Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,205
Erlang
31
GitHub Actions
19
Go
1,986
Maven
5,000+
npm
3,703
NuGet
661
pip
3,329
Pub
11
RubyGems
884
Rust
843
Swift
36
Unreviewed advisories
All unreviewed
5,000+

992 advisories

Loading
A local attacker could read files from some other users' SA360 reports stored in the /tmp folder... Moderate Unreviewed
CVE-2021-22571 was published Mar 19, 2022
In parse of RoleParser.java, there is a possible way for default apps to get permissions... High Unreviewed
CVE-2021-39694 was published Mar 17, 2022
In getNotificationTag of LegacyVoicemailNotifier.java, there is a possible leak of ICCID due to a... Moderate Unreviewed
CVE-2021-39705 was published Mar 17, 2022
In onResume of CredentialStorage.java, there is a possible way to cleanup content of credentials... High Unreviewed
CVE-2021-39706 was published Mar 17, 2022
In sendMessage of OneToOneChatImpl.java (? TBD), there is a possible way to send an RCS message... High Unreviewed
CVE-2021-39734 was published Mar 17, 2022
Missing permission checks in AWS Credentials Plugin Moderate
CVE-2022-27199 was published for org.jenkins-ci.plugins:aws-credentials (Maven) Mar 16, 2022
CSRF vulnerability and missing permission checks in Extended Choice Parameter Plugin allow SSRF Moderate
CVE-2022-27205 was published for org.jenkins-ci.plugins:extended-choice-parameter (Maven) Mar 16, 2022
NotMyFault
This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Permission... Moderate Unreviewed
CVE-2021-32006 was published Mar 11, 2022
A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a... Moderate Unreviewed
CVE-2021-20269 was published Mar 11, 2022
A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with... Low Unreviewed
CVE-2021-3981 was published Mar 11, 2022
There is a permission control vulnerability in the PMS module. Successful exploitation of this... High Unreviewed
CVE-2021-40049 was published Mar 11, 2022
There is a permission control vulnerability in the Nearby module. Successful exploitation of this... Critical Unreviewed
CVE-2021-40053 was published Mar 11, 2022
There is a permission control vulnerability in the Wi-Fi module. Successful exploitation of this... Moderate Unreviewed
CVE-2021-40059 was published Mar 11, 2022
Northern.tech CFEngine Enterprise 3.15.4 before 3.15.5 has Insecure Permissions that may allow... Moderate Unreviewed
CVE-2021-44215 was published Mar 11, 2022
Northern.tech CFEngine Enterprise before 3.15.5 and 3.18.x before 3.18.1 has Insecure Permissions... Moderate Unreviewed
CVE-2021-44216 was published Mar 11, 2022
The installer of WPS Office for Windows versions prior to v11.2.0.10258 fails to configure... High Unreviewed
CVE-2022-25943 was published Mar 10, 2022
Insecure permissions in the file database.sdb of BatFlat CMS v1.3.6 allows attackers to dump the... High Unreviewed
CVE-2021-41652 was published Mar 3, 2022
The Dynamic Data Mapping module in Liferay Portal through v7.3.6 and Liferay DXP through v7.3... Moderate Unreviewed
CVE-2021-38268 was published Mar 3, 2022
JFrog Artifactory before 7.31.10, is vulnerable to Broken Access Control where a project admin... Moderate Unreviewed
CVE-2021-46270 was published Mar 3, 2022
User login denial of service in github.com/google/fscrypt Moderate
CVE-2022-25327 was published for github.com/google/fscrypt (Go) Feb 26, 2022
tdunlap607
In JetBrains TeamCity before 2021.2, health items of pull requests were shown to users who lacked... Moderate Unreviewed
CVE-2022-24337 was published Feb 26, 2022
In JetBrains YouTrack before 2021.4.31698, a custom logo could be set by a user who has read-only... Moderate Unreviewed
CVE-2022-24343 was published Feb 26, 2022
There is an improper permission management vulnerability in the Wallet apps. Successful... Moderate Unreviewed
CVE-2021-37103 was published Feb 26, 2022
WIN-911 2021 R1 and R2 are vulnerable to a permissions misconfiguration that may allow an... High Unreviewed
CVE-2022-23104 was published Feb 25, 2022
WIN-911 2021 R1 and R2 are vulnerable to a permissions misconfiguration that may allow an... High Unreviewed
CVE-2022-23922 was published Feb 25, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database