GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,224
Erlang
31
GitHub Actions
19
Go
1,990
Maven
5,000+
npm
3,706
NuGet
661
pip
3,336
Pub
11
RubyGems
884
Rust
845
Swift
36
Unreviewed advisories
All unreviewed
5,000+
3,365 advisories
Filter by severity
In start of WelcomeActivity.java, there is a possible residual profile due to a confused deputy....
High
Unreviewed
CVE-2021-0445
was published
May 24, 2022
In onCreate of DeviceChooserActivity.java, there is a possible way to bypass user consent when...
High
Unreviewed
CVE-2021-0433
was published
May 24, 2022
Insider Threat Management Windows Agent Local Privilege Escalation Vulnerability The Proofpoint...
High
Unreviewed
CVE-2021-22159
was published
May 24, 2022
Insufficient policy enforcement in Cryptohome in Google Chrome prior to 88.0.4324.96 allowed a...
High
Unreviewed
CVE-2021-21117
was published
May 24, 2022
Soyal Technology 701Client 9.0.1 is vulnerable to Insecure permissions via client.exe binary with...
High
Unreviewed
CVE-2021-28269
was published
May 24, 2022
Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to arbitrarily access...
High
Unreviewed
CVE-2021-20072
was published
May 24, 2022
Snow Inventory Agent through 6.7.0 on Windows uses CPUID to report on processor types and...
Critical
Unreviewed
CVE-2021-27579
was published
May 24, 2022
An improper usage of implicit intent in SemRewardManager prior to SMR Dec-2021 Release 1 allows...
Low
Unreviewed
CVE-2021-25515
was published
Dec 9, 2021
Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file...
Moderate
Unreviewed
CVE-2021-27216
was published
May 24, 2022
An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is Unauthenticated Root...
Critical
Unreviewed
CVE-2020-35757
was published
May 24, 2022
In checkUriPermission and related functions of MediaProvider.java, there is a possible way to...
High
Unreviewed
CVE-2021-0376
was published
May 24, 2022
IBM Spectrum Scale 5.1.0.1 could allow a local with access to the GUI pod container to obtain...
Moderate
Unreviewed
CVE-2021-29708
was published
May 24, 2022
SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation in...
High
Unreviewed
CVE-2021-27893
was published
May 24, 2022
Escalation of privileges vulnerability in Micro Focus Operations Agent, affects versions 12.0x,...
Critical
Unreviewed
CVE-2021-22505
was published
May 24, 2022
An issue was discovered in Acronis True Image 2020 24.5.22510. anti_ransomware_service.exe...
High
Unreviewed
CVE-2020-9452
was published
May 24, 2022
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability This CVE ID is...
High
Unreviewed
CVE-2021-31201
was published
May 24, 2022
In onActivityResult of EditUserPhotoController.java, there is a possible access of unauthorized...
High
Unreviewed
CVE-2021-0481
was published
May 24, 2022
Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to escalate...
High
Unreviewed
CVE-2021-31928
was published
May 24, 2022
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a privilege escalation...
High
Unreviewed
CVE-2021-29754
was published
May 24, 2022
MODAPI.sys in MSI Dragon Center 2.0.104.0 allows low-privileged users to access kernel memory and...
High
Unreviewed
CVE-2021-29337
was published
May 24, 2022
In Octopus Deploy 2019.1.0 through 2019.3.1 and 2019.4.0 through 2019.4.5, an authenticated user...
High
Unreviewed
CVE-2019-11632
was published
May 24, 2022
Intent redirection vulnerability in Samsung Blockchain Wallet prior to version 1.3.02.8 allows...
Moderate
Unreviewed
CVE-2021-25526
was published
Dec 9, 2021
Accellion Kiteworks before 7.3.1 allows a user with Admin privileges to escalate their privileges...
Moderate
Unreviewed
CVE-2021-31585
was published
May 24, 2022
Nessus Agent 8.2.4 and earlier for Windows were found to contain multiple local privilege...
Moderate
Unreviewed
CVE-2021-20099
was published
May 24, 2022
The Windows Installation component of TIBCO Software Inc.'s TIBCO Rendezvous and TIBCO Rendezvous...
High
Unreviewed
CVE-2021-28817
was published
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API