Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,638
Maven
5,000+
npm
4,264
NuGet
760
pip
4,060
Pub
12
RubyGems
956
Rust
1,056
Swift
45
Unreviewed advisories
All unreviewed
5,000+

4,102 advisories

Loading
A vulnerability in the local-mgmt CLI command of the Cisco Unified Computing System (UCS) Manager... High Unreviewed
CVE-2017-6597 was published May 17, 2022
A vulnerability in a startup script of Cisco IOS XE Software could allow an unauthenticated... Moderate Unreviewed
CVE-2017-6606 was published May 17, 2022
NfSen before 1.3.8 allows remote attackers to execute arbitrary OS commands via shell... Critical Unreviewed
CVE-2017-7175 was published May 17, 2022
Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier. Toshiba Home gateway HEM... Critical Unreviewed
CVE-2017-2237 was published May 17, 2022
HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS... High Unreviewed
CVE-2017-2185 was published May 17, 2022
HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS... High Unreviewed
CVE-2017-2183 was published May 17, 2022
IBM Security Guardium 10.0 could allow a remote authenticated attacker to execute arbitrary... Critical Unreviewed
CVE-2017-1253 was published May 17, 2022
A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to... High Unreviewed
CVE-2017-3796 was published May 17, 2022
WG-C10 v3.0.79 and earlier allows an attacker to execute arbitrary OS commands via unspecified... High Unreviewed
CVE-2017-2275 was published May 17, 2022
IBM MQ Appliance 8.0 and 9.0 could allow an authenticated messaging administrator to execute... High Unreviewed
CVE-2017-1318 was published May 17, 2022
Cisco TelePresence endpoints running either CE or TC software contain a vulnerability that could... Moderate Unreviewed
CVE-2016-6459 was published May 17, 2022
Cisco WebEx Meetings Server 2.6 allows remote attackers to execute arbitrary commands by... High Unreviewed
CVE-2016-1482 was published May 17, 2022
The web-based GUI in Cisco Cloud Services Platform (CSP) 2100 2.0 allows remote authenticated... High Unreviewed
CVE-2016-6373 was published May 17, 2022
iox in Cisco IOS, possibly 15.6 and earlier, and IOS XE, possibly 3.18 and earlier, allows local... High Unreviewed
CVE-2016-6414 was published May 17, 2022
GigaCC OFFICE ver.2.3 and earlier allows remote attackers to execute arbitrary OS commands via... Moderate Unreviewed
CVE-2016-7844 was published May 17, 2022
Cobian Backup 11 client allows man-in-the-middle attackers to add and execute new backup tasks... High Unreviewed
CVE-2017-11318 was published May 17, 2022
WN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary OS commands... High Unreviewed
CVE-2017-2281 was published May 17, 2022
Electron vulnerable to remote command execution High
CVE-2017-12581 was published for electron (npm) May 17, 2022
The administrative web interface in Cisco TelePresence Video Communication Server Expressway X8.5... High Unreviewed
CVE-2016-1468 was published May 17, 2022
Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3... High Unreviewed
CVE-2016-9091 was published May 17, 2022
pphoto in Ariadne before 2.6 allows remote authenticated users with certain privileges to execute... High Unreviewed
CVE-2008-7125 was published May 17, 2022
Numara FootPrints 7.5a through 7.5a1 and 8.0 through 8.0a allows remote attackers to execute... High Unreviewed
CVE-2008-7158 was published May 17, 2022
The CGI scripts in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 do not properly... High Unreviewed
CVE-2011-0271 was published May 17, 2022
Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to perform unspecified... High Unreviewed
CVE-2011-0381 was published May 17, 2022
Static code injection vulnerability in install_.php in e107 CMS 0.7.24 and probably earlier... High Unreviewed
CVE-2011-1513 was published May 17, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database