Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,779
Erlang
36
GitHub Actions
29
Go
2,338
Maven
5,000+
npm
3,972
NuGet
714
pip
3,769
Pub
12
RubyGems
923
Rust
976
Swift
38
Unreviewed advisories
All unreviewed
5,000+

192 advisories

Loading
The AES encryption project 7.x and 8.x for Drupal does not sufficiently prevent attackers from... High Unreviewed
CVE-2017-20001 was published May 24, 2022
An issue was discovered in Programi Bilanc build 007 release 014 31.01.2020 and possibly below.... High Unreviewed
CVE-2020-11719 was published May 24, 2022
An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt... High Unreviewed
CVE-2020-36201 was published May 24, 2022
An issue was discovered in Aviatrix Controller before R6.0.2483. Multiple executable files, that... High Unreviewed
CVE-2020-26552 was published May 24, 2022
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 uses weaker than expected cryptographic... High Unreviewed
CVE-2019-4160 was published May 24, 2022
IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that... High Unreviewed
CVE-2020-4595 was published May 24, 2022
IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that... High Unreviewed
CVE-2020-4594 was published May 24, 2022
OpenSIS Community Edition through 7.6 is affected by incorrect access controls for the file... High Unreviewed
CVE-2020-27408 was published May 24, 2022
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P,... High Unreviewed
CVE-2020-29063 was published May 24, 2022
A CWE-326: Inadequate Encryption Strength vulnerability exists in Modicon M221 (all references,... High Unreviewed
CVE-2020-7565 was published May 24, 2022
cPanel before 88.0.3, upon an upgrade, establishes predictable PowerDNS API keys (SEC-561). High Unreviewed
CVE-2020-26107 was published May 24, 2022
A Sensitive Source Code Path Disclosure vulnerability is found in ElkarBackup v1.3.3. An attacker... High Unreviewed
CVE-2020-24925 was published May 24, 2022
An issue was discovered in UNCTAD ASYCUDA World 2001 through 2020. The Java RMI Server has an... High Unreviewed
CVE-2020-9761 was published May 24, 2022
Adobe Acrobat and Reader versions 2019.012.20034 and earlier; 2019.012.20035 and earlier versions... High Unreviewed
CVE-2019-8237 was published May 24, 2022
An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is... High Unreviewed
CVE-2019-14332 was published May 24, 2022
The Linux kernel 4.x (starting from 4.1) and 5.x before 5.0.8 allows Information Exposure ... High Unreviewed
CVE-2019-10639 was published May 24, 2022
The user and password data base is exposed by an unprotected web server resource. Passwords are... High Unreviewed
CVE-2021-23855 was published May 24, 2022
IBM QRadar 7.2 uses outdated hashing algorithms to hash certain passwords, which could allow a... High Unreviewed
CVE-2016-2879 was published May 17, 2022
OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 uses only 8 hex digits for a PSK. High Unreviewed
CVE-2016-5056 was published May 17, 2022
An issue was discovered in sysPass 2.x before 2.1, in which an algorithm was never sufficiently... High Unreviewed
CVE-2017-5999 was published May 17, 2022
IBM Security Verify Identity Manager 10.0 uses weaker than expected cryptographic algorithms that... High Unreviewed
CVE-2022-22453 was published Jul 15, 2022
Due to a lack of standard encryption when transmitting sensitive information over the internet to... High Unreviewed
CVE-2017-5239 was published May 17, 2022
An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue... High Unreviewed
CVE-2017-2380 was published May 17, 2022
IBM Tivoli Federated Identity Manager 6.2 is affected by a vulnerability due to a missing secure... High Unreviewed
CVE-2017-1319 was published May 17, 2022
IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 uses weaker than... High Unreviewed
CVE-2022-22464 was published Jul 9, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database