Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,279
Erlang
31
GitHub Actions
21
Go
2,056
Maven
5,000+
npm
3,740
NuGet
668
pip
3,421
Pub
12
RubyGems
891
Rust
873
Swift
36
Unreviewed advisories
All unreviewed
5,000+

411 advisories

Loading
Untrusted search path vulnerability in Evernote for Windows versions prior to 6.3 allows remote... High Unreviewed
CVE-2016-4900 was published May 17, 2022
Untrusted search path vulnerability in the installer of Tera Term 4.94 and earlier allows an... High Unreviewed
CVE-2017-2193 was published May 17, 2022
Untrusted search path vulnerability in screensaver installers (jasdf_01.exe, jasdf_02.exe,... High Unreviewed
CVE-2017-2176 was published May 17, 2022
Untrusted search path vulnerability in PatchJGD (Hyoko) (PatchJGDh101.EXE) ver. 1.0.1 allows an... High Unreviewed
CVE-2017-2211 was published May 17, 2022
Untrusted search path vulnerability in Installer for PrimeDrive Desktop Application version 1.4.4... High Unreviewed
CVE-2017-2167 was published May 17, 2022
Editions of Rapid7 AppSpider Pro installers prior to version 6.14.060 contain a DLL preloading... High Unreviewed
CVE-2017-5236 was published May 17, 2022
Untrusted search path vulnerability in the installer of PhishWall Client Internet Explorer before... High Unreviewed
CVE-2016-4846 was published May 17, 2022
Untrusted search path vulnerability in Empirical Project Monitor - eXtended all versions allows... High Unreviewed
CVE-2017-2175 was published May 17, 2022
Untrusted search path vulnerability in PrimeDrive Desktop Application 1.4.3 and earlier allows... High Unreviewed
CVE-2017-2108 was published May 17, 2022
Untrusted search path vulnerability in Installer of electronic tendering and bid opening system... High Unreviewed
CVE-2017-2178 was published May 17, 2022
Untrusted search path vulnerability in Amazon Kindle for PC before 1.19 allows local users to... High Unreviewed
CVE-2017-6189 was published May 17, 2022
Rapid7 Metasploit Pro installers prior to version 4.13.0-2017022101 contain a DLL preloading... High Unreviewed
CVE-2017-5235 was published May 17, 2022
Adobe Thor versions 3.9.5.353 and earlier have a vulnerability in the directory search path used... High Unreviewed
CVE-2017-3007 was published May 17, 2022
Rapid7 Insight Collector installers prior to version 1.0.16 contain a DLL preloading... High Unreviewed
CVE-2017-5234 was published May 17, 2022
All editions of Rapid7 Nexpose installers prior to version 6.4.24 contain a DLL preloading... High Unreviewed
CVE-2017-5232 was published May 17, 2022
Untrusted search path vulnerability in the installer for TrueCrypt 7.2 and 7.1a, VeraCrypt before... High Unreviewed
CVE-2016-1281 was published May 17, 2022
Untrusted search path vulnerability in the CMainThread::launchDownloader function in... High Unreviewed
CVE-2015-6305 was published May 17, 2022
Untrusted search path vulnerability in Foxit Reader before 5.0.2.0718 allows local users to gain... High Unreviewed
CVE-2011-3691 was published May 17, 2022
DLL Search Order Hijacking vulnerability in Microsoft Windows Client in McAfee True Key (TK)... High Unreviewed
CVE-2018-6700 was published May 13, 2022
An arbitrary file write vulnerability in Avast Premium Security before v21.11.2500 (build 21.11... High Unreviewed
CVE-2022-28964 was published May 21, 2022
In PaperStream IP (TWAIN) 1.42.0.5685 (Service Update 7), the FJTWSVIC service running with... High Unreviewed
CVE-2018-16156 was published May 24, 2022
Creative Cloud Desktop Application (installer) versions 4.7.0.400 and earlier have an insecure... High Unreviewed
CVE-2019-7093 was published May 24, 2022
NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in... High Unreviewed
CVE-2019-5676 was published May 24, 2022
A vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v82 for macOS... High Unreviewed
CVE-2019-12576 was published May 24, 2022
A DLL hijacking vulnerability exists in the Trend Micro Security's 2019 consumer family of... High Unreviewed
CVE-2019-14686 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database