GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,077
Erlang
29
GitHub Actions
19
Go
1,903
Maven
5,000+
npm
3,632
NuGet
638
pip
3,249
Pub
10
RubyGems
864
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+
136 advisories
Filter by severity
Veritas System Recovery (VSR) versions 18 and 21 store a network destination password in the...
Moderate
Unreviewed
CVE-2022-41320
was published
Sep 25, 2022
Torguard VPN 4.8, has a vulnerability that allows an attacker to dump sensitive information, such...
High
Unreviewed
CVE-2022-37835
was published
Sep 13, 2022
Brocade SANnav before Brocade SANvav v. 2.2.0.2 and Brocade SANanv v.2.1.1.8 logs the Brocade...
Moderate
Unreviewed
CVE-2022-28167
was published
Jun 28, 2022
In Brocade SANnav before Brocade SANnav v2.2.0.2 and Brocade SANnav2.1.1.8, encoded scp-server...
High
Unreviewed
CVE-2022-28168
was published
Jun 28, 2022
Improper auto-fill algorithm in Samsung Internet prior to version 17.0.1.69 allows physical...
Moderate
Unreviewed
CVE-2022-30740
was published
Jun 8, 2022
An issue was discovered in FlightRadar24 v8.9.0, v8.10.0, v8.10.2, v8.10.3, v8.10.4 for Android,...
Moderate
Unreviewed
CVE-2021-43512
was published
Jun 3, 2022
For ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6...
High
Unreviewed
CVE-2020-8481
was published
May 24, 2022
lpar2rrd is a hardcoded system account in XoruX LPAR2RRD and STOR2RRD before 7.30.
Critical
Unreviewed
CVE-2021-42371
was published
May 24, 2022
System Manager 9.x versions 9.7 and higher prior to 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to...
Moderate
Unreviewed
CVE-2021-27004
was published
May 24, 2022
IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the...
Low
Unreviewed
CVE-2020-4805
was published
May 24, 2022
IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the...
Low
Unreviewed
CVE-2020-4803
was published
May 24, 2022
IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the...
Low
Unreviewed
CVE-2020-4809
was published
May 24, 2022
A vulnerability involving insecure storage of sensitive information has been reported to affect...
High
Unreviewed
CVE-2021-28813
was published
May 24, 2022
Certain NetModule devices have Insecure Password Handling (cleartext or reversible encryption),...
High
Unreviewed
CVE-2021-39289
was published
May 24, 2022
In multiple functions of libl3oemcrypto.cpp, there is a possible weakness in the existing...
Moderate
Unreviewed
CVE-2021-0639
was published
May 24, 2022
In cPanel before 96.0.8, weak permissions on web stats can lead to information disclosure (SEC-584).
Moderate
Unreviewed
CVE-2021-38590
was published
May 24, 2022
An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-3040 1...
Moderate
Unreviewed
CVE-2021-21816
was published
May 24, 2022
An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. The Special...
Moderate
Unreviewed
CVE-2021-36127
was published
May 24, 2022
Insecure storage of sensitive information has been reported to affect QNAP NAS running...
Moderate
Unreviewed
CVE-2021-28815
was published
May 24, 2022
Citrix Cloud Connector before 6.31.0.62192 suffers from insecure storage of sensitive information...
High
Unreviewed
CVE-2021-22914
was published
May 24, 2022
IBM QRadar Analyst Workflow App 1.0 through 1.18.0 for IBM QRadar SIEM allows web pages to be...
Low
Unreviewed
CVE-2021-20396
was published
May 24, 2022
Information Exposure vulnerability in SmartThings prior to version 1.7.64.21 allows attacker to...
Low
Unreviewed
CVE-2021-25404
was published
May 24, 2022
Information Exposure vulnerability in Samsung Notes prior to version 4.2.04.27 allows attacker to...
Low
Unreviewed
CVE-2021-25402
was published
May 24, 2022
IBM DataPower Gateway 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.14 stores...
Moderate
Unreviewed
CVE-2020-5008
was published
May 24, 2022
IBM Security Verify Access 20.07 allows web pages to be stored locally which can be read by...
Low
Unreviewed
CVE-2021-20575
was published
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API