Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,411
Erlang
33
GitHub Actions
22
Go
2,146
Maven
5,000+
npm
3,808
NuGet
687
pip
3,481
Pub
12
RubyGems
897
Rust
899
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

535 advisories

Loading
EOL Product CVE - Installer of Trend Micro Password Manager (Consumer) versions 3.7.0.1223 and... High Unreviewed
CVE-2022-28394 was published May 28, 2022
Check Point Endpoint Security Client for Windows before version E84.20 allows write access to the... High Unreviewed
CVE-2020-6021 was published May 24, 2022
Many of the services used by the affected product do not specify full paths for the DLLs they are... High Unreviewed
CVE-2021-38469 was published May 24, 2022
In Chris Walz bit before 1.0.5 on Windows, attackers can run arbitrary code via a .exe file in a... High Unreviewed
CVE-2021-28954 was published May 24, 2022
Uncontrolled search path in software installer for Intel(R) PROSet/Wireless WiFi in Windows 10... High Unreviewed
CVE-2021-0082 was published May 24, 2022
DLL Search Order Hijacking Vulnerability in McAfee Drive Encryption (MDE) prior to 7.3.0 HF2 (7.3... High Unreviewed
CVE-2021-31853 was published May 24, 2022
Delta Electronics DIALink versions 1.2.4.0 and prior default permissions give extensive... High Unreviewed
CVE-2021-38420 was published May 24, 2022
Delta Electronics DIALink versions 1.2.4.0 and prior insecurely loads libraries, which may allow... High Unreviewed
CVE-2021-38416 was published May 24, 2022
Under certain circumstances, when manipulating the Windows registry, InstallBuilder uses the reg... High Unreviewed
CVE-2021-22037 was published May 24, 2022
The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to... High Unreviewed
CVE-2021-30359 was published May 24, 2022
An uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a... High Unreviewed
CVE-2021-42101 was published May 24, 2022
An uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a... High Unreviewed
CVE-2021-42103 was published May 24, 2022
An uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a... High Unreviewed
CVE-2021-42102 was published May 24, 2022
An uncontrolled search path element privilege escalation vulnerability in Trend Micro HouseCall... High Unreviewed
CVE-2021-32466 was published May 24, 2022
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017... High Unreviewed
CVE-2021-35982 was published May 24, 2022
ASUS ROG Armoury Crate Lite before 4.2.10 allows local users to gain privileges by placing a... High Unreviewed
CVE-2021-40981 was published May 24, 2022
Dr.Web Firewall 12.5.2.4160 on Windows incorrectly restricts applications signed by Dr.Web. A DLL... High Unreviewed
CVE-2021-28130 was published May 24, 2022
DLL hijacking in Panda Agent <=1.16.11 in Panda Security, S.L.U. Panda Adaptive Defense 360 <= 8... High Unreviewed
CVE-2021-26750 was published May 24, 2022
Improper access control vulnerability in the repair process for McAfee Agent for Windows prior to... High Unreviewed
CVE-2021-31847 was published May 24, 2022
Adobe Creative Cloud Desktop 3.5 (and earlier) is affected by an uncontrolled search path... High Unreviewed
CVE-2021-28581 was published May 24, 2022
LINE for Windows 6.2.1.2289 and before allows arbitrary code execution via malicious DLL injection. High Unreviewed
CVE-2021-36216 was published May 24, 2022
A CWE-427: Uncontrolled Search Path Element vulnerability exists in GP-Pro EX,V4.09.250 and prior... High Unreviewed
CVE-2021-22775 was published May 24, 2022
Untrusted search path vulnerability in the installer of Sony Audio USB Driver V1.10 and prior and... High Unreviewed
CVE-2021-20793 was published May 24, 2022
Adobe Creative Cloud Desktop Application (installer) version 2.4 (and earlier) is affected by an... High Unreviewed
CVE-2021-28594 was published May 24, 2022
Adobe Dimension version 3.4 (and earlier) is affected by an Uncontrolled Search Path Element... High Unreviewed
CVE-2021-28595 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database