Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,636
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+

1,874 advisories

Loading
A vulnerability in Server Name Identification (SNI) request filtering of Cisco Web Security... High Unreviewed
CVE-2021-34749 was published May 24, 2022
Dell OpenManage Enterprise versions 3.4 through 3.6.1 and Dell OpenManage Enterprise Modular... High Unreviewed
CVE-2021-21596 was published May 24, 2022
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Mitsubishi Electric... High Unreviewed
CVE-2021-20594 was published May 24, 2022
Replicated Classic 2.x versions have an improperly secured API that exposes sensitive data from... High Unreviewed
CVE-2020-10590 was published May 24, 2022
When installed following the default/recommended settings, TCExam <= 14.8.1 allowed... High Unreviewed
CVE-2021-20114 was published May 24, 2022
An information disclosure vulnerability exists in the Zebra IP Routing Manager functionality of D... High Unreviewed
CVE-2021-21817 was published May 24, 2022
Password autocomplete vulnerability in the web application password field of Hitachi ABB Power... High Unreviewed
CVE-2021-35527 was published May 24, 2022
IBM Cloud Pak for Applications 4.3 could disclose sensitive information to a malicious attacker... High Unreviewed
CVE-2021-20422 was published May 24, 2022
Improper component protection vulnerability in SmsViewerActivity of Samsung Message prior to SMR... High Unreviewed
CVE-2021-25426 was published May 24, 2022
A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a... High Unreviewed
CVE-2021-20019 was published May 24, 2022
Exposure of sensitive information to an unauthorized actor vulnerability in webapi component in... High Unreviewed
CVE-2021-29086 was published May 24, 2022
PHPGurukul Hospital Management System in PHP v4.0 has a sensitive information disclosure... High Unreviewed
CVE-2020-22176 was published May 24, 2022
curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option,... High Unreviewed
CVE-2021-22898 was published May 24, 2022
Thycotic Password Reset Server before 5.3.0 allows credential disclosure. High Unreviewed
CVE-2021-34679 was published May 24, 2022
Server for NFS Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-31976. High Unreviewed
CVE-2021-31975 was published May 24, 2022
Server for NFS Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-31975. High Unreviewed
CVE-2021-31976 was published May 24, 2022
Luca through 1.7.4 on Android allows remote attackers to obtain sensitive information about COVID... High Unreviewed
CVE-2021-33838 was published May 24, 2022
Luca through 1.7.4 on Android allows remote attackers to obtain sensitive information about COVID... High Unreviewed
CVE-2021-33839 was published May 24, 2022
An information disclosure vulnerability exists in the Rocket.Chat server fixed v3.13, v3.12.2 &... High Unreviewed
CVE-2021-22892 was published May 24, 2022
An information disclosure vulnerability was discovered in /index.class.php (via port 8181) on... High Unreviewed
CVE-2021-27823 was published May 24, 2022
An information disclosure vulnerability was discovered in alipay_function.php in the log file of... High Unreviewed
CVE-2020-23768 was published May 24, 2022
Products with Unified Automation .NET based OPC UA Client/Server SDK Bundle: Versions V3.0.7 and... High Unreviewed
CVE-2021-27434 was published May 24, 2022
IBM Planning Analytics Local 2.0 could allow an attacker to obtain sensitive information due to... High Unreviewed
CVE-2020-4985 was published May 24, 2022
A flaw was found in ImageMagick in versions before 7.0.11. A potential cipher leak when the... High Unreviewed
CVE-2021-20313 was published May 24, 2022
In JetBrains YouTrack before 2020.6.8801, information disclosure in an issue preview was possible. High Unreviewed
CVE-2021-31905 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database