Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,411
Erlang
33
GitHub Actions
22
Go
2,147
Maven
5,000+
npm
3,808
NuGet
687
pip
3,482
Pub
12
RubyGems
897
Rust
899
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

535 advisories

Loading
Adobe Premiere Elements version 2020v20 (and earlier) is affected by an Uncontrolled Search Path... High Unreviewed
CVE-2022-34235 was published Aug 12, 2022
DLL hijacking vulnerability in Samsung Update Setup prior to version 2.2.9.50 allows attackers to... High Unreviewed
CVE-2022-36840 was published Aug 6, 2022
A DLL hijacking vulnerability in the MA Smart Installer for Windows prior to 5.7.7, which allows... High Unreviewed
CVE-2022-2313 was published Jul 28, 2022
AVEVA Software Platform Common Services (PCS) Portal versions 4.5.2, 4.5.1, 4.5.0, and 4.4.6 are... High Unreviewed
CVE-2021-38410 was published Jul 28, 2022
A DLL hijacking vulnerability exists in the uninstaller in Scooter Beyond Compare 1.8a through 4... High Unreviewed
CVE-2022-36415 was published Jul 24, 2022
Dell EMC PowerStore, Versions prior to v3.0.0.0 contain a DLL Hijacking vulnerability in PSTCLI.... High Unreviewed
CVE-2022-32498 was published Jul 22, 2022
ShowMyPC 3606 on Windows suffers from a DLL hijack vulnerability. If an attacker overwrites the... High Unreviewed
CVE-2021-42923 was published Jul 19, 2022
This vulnerability allows local attackers to escalate privileges on affected installations of... High Unreviewed
CVE-2022-34901 was published Jul 19, 2022
This vulnerability allows local attackers to escalate privileges on affected installations of... High Unreviewed
CVE-2022-34902 was published Jul 19, 2022
This vulnerability allows local attackers to escalate privileges on affected installations of... High Unreviewed
CVE-2022-34900 was published Jul 19, 2022
Node.js is vulnerable to Hijack Execution Flow: DLL Hijacking under certain conditions on Windows... High Unreviewed
CVE-2022-32223 was published Jul 15, 2022
In Sage 300 ERP (formerly accpac) through 6.8.x, the installer configures the C:\Sage\Sage300... High Unreviewed
CVE-2021-45492 was published Jul 15, 2022
A vulnerability was found in Viscosity 1.6.7. It has been classified as critical. This affects an... High Unreviewed
CVE-2017-20123 was published Jul 1, 2022
A binary hijack in Embarcadero Dev-CPP v6.3 allows attackers to execute arbitrary code via a... High Unreviewed
CVE-2022-33036 was published Jun 30, 2022
XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users... High Unreviewed
CVE-2022-33035 was published Jun 30, 2022
A binary hijack in Orwell-Dev-Cpp v5.11 allows attackers to execute arbitrary code via a crafted ... High Unreviewed
CVE-2022-33037 was published Jun 30, 2022
An uncontrolled search path vulnerability in McAfee Consumer Product Removal Tool prior to... High Unreviewed
CVE-2022-1824 was published Jun 21, 2022
A vulnerability was found in InnoSetup Installer. It has been declared as problematic. Affected... High Unreviewed
CVE-2017-20051 was published Jun 17, 2022
A vulnerability classified as problematic was found in Python 2.7.13. This vulnerability affects... High Unreviewed
CVE-2017-20052 was published Jun 17, 2022
The Zoom Opener installer is downloaded by a user from the Launch meeting page, when attempting... High Unreviewed
CVE-2022-22788 was published Jun 16, 2022
Naver Cloud Explorer Beta allows the attacker to execute arbitrary code as System privilege via... High Unreviewed
CVE-2022-24077 was published Jun 14, 2022
Dell SupportAssist Client Consumer versions (3.11.0 and versions prior) and Dell SupportAssist... High Unreviewed
CVE-2022-29092 was published Jun 11, 2022
A vulnerability was found in XAMPP 7.1.1-0-VC14. It has been classified as problematic. Affected... High Unreviewed
CVE-2017-20018 was published Jun 10, 2022
DLL hijacking vulnerability in KiesWrapper in Samsung Kies prior to version 2.6.4.22043_1 allows... High Unreviewed
CVE-2022-30744 was published Jun 8, 2022
An uncontrolled search path element vulnerability in Trend Micro Apex One and Apex One as a... High Unreviewed
CVE-2022-30701 was published May 28, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database