Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,825
Erlang
36
GitHub Actions
32
Go
2,417
Maven
5,000+
npm
4,054
NuGet
723
pip
3,845
Pub
12
RubyGems
933
Rust
1,005
Swift
38
Unreviewed advisories
All unreviewed
5,000+

279 advisories

Loading
IBM Security Directory Server 6.4.0 generates an error message that includes sensitive... Moderate Unreviewed
CVE-2019-4547 was published May 24, 2022
IBM Security Key Lifecycle Manager 3.0.1 and 4.0 could allow a remote attacker to obtain... Moderate Unreviewed
CVE-2020-4846 was published May 24, 2022
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2,... Moderate Unreviewed
CVE-2020-4761 was published May 24, 2022
IBM Emptoris Contract Management and IBM Emptoris Spend Analysis 10.1.0, 10.1.1, and 10.1.3 could... Moderate Unreviewed
CVE-2020-4897 was published May 24, 2022
IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a... Moderate Unreviewed
CVE-2020-4487 was published May 24, 2022
IBM Security Secret Server 10.6 could allow a remote attacker to obtain sensitive information... Moderate Unreviewed
CVE-2020-4842 was published May 24, 2022
IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 could allow a remote attacker... Moderate Unreviewed
CVE-2020-4483 was published May 24, 2022
IBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive... Moderate Unreviewed
CVE-2020-4599 was published May 24, 2022
IBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive... Moderate Unreviewed
CVE-2020-4600 was published May 24, 2022
IBM Cloud Pak for Security (CP4S) 1.3.0.1 and 1.4.0.0 could allow a remote attacker to obtain... Moderate Unreviewed
CVE-2020-4628 was published May 24, 2022
IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a remote attacker to obtain... Moderate Unreviewed
CVE-2021-20402 was published May 24, 2022
IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 could allow a... Moderate Unreviewed
CVE-2020-4907 was published May 24, 2022
HCL Domino v9, v10, v11 is susceptible to an Information Disclosure vulnerability in XPages due... Moderate Unreviewed
CVE-2020-14270 was published May 24, 2022
When trying to load a cross-origin resource in an audio/video context a decoding error may have... Moderate Unreviewed
CVE-2021-23973 was published May 24, 2022
If Content Security Policy blocked frame navigation, the full destination of a redirect served in... Moderate Unreviewed
CVE-2021-23968 was published May 24, 2022
IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a... Moderate Unreviewed
CVE-2020-4544 was published May 24, 2022
IBM Security Guardium 11.2 could allow a remote attacker to obtain sensitive information when a... Moderate Unreviewed
CVE-2021-20428 was published May 24, 2022
IBM Sterling File Gateway 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6... Moderate Unreviewed
CVE-2021-39086 was published Aug 17, 2022
A vulnerability has been identified in Mendix Excel Importer Module (All versions < V9.0.3).... Moderate Unreviewed
CVE-2021-31339 was published May 24, 2022
A vulnerability has been identified in Mendix Database Replication (All versions < V7.0.1).... Moderate Unreviewed
CVE-2021-31341 was published May 24, 2022
IBM OpenPages GRC Platform 8.1 could allow a remote attacker to obtain sensitive information when... Moderate Unreviewed
CVE-2020-4536 was published May 24, 2022
IBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information... Moderate Unreviewed
CVE-2021-29682 was published May 24, 2022
IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain... Moderate Unreviewed
CVE-2021-20371 was published May 24, 2022
SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the... Moderate Unreviewed
CVE-2021-30357 was published May 24, 2022
E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a... Moderate Unreviewed
CVE-2021-26997 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database