GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,750
Erlang
35
GitHub Actions
29
Go
2,323
Maven
5,000+
npm
3,956
NuGet
712
pip
3,739
Pub
12
RubyGems
921
Rust
973
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
194 advisories
Filter by severity
Exposure of sensitive information to an unauthorized actor in Power Automate allows an...
Critical
Unreviewed
CVE-2025-47966
was published
Jun 5, 2025
In FUEL CMS 11.4.12 and before, the page preview feature allows an anonymous user to take...
Critical
Unreviewed
CVE-2020-26167
was published
May 24, 2022
PrinterShare Android application allows the capture of Gmail authentication tokens that can be...
Critical
Unreviewed
CVE-2025-5098
was published
May 23, 2025
ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have...
Critical
Unreviewed
CVE-2017-3185
was published
May 13, 2022
Password file exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows...
Critical
Unreviewed
CVE-2017-13664
was published
May 17, 2022
A remote unauthenticated network based attacker with access to Junos Space may execute arbitrary...
Critical
Unreviewed
CVE-2016-1265
was published
May 13, 2022
The Humax Wi-Fi Router model HG100R-* 2.0.6 is prone to an authentication bypass vulnerability...
Critical
Unreviewed
CVE-2017-11435
was published
May 13, 2022
In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-...
Critical
Unreviewed
CVE-2017-9788
was published
May 13, 2022
dataTaker DT80 dEX 1.50.012 allows remote attackers to obtain sensitive credential and...
Critical
Unreviewed
CVE-2017-11165
was published
May 17, 2022
A vulnerability in the AutoVNF tool for the Cisco Ultra Services Framework could allow an...
Critical
Unreviewed
CVE-2017-6709
was published
May 13, 2022
The Cloud Controller in Cloud Foundry before 239 logs user-provided service objects at creation,...
Critical
Unreviewed
CVE-2016-5006
was published
May 17, 2022
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames,...
Critical
Unreviewed
CVE-2015-7247
was published
May 17, 2022
An Information Exposure issue was discovered in Schneider Electric Wonderware InTouch Access...
Critical
Unreviewed
CVE-2017-5158
was published
May 13, 2022
Sawmill Enterprise 8.7.9 allows remote attackers to gain login access by leveraging knowledge of...
Critical
Unreviewed
CVE-2017-5496
was published
May 17, 2022
A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white...
Critical
Unreviewed
CVE-2017-5674
was published
May 17, 2022
The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the ...
Critical
Unreviewed
CVE-2016-10175
was published
May 17, 2022
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923...
Critical
Unreviewed
CVE-2025-27675
was published
Mar 5, 2025
J-Web in Juniper Junos OS before 12.1X46-D45, 12.1X46-D50, 12.1X47 before 12.1X47-D35, 12.3...
Critical
Unreviewed
CVE-2016-1279
was published
May 17, 2022
Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 sends cleartext credentials, which allows remote...
Critical
Unreviewed
CVE-2015-7915
was published
May 17, 2022
A logging issue was addressed with improved data redaction. This issue is fixed in macOS Ventura...
Critical
Unreviewed
CVE-2025-30424
was published
Apr 1, 2025
This issue was addressed with improved access restrictions. This issue is fixed in macOS Ventura...
Critical
Unreviewed
CVE-2025-24250
was published
Apr 1, 2025
An injection issue was addressed with improved validation. This issue is fixed in macOS Ventura...
Critical
Unreviewed
CVE-2025-24246
was published
Apr 1, 2025
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia...
Critical
Unreviewed
CVE-2025-24242
was published
Apr 1, 2025
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Ventura...
Critical
Unreviewed
CVE-2025-24253
was published
Apr 1, 2025
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app...
Critical
Unreviewed
CVE-2025-24204
was published
Apr 1, 2025
ProTip!
Advisories are also available from the
GraphQL API