Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,239
Erlang
31
GitHub Actions
21
Go
2,007
Maven
5,000+
npm
3,716
NuGet
662
pip
3,388
Pub
11
RubyGems
885
Rust
851
Swift
36
Unreviewed advisories
All unreviewed
5,000+

742 advisories

Loading
A flaw was discovered in ECE before 3.1.1 that could lead to the disclosure of the SAML signing... Moderate Unreviewed
CVE-2022-23716 was published Sep 29, 2022
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5... Moderate Unreviewed
CVE-2020-4671 was published May 24, 2022
IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 - Business Automation Application Designer... Moderate Unreviewed
CVE-2021-20359 was published May 24, 2022
Under certain conditions, Teradici PCoIP Agents for Windows prior to version 20.10.0 and Teradici... Moderate Unreviewed
CVE-2021-25688 was published May 24, 2022
Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contain a plain-text... Moderate Unreviewed
CVE-2020-26199 was published May 24, 2022
Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.20, 9.2.1.13, 9.3.0.6, and 9.4.0... High Unreviewed
CVE-2022-34369 was published Sep 3, 2022
There is an information leakage vulnerability in some huawei products. Due to the properly... Moderate Unreviewed
CVE-2021-22310 was published May 24, 2022
A vulnerability in the audit logging component of Cisco Unified Communications Manager, Cisco... Moderate Unreviewed
CVE-2021-1226 was published May 24, 2022
A vulnerability in a diagnostic command for the Plug-and-Play (PnP) subsystem of Cisco IOS XE... High Unreviewed
CVE-2021-1442 was published May 24, 2022
Information Exposure vulnerability in Samsung Account prior to version 12.1.1.3 allows physically... Low Unreviewed
CVE-2021-25350 was published May 24, 2022
An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS... Moderate Unreviewed
CVE-2021-3036 was published May 24, 2022
Dell EMC NetWorker, 18.x, 19.1.x, 19.2.x 19.3.x, 19.4 and 19.4.0.1, contains an Information... Moderate Unreviewed
CVE-2021-21558 was published May 24, 2022
IBM Spectrum Protect Plus File Systems Agent 10.1.6 and 10.1.7 stores potentially sensitive... Moderate Unreviewed
CVE-2021-20536 was published May 24, 2022
An information exposure through log file vulnerability exists in the Palo Alto Networks Prisma... Moderate Unreviewed
CVE-2021-3039 was published May 24, 2022
In sspRequestCallback of BondStateMachine.java, there is a possible leak of Bluetooth MAC... Moderate Unreviewed
CVE-2021-0549 was published May 24, 2022
BMC Remedy Mid Tier 9.1SP3 is affected by log hijacking. Remote logging can be accessed by... Moderate Unreviewed
CVE-2017-17675 was published May 24, 2022
A flaw was found in the AMQ Broker that discloses JDBC encrypted usernames and passwords when... Moderate Unreviewed
CVE-2021-3425 was published May 24, 2022
Insertion of Sensitive Information into Log File vulnerability in Micro Focus Secure API Manager ... High Unreviewed
CVE-2021-22516 was published May 24, 2022
GitLab CE/EE since version 9.5 allows a high privilege user to obtain sensitive information from... Moderate Unreviewed
CVE-2021-22219 was published May 24, 2022
Improper log management vulnerability in Galaxy Watch3 PlugIn prior to version 2.2.09.21033151... Moderate Unreviewed
CVE-2021-25421 was published May 24, 2022
A flaw was found in several ansible modules, where parameters containing credentials, such as... Unknown Unreviewed
CVE-2021-3447 was published May 24, 2022
An issue was discovered in Devolutions Server before 2020.3. There is an exposure of sensitive... High Unreviewed
CVE-2021-23924 was published May 24, 2022
A clear text storage of sensitive information into log file vulnerability in FortiADCManager 5.3... Moderate Unreviewed
CVE-2021-24024 was published May 24, 2022
Automox Agent prior to version 31 logs potentially sensitive information in local log files,... Low Unreviewed
CVE-2021-26908 was published May 24, 2022
Improper log management vulnerability in Watch Active PlugIn prior to version 2.2.07.21033151... Moderate Unreviewed
CVE-2021-25422 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database