GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,362
Erlang
33
GitHub Actions
22
Go
2,134
Maven
5,000+
npm
3,797
NuGet
687
pip
3,473
Pub
12
RubyGems
896
Rust
897
Swift
38
Unreviewed advisories
All unreviewed
5,000+
543 advisories
Filter by severity
A vulnerability classified as problematic was found in Python 2.7.13. This vulnerability affects...
High
Unreviewed
CVE-2017-20052
was published
Jun 17, 2022
An uncontrolled search path vulnerability in McAfee Consumer Product Removal Tool prior to...
High
Unreviewed
CVE-2022-1824
was published
Jun 21, 2022
A binary hijack in Embarcadero Dev-CPP v6.3 allows attackers to execute arbitrary code via a...
High
Unreviewed
CVE-2022-33036
was published
Jun 30, 2022
XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users...
High
Unreviewed
CVE-2022-33035
was published
Jun 30, 2022
A binary hijack in Orwell-Dev-Cpp v5.11 allows attackers to execute arbitrary code via a crafted ...
High
Unreviewed
CVE-2022-33037
was published
Jun 30, 2022
A vulnerability was found in Viscosity 1.6.7. It has been classified as critical. This affects an...
High
Unreviewed
CVE-2017-20123
was published
Jul 1, 2022
In Sage 300 ERP (formerly accpac) through 6.8.x, the installer configures the C:\Sage\Sage300...
High
Unreviewed
CVE-2021-45492
was published
Jul 15, 2022
Node.js is vulnerable to Hijack Execution Flow: DLL Hijacking under certain conditions on Windows...
High
Unreviewed
CVE-2022-32223
was published
Jul 15, 2022
This vulnerability allows local attackers to escalate privileges on affected installations of...
High
Unreviewed
CVE-2022-34902
was published
Jul 19, 2022
This vulnerability allows local attackers to escalate privileges on affected installations of...
High
Unreviewed
CVE-2022-34901
was published
Jul 19, 2022
This vulnerability allows local attackers to escalate privileges on affected installations of...
High
Unreviewed
CVE-2022-34900
was published
Jul 19, 2022
ShowMyPC 3606 on Windows suffers from a DLL hijack vulnerability. If an attacker overwrites the...
High
Unreviewed
CVE-2021-42923
was published
Jul 19, 2022
Dell EMC PowerStore, Versions prior to v3.0.0.0 contain a DLL Hijacking vulnerability in PSTCLI....
High
Unreviewed
CVE-2022-32498
was published
Jul 22, 2022
A DLL hijacking vulnerability exists in the uninstaller in Scooter Beyond Compare 1.8a through 4...
High
Unreviewed
CVE-2022-36415
was published
Jul 24, 2022
AVEVA Software Platform Common Services (PCS) Portal versions 4.5.2, 4.5.1, 4.5.0, and 4.4.6 are...
High
Unreviewed
CVE-2021-38410
was published
Jul 28, 2022
A DLL hijacking vulnerability in the MA Smart Installer for Windows prior to 5.7.7, which allows...
High
Unreviewed
CVE-2022-2313
was published
Jul 28, 2022
DLL hijacking vulnerability in Samsung Update Setup prior to version 2.2.9.50 allows attackers to...
High
Unreviewed
CVE-2022-36840
was published
Aug 6, 2022
Adobe Premiere Elements version 2020v20 (and earlier) is affected by an Uncontrolled Search Path...
High
Unreviewed
CVE-2022-34235
was published
Aug 12, 2022
The application searches for a library dll that is not found. If an attacker can place a dll with...
High
Unreviewed
CVE-2022-2334
was published
Aug 18, 2022
Uncontrolled search path elements in the Intel(R) VTune(TM) Profiler software before version 2022...
High
Unreviewed
CVE-2022-21807
was published
Aug 19, 2022
Uncontrolled search path element in the Intel(R) Enpirion(R) Digital Power Configurator GUI...
High
Unreviewed
CVE-2022-25999
was published
Aug 19, 2022
Uncontrolled search path in the Intel(R) Distribution for Python before version 2022.0.3 may...
High
Unreviewed
CVE-2022-28696
was published
Aug 19, 2022
Uncontrolled search path elements in the Intel(R) Datacenter Group Event Android application, all...
High
Unreviewed
CVE-2022-25841
was published
Aug 19, 2022
Uncontrolled search path in the installation binaries for Intel(R) SEAPI all versions may allow...
High
Unreviewed
CVE-2022-26374
was published
Aug 19, 2022
AutomationDirect DirectLOGIC has a DLL vulnerability in the install directory that may allow an...
High
Unreviewed
CVE-2022-2006
was published
Sep 1, 2022
ProTip!
Advisories are also available from the
GraphQL API