Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,198
Erlang
31
GitHub Actions
19
Go
1,986
Maven
5,000+
npm
3,702
NuGet
660
pip
3,328
Pub
11
RubyGems
883
Rust
843
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

20,469 advisories

Loading
Akuvox C315 115.116.2613 allows remote command Injection via the cfgd_server service. The attack... Critical Unreviewed
CVE-2021-31726 was published May 24, 2022
Webmin 1.973 is affected by reflected Cross Site Scripting (XSS) to achieve Remote Command... Critical Unreviewed
CVE-2021-31761 was published May 24, 2022
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab... Critical Unreviewed
CVE-2021-22205 was published May 24, 2022
The unofficial vscode-ghc-simple (aka Simple Glasgow Haskell Compiler) extension before 0.2.3 for... Critical Unreviewed
CVE-2021-30502 was published May 24, 2022
Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage... Critical Unreviewed
CVE-2021-2319 was published May 24, 2022
Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage... Critical Unreviewed
CVE-2021-2318 was published May 24, 2022
Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage... Critical Unreviewed
CVE-2021-2320 was published May 24, 2022
Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component:... Critical Unreviewed
CVE-2021-2177 was published May 24, 2022
Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage... Critical Unreviewed
CVE-2021-2317 was published May 24, 2022
Vulnerability in the Oracle Advanced Supply Chain Planning product of Oracle Supply Chain ... Critical Unreviewed
CVE-2021-2253 was published May 24, 2022
Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component:... Critical Unreviewed
CVE-2021-2248 was published May 24, 2022
Vulnerability in the Oracle Storage Cloud Software Appliance product of Oracle Storage Gateway ... Critical Unreviewed
CVE-2021-2256 was published May 24, 2022
Vulnerability in the Hyperion Analytic Provider Services product of Oracle Hyperion (component:... Critical Unreviewed
CVE-2021-2244 was published May 24, 2022
Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component:... Critical Unreviewed
CVE-2021-2221 was published May 24, 2022
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component:... Critical Unreviewed
CVE-2021-2200 was published May 24, 2022
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing... Critical Unreviewed
CVE-2021-2205 was published May 24, 2022
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)... Critical Unreviewed
CVE-2021-2136 was published May 24, 2022
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component:... Critical Unreviewed
CVE-2021-2135 was published May 24, 2022
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ... Critical Unreviewed
CVE-2021-2302 was published May 24, 2022
Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass... Critical Unreviewed
CVE-2021-22893 was published May 24, 2022
Path Traversal in FeiFeiCMS v4.0 allows remote attackers to delete arbitrary files by sending a... Critical Unreviewed
CVE-2020-17564 was published May 24, 2022
The Business Hours Pro WordPress plugin through 5.5.0 allows a remote attacker to upload... Critical Unreviewed
CVE-2021-24240 was published May 24, 2022
Path Traversal in FeiFeiCMS v4.0 allows remote attackers to delete arbitrary files by sending a... Critical Unreviewed
CVE-2020-17563 was published May 24, 2022
A vulnerability has been identified in Nucleus 4 (All versions < V4.1.0), Nucleus NET (All... Critical Unreviewed
CVE-2020-27738 was published May 24, 2022
A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < 5.5.1), SCALANCE X201... Critical Unreviewed
CVE-2021-25669 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database