Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
3,941
Erlang
29
GitHub Actions
16
Go
1,722
Maven
4,952
npm
3,482
NuGet
605
pip
3,050
Pub
10
RubyGems
832
Rust
778
Swift
34
Unreviewed advisories
All unreviewed
5,000+

60 advisories

In onCreate of PaymentDefaultDialog.java, there is a possible way to change a default payment app... Low Unreviewed
CVE-2021-0992 was published Dec 16, 2021
Escalation of privileges vulnerability in Micro Focus in Micro Focus Operations Agent, affecting... Low Unreviewed
CVE-2021-38129 was published Jan 26, 2022
Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.R26 allows... Low Unreviewed
CVE-2020-7281 was published May 24, 2022
The apt-cacher-ng package of openSUSE Leap 15.1 runs operations in user owned directory /run/apt... Low Unreviewed
CVE-2019-18899 was published May 24, 2022
An improper usage of implicit intent in SemRewardManager prior to SMR Dec-2021 Release 1 allows... Low Unreviewed
CVE-2021-25515 was published Dec 9, 2021
Rapid7 Insight Agent, versions prior to 3.1.3, suffer from an improper access control... Low Unreviewed
CVE-2021-4016 was published Jan 22, 2022
Improper directory permissions in Intel(R) PROSet/Wireless WiFi Software before version 21.40 may... Low Unreviewed
CVE-2019-11154 was published May 24, 2022
An issue was discovered in Cyrus IMAP before 2.5.15, 3.0.x before 3.0.13, and 3.1.x through 3.1.8... Low Unreviewed
CVE-2019-19783 was published May 24, 2022
An issue was discovered in PRTG 7.x through 19.4.53. Due to insufficient access control on local... Low Unreviewed
CVE-2019-19119 was published May 24, 2022
Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP... Low Unreviewed
CVE-2020-5825 was published May 24, 2022
An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM)... Low Unreviewed
CVE-2020-0854 was published May 24, 2022
In smsSelected of AnswerFragment.java, there is a way to send an SMS from the lock screen due to... Low Unreviewed
CVE-2020-0052 was published May 24, 2022
An elevation of privilege vulnerability exists when a Windows scheduled task improperly handles... Low Unreviewed
CVE-2020-0936 was published May 24, 2022
An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service... Low Unreviewed
CVE-2020-0899 was published May 24, 2022
An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service... Low Unreviewed
CVE-2020-0900 was published May 24, 2022
An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry... Low Unreviewed
CVE-2020-0942 was published May 24, 2022
In FreeBSD 12.1-STABLE before r356089, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before... Low Unreviewed
CVE-2019-15876 was published May 24, 2022
qmail-verify as used in netqmail 1.06 is prone to an information disclosure vulnerability. A... Low Unreviewed
CVE-2020-3812 was published May 24, 2022
An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM)... Low Unreviewed
CVE-2020-1204 was published May 24, 2022
Hashicorp Vault Privilege Escalation Vulnerability Low
CVE-2021-41802 was published for github.com/hashicorp/vault (Go) Oct 12, 2021
In connect() of PanService.java, there is a possible permissions bypass. This could lead to local... Low Unreviewed
CVE-2020-0177 was published May 24, 2022
IBM Security Guardium 11.1 could allow an attacker on the same network to gain access to the Solr... Low Unreviewed
CVE-2020-4307 was published May 24, 2022
An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file... Low Unreviewed
CVE-2020-1461 was published May 24, 2022
IOBit Advanced SystemCare Free 13.5.0.263 allows local users to gain privileges for file deletion... Low Unreviewed
CVE-2020-14990 was published May 24, 2022
An elevation of privilege vulnerability exists in Avast Free Antivirus and AVG AntiVirus Free... Low Unreviewed
CVE-2020-13657 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API