GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,046
Erlang
29
GitHub Actions
18
Go
1,871
Maven
5,000+
npm
3,596
NuGet
638
pip
3,182
Pub
10
RubyGems
852
Rust
809
Swift
35
Unreviewed advisories
All unreviewed
5,000+
189 advisories
Filter by severity
An exploitable privilege escalation vulnerability exists in the Wacom, driver version 6.3.32-3,...
High
Unreviewed
CVE-2019-5013
was published
May 24, 2022
The Sangoma Session Border Controller (SBC) 2.3.23-119 GA web interface is vulnerable to Argument...
Critical
Unreviewed
CVE-2019-12147
was published
May 24, 2022
The Sangoma Session Border Controller (SBC) 2.3.23-119 GA web interface is vulnerable to an...
Critical
Unreviewed
CVE-2019-12148
was published
May 24, 2022
rustls-mio/examples/tlsserver.rs in the rustls crate before 0.16.0 for Rust allows attackers to...
High
Unreviewed
CVE-2019-15541
was published
May 24, 2022
cgi-bin/cmh/webcam.sh in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users...
High
Unreviewed
CVE-2019-15498
was published
May 24, 2022
Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4...
High
Unreviewed
CVE-2019-12264
was published
May 24, 2022
In MobaXterm 11.1, the mobaxterm: URI handler has an argument injection vulnerability that allows...
High
Unreviewed
CVE-2019-13475
was published
May 24, 2022
An argument injection vulnerability in Atlassian Sourcetree for Windows's URI handlers, in all...
High
Unreviewed
CVE-2019-11582
was published
May 24, 2022
Incorrect command line processing in Chrome in Google Chrome prior to 73.0.3683.75 allowed a...
Moderate
Unreviewed
CVE-2019-5804
was published
May 24, 2022
A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an...
High
Unreviewed
CVE-2019-1780
was published
May 24, 2022
A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an...
High
Unreviewed
CVE-2019-1795
was published
May 24, 2022
A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an...
High
Unreviewed
CVE-2019-1779
was published
May 24, 2022
Atlassian Fisheye and Crucible versions less than 4.4.3 and version 4.5.0 are vulnerable to...
Critical
Unreviewed
CVE-2017-14591
was published
May 17, 2022
kernel/omap/drivers/mfd/twl6030-gpadc.c in the kernel component in Amazon Kindle Fire HD(3rd)...
High
Unreviewed
CVE-2018-11025
was published
May 14, 2022
kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD (3rd...
High
Unreviewed
CVE-2018-11024
was published
May 14, 2022
kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD (3rd...
High
Unreviewed
CVE-2018-11023
was published
May 14, 2022
kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD(3rd)...
High
Unreviewed
CVE-2018-11022
was published
May 14, 2022
kernel/omap/drivers/video/omap2/dsscomp/device.c in the kernel component in Amazon Kindle Fire HD...
High
Unreviewed
CVE-2018-11021
was published
May 14, 2022
kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD(3rd)...
High
Unreviewed
CVE-2018-11019
was published
May 14, 2022
kernel/omap/drivers/rpmsg/rpmsg_omx.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire...
Moderate
Unreviewed
CVE-2018-11020
was published
May 14, 2022
Logstash prior to version 2.1.2, the CSV output can be attacked via engineered input that will...
High
Unreviewed
CVE-2016-1000222
was published
May 14, 2022
There was an argument injection vulnerability in Sourcetree for macOS via filenames in Mercurial...
Critical
Unreviewed
CVE-2018-13385
was published
May 13, 2022
There was an argument injection vulnerability in Atlassian Sourcetree for macOS from version 1.2...
High
Unreviewed
CVE-2018-20234
was published
May 13, 2022
mIRC before 7.55 allows remote command execution by using argument injection through custom URI...
High
Unreviewed
CVE-2019-6453
was published
May 13, 2022
A tampering vulnerability exists when Microsoft browsers do not properly validate input under...
Moderate
Unreviewed
CVE-2019-0764
was published
May 13, 2022
ProTip!
Advisories are also available from the
GraphQL API