GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,354
Erlang
31
GitHub Actions
22
Go
2,120
Maven
5,000+
npm
3,779
NuGet
681
pip
3,460
Pub
12
RubyGems
892
Rust
888
Swift
38
Unreviewed advisories
All unreviewed
5,000+
24,512 advisories
Filter by severity
The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due...
Critical
Unreviewed
CVE-2017-8129
was published
May 13, 2022
QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and...
Critical
Unreviewed
CVE-2017-6359
was published
May 13, 2022
D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and...
Critical
Unreviewed
CVE-2017-6205
was published
May 13, 2022
On Wireless IP Camera (P2P) WIFICAM devices, access to .ini files (containing credentials) is not...
Critical
Unreviewed
CVE-2017-8225
was published
May 13, 2022
QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and obtain...
Critical
Unreviewed
CVE-2017-6360
was published
May 13, 2022
On Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgw_v1.02.0014 4.20, the backup/restore...
Critical
Unreviewed
CVE-2017-6531
was published
May 13, 2022
Microsoft Skype 7.16.0.102 contains a vulnerability that could allow an unauthenticated, remote...
Critical
Unreviewed
CVE-2017-6517
was published
May 13, 2022
In Avast Antivirus before v17, using the LPC interface API exposed by the AvastSVC.exe Windows...
Critical
Unreviewed
CVE-2017-8307
was published
May 13, 2022
QNAP QTS before 4.2.4 Build 20170313 allows attackers to execute arbitrary commands via...
Critical
Unreviewed
CVE-2017-6361
was published
May 13, 2022
A vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an...
Critical
Unreviewed
CVE-2017-6640
was published
May 13, 2022
An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06...
Critical
Unreviewed
CVE-2017-6342
was published
May 13, 2022
An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and...
Critical
Unreviewed
CVE-2017-6409
was published
May 13, 2022
An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to unauthenticated...
Critical
Unreviewed
CVE-2017-6526
was published
May 13, 2022
Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgw_v1.02.0014 4.20 have cleartext credentials in...
Critical
Unreviewed
CVE-2017-6532
was published
May 13, 2022
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1,...
Critical
Unreviewed
CVE-2017-8589
was published
May 13, 2022
A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Data Center...
Critical
Unreviewed
CVE-2017-6639
was published
May 13, 2022
A vulnerability in the web interface for Cisco Prime Collaboration Provisioning could allow an...
Critical
Unreviewed
CVE-2017-6622
was published
May 13, 2022
In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer...
Critical
Unreviewed
CVE-2017-9264
was published
May 13, 2022
readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing...
Critical
Unreviewed
CVE-2017-6969
was published
May 13, 2022
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping...
Critical
Unreviewed
CVE-2017-6972
was published
May 13, 2022
A Remote Bypass Security Restriction vulnerability in HPE Network Node Manager i (NNMi) Software...
Critical
Unreviewed
CVE-2017-8948
was published
May 13, 2022
HPE has identified a remote privilege escalation vulnerability in HPE CentralView Fraud Risk...
Critical
Unreviewed
CVE-2017-8992
was published
May 13, 2022
An error when handling certain external commands and services related to the FlexNet Inventory...
Critical
Unreviewed
CVE-2017-6885
was published
May 13, 2022
An Authentication Bypass vulnerability in HPE MSA 1040 and MSA 2040 SAN Storage IN version...
Critical
Unreviewed
CVE-2017-8960
was published
May 13, 2022
The user-account creation feature in Chef Manage 2.1.0 through 2.4.4 allows remote attackers to...
Critical
Unreviewed
CVE-2017-7174
was published
May 13, 2022
ProTip!
Advisories are also available from the
GraphQL API