GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,224
Erlang
31
GitHub Actions
19
Go
1,990
Maven
5,000+
npm
3,706
NuGet
661
pip
3,336
Pub
11
RubyGems
884
Rust
845
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
1,369 advisories
Filter by severity
Under certain conditions, SAP BusinessObjects Business Intelligence platform, Client Management...
High
Unreviewed
CVE-2022-27667
was published
Apr 13, 2022
FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows unauthenticated attackers to access and download...
High
Unreviewed
CVE-2022-26591
was published
Apr 7, 2022
The Booking Package WordPress plugin before 1.5.29 requires a token for exporting the ical...
High
Unreviewed
CVE-2022-0709
was published
Apr 5, 2022
It was observed that while login into Business-central console, HTTP request discloses sensitive...
High
Unreviewed
CVE-2019-14839
was published
Apr 3, 2022
A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0. It has been declared as...
High
Unreviewed
CVE-2022-1077
was published
Mar 30, 2022
The Reporting module in Aseco Lietuva document management system DVS Avilys before 2022-03-10...
High
Unreviewed
CVE-2022-27192
was published
Mar 25, 2022
MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to...
High
Unreviewed
CVE-2022-25568
was published
Mar 25, 2022
Bluedon Information Security Technologies Co.,Ltd Internet Access Detector v1.0 was discovered to...
High
Unreviewed
CVE-2022-25571
was published
Mar 25, 2022
GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP...
High
Unreviewed
CVE-2021-27422
was published
Mar 24, 2022
Simple Diagnostics Agent - versions 1.0 (up to version 1.57.), allows an attacker to access...
High
Unreviewed
CVE-2022-22547
was published
Mar 11, 2022
Sensitive information disclosure discovered in wpDiscuz WordPress plugin (versions <= 7.3.11).
High
Unreviewed
CVE-2022-23984
was published
Feb 22, 2022
The vulnerability discovered in WordPress Perfect Brands for WooCommerce plugin (versions <= 2.0...
High
Unreviewed
CVE-2022-23982
was published
Feb 19, 2022
** UNSUPPORTED WHEN ASSIGNED ** Emerson Dixell XWEB-500 products are affected by information...
High
Unreviewed
CVE-2021-45421
was published
Feb 15, 2022
A CWE-200: Information Exposure vulnerability exists that could cause sensitive information of...
High
Unreviewed
CVE-2021-22785
was published
Feb 12, 2022
An Information Disclosure vulnerability for JT files in Autodesk Inventor 2022, 2021, 2020, 2019...
High
Unreviewed
CVE-2021-40159
was published
Feb 11, 2022
SAP Adaptive Server Enterprise (ASE) - version 16.0, installation makes an entry in the system...
High
Unreviewed
CVE-2022-22528
was published
Feb 11, 2022
IBM OPENBMC OP920, OP930, and OP940 could allow an unauthenticated user to obtain sensitive...
High
Unreviewed
CVE-2021-38960
was published
Feb 10, 2022
A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS...
High
Unreviewed
CVE-2021-40360
was published
Feb 10, 2022
Exposure of sensitive information to an unauthorized actor vulnerability in Web Server in...
High
Unreviewed
CVE-2022-22680
was published
Feb 8, 2022
XMPie uStore 12.3.7244.0 allows for administrators to generate reports based on raw SQL queries....
High
Unreviewed
CVE-2022-23320
was published
Feb 8, 2022
A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that...
High
Unreviewed
CVE-2021-22825
was published
Jan 29, 2022
Information Exposure vulnerability in Hitachi Energy LinkOne application, due to a...
High
Unreviewed
CVE-2021-40340
was published
Jan 29, 2022
An information disclosure vulnerability exists due to a web server misconfiguration in the...
High
Unreviewed
CVE-2022-21236
was published
Jan 29, 2022
The Plus Addons for Elementor - Pro WordPress plugin before 5.0.7 does not validate the qvquery...
High
Unreviewed
CVE-2021-24948
was published
Jan 11, 2022
hoppscotch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
High
Unreviewed
CVE-2022-0121
was published
Jan 7, 2022
ProTip!
Advisories are also available from the
GraphQL API