Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,635
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+

4,100 advisories

Loading
A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local... High Unreviewed
CVE-2018-0184 was published May 13, 2022
Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated,... High Unreviewed
CVE-2018-0176 was published May 13, 2022
Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated,... High Unreviewed
CVE-2018-0169 was published May 13, 2022
Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated,... High Unreviewed
CVE-2018-0182 was published May 13, 2022
Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated,... High Unreviewed
CVE-2018-0185 was published May 13, 2022
Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated,... High Unreviewed
CVE-2018-0193 was published May 13, 2022
Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated,... High Unreviewed
CVE-2018-0194 was published May 13, 2022
A vulnerability in specific CLI commands for the Cisco Identity Services Engine (ISE) could allow... High Unreviewed
CVE-2018-0221 was published May 13, 2022
A vulnerability in role-based access control (RBAC) for Cisco NX-OS Software could allow an... High Unreviewed
CVE-2018-0293 was published May 13, 2022
A vulnerability in the NX-API management application programming interface (API) in devices... High Unreviewed
CVE-2018-0330 was published May 13, 2022
A vulnerability in the web-based UI of Cisco IP Phone 6800, 7800, and 8800 Series with... High Unreviewed
CVE-2018-0341 was published May 13, 2022
A vulnerability in the error reporting feature of the Cisco SD-WAN Solution could allow an... High Unreviewed
CVE-2018-0432 was published May 13, 2022
A vulnerability in the Sourcefire tunnel control channel protocol in Cisco Firepower System... High Unreviewed
CVE-2018-0453 was published May 13, 2022
CloudForms Management Engine (cfme) is vulnerable to an improper security setting in the dRuby... High Unreviewed
CVE-2018-10905 was published May 13, 2022
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations... High Unreviewed
CVE-2018-11616 was published May 13, 2022
An OS command injection vulnerability in the web administration component of Micro Focus Secure... High Unreviewed
CVE-2018-12465 was published May 13, 2022
Command injection vulnerability in ftpd in Synology Diskstation Manager (DSM) before 6.2-23739-1... High Unreviewed
CVE-2018-13284 was published May 13, 2022
Command injection vulnerability in ftpd in Synology Router Manager (SRM) before 1.1.7-6941-1... High Unreviewed
CVE-2018-13285 was published May 13, 2022
A vulnerability in the cluster service manager of Cisco HyperFlex Software could allow an... High Unreviewed
CVE-2018-15380 was published May 13, 2022
A vulnerability in the update service of Cisco Webex Meetings Desktop App for Windows could allow... High Unreviewed
CVE-2018-15442 was published May 13, 2022
NUUO NVRMini2 version 3.9.1 is vulnerable to authenticated remote command injection. An attacker... High Unreviewed
CVE-2018-15716 was published May 13, 2022
The Logitech Harmony Hub before version 4.15.206 is vulnerable to OS command injection via the... High Unreviewed
CVE-2018-15722 was published May 13, 2022
It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly... High Unreviewed
CVE-2018-16863 was published May 13, 2022
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations... High Unreviewed
CVE-2018-17707 was published May 13, 2022
In Geutebrueck GmbH E2 Camera Series versions prior to 1.12.0.25 the DDNS configuration (in the... Critical Unreviewed
CVE-2018-19007 was published May 13, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database