Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,970
Maven
5,000+
npm
5,000+
NuGet
1,185
pip
5,000+
Pub
13
RubyGems
1,161
Rust
1,595
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

17,783 advisories

Loading
In QEMU 4.2.0, es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame... Low Unreviewed
CVE-2020-13361 was published May 24, 2022
testserver.cgi of the web service on VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and... Low Unreviewed
CVE-2020-11949 was published May 24, 2022
IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 is vulnerable to cross-site scripting. This... Low Unreviewed
CVE-2020-4358 was published May 24, 2022
sd_wp_addr in hw/sd/sd.c in QEMU 4.2.0 uses an unvalidated address, which leads to an out-of... Low Unreviewed
CVE-2020-13253 was published May 24, 2022
qmail-verify as used in netqmail 1.06 is prone to an information disclosure vulnerability. A... Low Unreviewed
CVE-2020-3812 was published May 24, 2022
A logic flaw in our location bar implementation could have allowed a local attacker to spoof the... Low Unreviewed
CVE-2020-12394 was published May 24, 2022
The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of... Low Unreviewed
CVE-2020-12392 was published May 24, 2022
A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where... Low Unreviewed
CVE-2020-10751 was published May 24, 2022
Composr 10.0.30 allows Persistent XSS via a Usergroup name under the Security configuration. Low Unreviewed
CVE-2020-8789 was published May 24, 2022
legend.ts in the piechart-panel (aka Pie Chart Panel) plugin before 1.5.0 for Grafana allows XSS... Low Unreviewed
CVE-2020-13429 was published May 24, 2022
A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints... Low Unreviewed
CVE-2020-3343 was published May 24, 2022
A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints... Low Unreviewed
CVE-2020-3344 was published May 24, 2022
An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) write vulnerability has... Low Unreviewed
CVE-2020-13398 was published May 24, 2022
An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has... Low Unreviewed
CVE-2020-13396 was published May 24, 2022
An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has... Low Unreviewed
CVE-2020-13397 was published May 24, 2022
A spoofing vulnerability exists in Microsoft Power BI Report Server in the way it validates the... Low Unreviewed
CVE-2020-1173 was published May 24, 2022
An information disclosure vulnerability exists in the way that the Windows Graphics Device... Low Unreviewed
CVE-2020-1141 was published May 24, 2022
An information disclosure vulnerability exists in the way that the Windows Graphics Device... Low Unreviewed
CVE-2020-1145 was published May 24, 2022
A denial of service vulnerability exists when Connected User Experiences and Telemetry Service... Low Unreviewed
CVE-2020-1123 was published May 24, 2022
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a... Low Unreviewed
CVE-2020-1107 was published May 24, 2022
An information disclosure vulnerability exists when the Windows Client Server Run-Time Subsystem ... Low Unreviewed
CVE-2020-1116 was published May 24, 2022
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a... Low Unreviewed
CVE-2020-1104 was published May 24, 2022
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a... Low Unreviewed
CVE-2020-1105 was published May 24, 2022
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not... Low Unreviewed
CVE-2020-1099 was published May 24, 2022
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not... Low Unreviewed
CVE-2020-1100 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database