An exploitable improper access control vulnerability exists in the iw_webs account settings... High Unreviewed
CVE-2019-5162 was published May 24, 2022
danfruehauf NetworkManager-ssh before 1.2.11 allows privilege escalation because extra options... High Unreviewed
CVE-2020-9355 was published May 24, 2022
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1 and 11.5 is vulnerable to... Moderate Unreviewed
CVE-2020-4230 was published May 24, 2022
The wpCentral plugin before 1.5.1 for WordPress allows disclosure of the connection key. High Unreviewed
CVE-2020-9043 was published May 24, 2022
Iteris Vantage Velocity Field Unit 2.3.1 and 2.4.2 devices have world-writable permissions for... High Unreviewed
CVE-2020-9024 was published May 24, 2022
Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017... High Unreviewed
CVE-2020-3763 was published May 24, 2022
Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017... High Unreviewed
CVE-2020-3762 was published May 24, 2022
Improper permissions in the installer for Intel(R) MPSS before version 3.8.6 may allow an... Moderate Unreviewed
CVE-2020-0563 was published May 24, 2022
In onCreate of CertInstaller.java, there is a possible way to overlay the Certificate... Moderate Unreviewed
CVE-2020-0015 was published May 24, 2022
Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP... Moderate Unreviewed
CVE-2020-5823 was published May 24, 2022
Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP... Low Unreviewed
CVE-2020-5825 was published May 24, 2022
Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP... Moderate Unreviewed
CVE-2020-5820 was published May 24, 2022
Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP... Moderate Unreviewed
CVE-2020-5822 was published May 24, 2022
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles... Moderate Unreviewed
CVE-2020-0752 was published May 24, 2022
An elevation of privilege vulnerability exists in the way that the Connected Devices Platform... Moderate Unreviewed
CVE-2020-0749 was published May 24, 2022
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly... High Unreviewed
CVE-2020-0792 was published May 24, 2022
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles... Moderate Unreviewed
CVE-2020-0754 was published May 24, 2022
An elevation of privilege vulnerability exists when Windows improperly handles Secure Socket... High Unreviewed
CVE-2020-0757 was published May 24, 2022
An elevation of privilege vulnerability exists in the way that the Connected Devices Platform... Moderate Unreviewed
CVE-2020-0742 was published May 24, 2022
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles... Moderate Unreviewed
CVE-2020-0753 was published May 24, 2022
An elevation of privilege vulnerability exists in the way that the Connected Devices Platform... Moderate Unreviewed
CVE-2020-0750 was published May 24, 2022
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly... Moderate Unreviewed
CVE-2020-0747 was published May 24, 2022
An elevation of privilege vulnerability exists in the way that the Connected Devices Platform... Moderate Unreviewed
CVE-2020-0743 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database