GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,077
Erlang
29
GitHub Actions
19
Go
1,902
Maven
5,000+
npm
3,631
NuGet
638
pip
3,246
Pub
10
RubyGems
863
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
3,207 advisories
Filter by severity
Certain NETGEAR devices are affected by server-side injection. This affects RBK40 before 2.5.1.16...
High
Unreviewed
CVE-2021-45659
was published
Dec 27, 2021
Microsoft Defender for IoT Remote Code Execution Vulnerability This CVE ID is unique from CVE...
High
Unreviewed
CVE-2021-41365
was published
Dec 16, 2021
Microsoft SharePoint Server Remote Code Execution Vulnerability This CVE ID is unique from CVE...
High
Unreviewed
CVE-2021-42294
was published
Dec 16, 2021
Microsoft Defender for IoT Remote Code Execution Vulnerability This CVE ID is unique from CVE...
Critical
Unreviewed
CVE-2021-42310
was published
Dec 16, 2021
Microsoft SharePoint Server Remote Code Execution Vulnerability This CVE ID is unique from CVE...
High
Unreviewed
CVE-2021-42309
was published
Dec 16, 2021
Microsoft Defender for IoT Remote Code Execution Vulnerability This CVE ID is unique from CVE...
Critical
Unreviewed
CVE-2021-42311
was published
Dec 16, 2021
Microsoft Defender for IoT Remote Code Execution Vulnerability This CVE ID is unique from CVE...
High
Unreviewed
CVE-2021-42314
was published
Dec 16, 2021
Microsoft Defender for IoT Remote Code Execution Vulnerability This CVE ID is unique from CVE...
High
Unreviewed
CVE-2021-42315
was published
Dec 16, 2021
Web Media Extensions Remote Code Execution Vulnerability
Critical
Unreviewed
CVE-2021-43214
was published
Dec 16, 2021
iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution
Critical
Unreviewed
CVE-2021-43215
was published
Dec 16, 2021
Windows Encrypting File System (EFS) Remote Code Execution Vulnerability
Critical
Unreviewed
CVE-2021-43217
was published
Dec 16, 2021
Bot Framework SDK Remote Code Execution Vulnerability
Critical
Unreviewed
CVE-2021-43225
was published
Dec 16, 2021
Windows Event Tracing Remote Code Execution Vulnerability
High
Unreviewed
CVE-2021-43232
was published
Dec 16, 2021
Remote Desktop Client Remote Code Execution Vulnerability
High
Unreviewed
CVE-2021-43233
was published
Dec 16, 2021
Microsoft Office Graphics Remote Code Execution Vulnerability
High
Unreviewed
CVE-2021-43875
was published
Dec 16, 2021
Microsoft Defender for IoT Remote Code Execution Vulnerability This CVE ID is unique from CVE...
Critical
Unreviewed
CVE-2021-43882
was published
Dec 16, 2021
Microsoft Defender for IoT Remote Code Execution Vulnerability This CVE ID is unique from CVE...
High
Unreviewed
CVE-2021-43889
was published
Dec 16, 2021
Visual Studio Code Remote Code Execution Vulnerability
High
Unreviewed
CVE-2021-43891
was published
Dec 16, 2021
Microsoft 4K Wireless Display Adapter Remote Code Execution Vulnerability
Critical
Unreviewed
CVE-2021-43899
was published
Dec 16, 2021
In StackStorm versions prior to 3.6.0, the jinja interpreter was not run in sandbox mode and thus...
High
Unreviewed
CVE-2021-44657
was published
Dec 16, 2021
Internally used text extraction reports allow an attacker to inject code that can be executed by...
Critical
Unreviewed
CVE-2021-44231
was published
Dec 15, 2021
Two methods of a utility class in SAP NetWeaver AS ABAP - versions 700, 701, 702, 710, 711, 730,...
High
Unreviewed
CVE-2021-44235
was published
Dec 15, 2021
A security vulnerability has been identified in HPE StoreServ Management Console (SSMC). An...
High
Unreviewed
CVE-2021-29214
was published
Dec 11, 2021
There is a Code Injection vulnerability in Huawei Smartphone.Successful exploitation of this...
High
Unreviewed
CVE-2021-37097
was published
Dec 9, 2021
A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an...
Critical
Unreviewed
CVE-2021-44529
was published
Dec 9, 2021
ProTip!
Advisories are also available from the
GraphQL API