Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,248
Erlang
31
GitHub Actions
21
Go
2,016
Maven
5,000+
npm
3,721
NuGet
662
pip
3,400
Pub
11
RubyGems
890
Rust
852
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

391 advisories

Loading
An issue found in Wondershare Technology Co., Ltd DemoCreator v.6.0.0 allows a remote attacker to... High Unreviewed
CVE-2023-27762 was published Apr 4, 2023
An issue found in Wondershare Technology Co.,Ltd MobileTrans v.4.0.2 allows a remote attacker to... High Unreviewed
CVE-2023-27763 was published Apr 4, 2023
An issue found in Wondershare Technology Co, Ltd Filmora v.12.0.9 allows a remote attacker to... High Unreviewed
CVE-2023-27760 was published Apr 4, 2023
An issue found in Wondershare Technology Co, Ltd Edrawmind v.10.0.6 allows a remote attacker to... High Unreviewed
CVE-2023-27759 was published Apr 4, 2023
An issue found in Wondershare Technology Co.,Ltd Creative Centerr v.1.0.8 allows a remote... High Unreviewed
CVE-2023-27771 was published Apr 4, 2023
An issue found in Wondershare Technology Co.,Ltd Edraw-max v.12.0.4 allows a remote attacker to... High Unreviewed
CVE-2023-27770 was published Apr 4, 2023
Creative Cloud version 5.9.1 (and earlier) is affected by an Untrusted Search Path vulnerability... High Unreviewed
CVE-2023-26358 was published Mar 22, 2023
Untrusted search path vulnerability in ELECOM Camera Assistant 1.00 and QuickFileDealer Ver.1.2.1... High Unreviewed
CVE-2023-22368 was published Feb 15, 2023
A vulnerability has been identified in TIA Multiuser Server V14 (All versions), TIA Multiuser... High Unreviewed
CVE-2022-35868 was published Feb 14, 2023
A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls... High Unreviewed
CVE-2022-4883 was published Feb 7, 2023
A privilege escalation vulnerability exists in the sudo functionality of OpenStack Kolla git... High Unreviewed
CVE-2022-38060 was published Dec 21, 2022
mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to... High Unreviewed
CVE-2022-23748 was published Nov 18, 2022
A Untrusted Search Path vulnerability in openldap2 of openSUSE Factory allows local attackers... High Unreviewed
CVE-2022-31253 was published Nov 9, 2022
Untrusted Search Path vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server Container... High Unreviewed
CVE-2022-0074 was published Oct 28, 2022
Untrusted search path vulnerability in the installer of Content Transfer (for Windows) Ver.1.3... High Unreviewed
CVE-2022-41796 was published Oct 24, 2022
Untrusted search path vulnerability in the installer of Device Software Manager prior to Ver.2.20... High Unreviewed
CVE-2022-36403 was published Sep 9, 2022
Windows CSRSS Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-22026,... High Unreviewed
CVE-2022-22047 was published Jul 13, 2022
Path settings in HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and... High Unreviewed
CVE-2019-18996 was published May 24, 2022
Adobe Dreamweaver direct download installer versions 19.0 and below, 18.0 and below have an... High Unreviewed
CVE-2019-7956 was published May 24, 2022
Uncontrolled search path in the Intel(R) RealSense(TM) D400 Series UWP driver for Windows 10... High Unreviewed
CVE-2021-33063 was published May 24, 2022
An untrusted search path in AMD Radeon settings Installer may lead to a privilege escalation or... High Unreviewed
CVE-2020-12892 was published May 24, 2022
When Octopus Server is installed using a custom folder location, folder ACLs are not set... High Unreviewed
CVE-2021-26556 was published May 24, 2022
When Octopus Tentacle is installed using a custom folder location, folder ACLs are not set... High Unreviewed
CVE-2021-26557 was published May 24, 2022
SupportAssist Client version 3.8 and 3.9 contains an Untrusted search path vulnerability that... High Unreviewed
CVE-2021-36297 was published May 24, 2022
A DLL sideloading vulnerability in McAfee Agent for Windows prior to 5.7.4 could allow a local... High Unreviewed
CVE-2021-31841 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database