Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
109
GitHub Actions
55
Go
4,556
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,518
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

2,592 advisories

Loading
A vulnerability in the per-user-override feature of Cisco Adaptive Security Appliance (ASA)... Moderate Unreviewed
CVE-2018-15398 was published May 13, 2022
Medtronic N'Vision Clinician Programmer 8840 N'Vision Clinician Programmer, all versions, and... Moderate Unreviewed
CVE-2018-10631 was published May 13, 2022
An error was found in the X-Pack Security 5.3.0 to 5.5.2 privilege enforcement. If a user has... Moderate Unreviewed
CVE-2017-8447 was published May 13, 2022
An Improper Access Control issue was discovered in Cambium Networks ePMP. After a valid user has... Moderate Unreviewed
CVE-2017-7918 was published May 13, 2022
The dialog for creating cloud volumes (cinder provider) in CloudForms does not filter cloud... Moderate Unreviewed
CVE-2017-7497 was published May 13, 2022
A vulnerability was discovered in Siemens XHQ server 4 and 5 (4 before V4.7.1.3 and 5 before V5.0... Moderate Unreviewed
CVE-2017-6866 was published May 13, 2022
An improper access control vulnerability in synodsmnotify in Synology DiskStation Manager (DSM)... Moderate Unreviewed
CVE-2017-16766 was published May 13, 2022
Improper access control vulnerability in SYNO.Cal.EventBase in Synology Calendar before 2.0.1... Moderate Unreviewed
CVE-2017-15891 was published May 13, 2022
A regression was found in the Red Hat Enterprise Linux 6.9 version of httpd 2.2.15-60, causing... Moderate Unreviewed
CVE-2017-12171 was published May 13, 2022
Kubernetes arbitrary file overwrite Moderate
CVE-2017-1002102 was published for k8s.io/kubernetes (Go) May 13, 2022
marquiz Credited to marquiz
Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from... Moderate Unreviewed
CVE-2016-9468 was published May 13, 2022
Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying restore... Moderate Unreviewed
CVE-2016-9462 was published May 13, 2022
Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from... Moderate Unreviewed
CVE-2016-9467 was published May 13, 2022
Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying edit... Moderate Unreviewed
CVE-2016-9461 was published May 13, 2022
OSIsoft PI System software (Applications using PI Asset Framework (AF) Client versions prior to... Moderate Unreviewed
CVE-2016-8365 was published May 13, 2022
A captured MAC/device ID of an iTrack Easy can be registered under multiple user accounts... Moderate Unreviewed
CVE-2016-6543 was published May 13, 2022
HP Operations Manager i Management Pack 1.x before 1.01 for SAP allows local users to execute OS... Moderate Unreviewed
CVE-2015-2107 was published May 13, 2022
A vulnerability in Cisco NX-OS System Software running on Cisco MDS Multilayer Director Switches,... Moderate Unreviewed
CVE-2017-12340 was published May 13, 2022
Craft CMS Unauthorized View Moderate
CVE-2017-8383 was published for craftcms/cms (Composer) May 13, 2022
IBM WebSphere Commerce 6.x through 6.0.0.11, 7.x through 7.0.0.9, and 8.x before 8.0.0.3 allows... Moderate Unreviewed
CVE-2016-0208 was published May 13, 2022
The Puppet Communications Protocol in Puppet Enterprise 2015.3.x before 2015.3.3 does not... Moderate Unreviewed
CVE-2016-2787 was published May 14, 2022
Puppet does not properly restrict access to node resources Moderate
CVE-2011-0528 was published for puppet (RubyGems) May 14, 2022
An unauthenticated remote attacker may be able to disrupt services on F5 BIG-IP 11.4.1 - 11.5.4... Moderate Unreviewed
CVE-2016-7468 was published May 14, 2022
Active Directory in Microsoft Windows Server 2008 R2 SP1 and Server 2012 Gold and R2 allows... Moderate Unreviewed
CVE-2016-3226 was published May 14, 2022
Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote... Moderate Unreviewed
CVE-2016-0611 was published May 14, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database