GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,077
Erlang
29
GitHub Actions
19
Go
1,903
Maven
5,000+
npm
3,632
NuGet
638
pip
3,249
Pub
10
RubyGems
864
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+
10,604 advisories
Filter by severity
Improper Input Validation in Plex Media Server on Windows allows a local, unauthenticated...
High
Unreviewed
CVE-2020-5740
was published
May 24, 2022
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious...
Moderate
Unreviewed
CVE-2023-28026
was published
Jun 23, 2023
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious...
Moderate
Unreviewed
CVE-2023-28052
was published
Jun 23, 2023
In pqframework, there is a possible out of bounds read due to a missing bounds check. This could...
Moderate
Unreviewed
CVE-2023-20719
was published
May 16, 2023
Vulnerability of input parameter verification in certain APIs in the window management module....
High
Unreviewed
CVE-2023-39390
was published
Aug 13, 2023
Input verification vulnerability in the WMS API. Successful exploitation of this vulnerability...
High
Unreviewed
CVE-2023-37241
was published
Jul 6, 2023
Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a...
High
Unreviewed
CVE-2019-13270
was published
May 24, 2022
A vulnerability in the Tool Command Language (Tcl) interpreter of Cisco IOS Software and Cisco...
High
Unreviewed
CVE-2020-3204
was published
May 24, 2022
cPanel before 74.0.8 allows local users to disable the ClamAV daemon (SEC-409).
Low
Unreviewed
CVE-2018-20873
was published
May 24, 2022
Dell VxRail, version(s) 8.0.100 and earlier contain a denial-of-service vulnerability in the...
High
Unreviewed
CVE-2023-32463
was published
Jun 23, 2023
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious...
Moderate
Unreviewed
CVE-2023-25937
was published
Jun 23, 2023
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious...
Moderate
Unreviewed
CVE-2023-28027
was published
Jun 23, 2023
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious...
Moderate
Unreviewed
CVE-2023-28056
was published
Jun 23, 2023
A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Managed...
High
Unreviewed
CVE-2019-1891
was published
May 24, 2022
cPanel before 68.0.15 can perform unsafe file operations because Jailshell does not set the umask...
High
Unreviewed
CVE-2017-18388
was published
May 24, 2022
Cryptocat before 2.0.22 has Arbitrary Code Execution on Firefox Conversation Overview
Critical
Unreviewed
CVE-2013-2259
was published
May 5, 2022
Cryptocat before 2.0.22 has Remote Denial of Service via username
High
Unreviewed
CVE-2013-4100
was published
May 5, 2022
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a...
High
Unreviewed
CVE-2022-33894
was published
May 10, 2023
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious...
Moderate
Unreviewed
CVE-2023-28036
was published
Jun 23, 2023
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Content Spoofing.
Moderate
Unreviewed
CVE-2017-8341
was published
May 24, 2022
Improper input validation in BIOS firmware for Intel(R) NUC, Intel(R) NUC Performance Kit, Intel...
Moderate
Unreviewed
CVE-2022-37327
was published
May 10, 2023
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious...
Moderate
Unreviewed
CVE-2023-28030
was published
Jun 23, 2023
cPanel before 62.0.17 allows does not preserve security policy questions across an account rename...
Moderate
Unreviewed
CVE-2017-18461
was published
May 24, 2022
cPanel before 64.0.21 allows code execution by webmail and demo accounts via a store_filter API...
High
Unreviewed
CVE-2017-18433
was published
May 24, 2022
Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel...
High
Unreviewed
CVE-2019-11137
was published
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API