Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,239
Erlang
31
GitHub Actions
21
Go
2,007
Maven
5,000+
npm
3,716
NuGet
662
pip
3,388
Pub
11
RubyGems
885
Rust
851
Swift
36
Unreviewed advisories
All unreviewed
5,000+

191 advisories

Loading
On BIG-IP 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, when negotiating IPSec tunnels... Moderate Unreviewed
CVE-2020-5938 was published May 24, 2022
A hardcoded AES key in CipherUtils.java in the Java applet of konzept-ix publiXone before 2020... Moderate Unreviewed
CVE-2020-27181 was published May 24, 2022
In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode... Moderate Unreviewed
CVE-2020-7069 was published May 24, 2022
In various functions in fscrypt_ice.c and related files in some implementations of f2fs... Moderate Unreviewed
CVE-2020-0407 was published May 24, 2022
The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being... Moderate Unreviewed
CVE-2020-1968 was published May 24, 2022
This vulnerability allows remote attackers to disclose sensitive information on affected... Moderate Unreviewed
CVE-2020-10919 was published May 24, 2022
The private-key operations in ecc.c in wolfSSL before 4.4.0 do not use a constant-time modular... Moderate Unreviewed
CVE-2020-11735 was published May 24, 2022
** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web Server 7.0.x has Incorrect Access... Moderate Unreviewed
CVE-2020-9315 was published May 24, 2022
On versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.4, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5... Moderate Unreviewed
CVE-2020-5884 was published May 24, 2022
On versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, and 12.1.0-12.1.5.1, BIG-IP... Moderate Unreviewed
CVE-2020-5886 was published May 24, 2022
On versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, and 12.1.0-12.1.5.1, BIG-IP... Moderate Unreviewed
CVE-2020-5885 was published May 24, 2022
A missing secure communication definition and an incomplete TLS validation in the upgrade service... Moderate Unreviewed
CVE-2019-19101 was published May 24, 2022
A weak encryption vulnerability in Mitel MiVoice Connect Client before 214.100.1214.0 could allow... Moderate Unreviewed
CVE-2020-10377 was published May 24, 2022
ABB eSOMS versions 4.0 to 6.0.3 accept connections using medium strength ciphers. If a connection... Moderate Unreviewed
CVE-2019-19097 was published May 24, 2022
A logic issue was addressed with improved state management. This issue is fixed in iOS 13.4 and... Moderate Unreviewed
CVE-2020-9770 was published May 24, 2022
On BIG-IP 15.0.0-15.1.0.2, 14.1.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5.1, and 11.5.2-11.6.5.1... Moderate Unreviewed
CVE-2020-5860 was published May 24, 2022
A flaw was found in the way certificate signatures could be forged using collisions found in the... Moderate Unreviewed
CVE-2019-14855 was published May 24, 2022
A vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR... Moderate Unreviewed
CVE-2019-19299 was published May 24, 2022
An encryption key vulnerability on Mitel SIP-DECT wireless devices 8.0 and 8.1 could allow an... Moderate Unreviewed
CVE-2019-19891 was published May 24, 2022
An issue existed in the handling of links in encrypted PDFs. This issue was addressed by adding a... Moderate Unreviewed
CVE-2019-8772 was published May 24, 2022
The Bitwarden server through 1.32.0 has a potentially unwanted KDF. Moderate Unreviewed
CVE-2019-19766 was published May 24, 2022
An issue was discovered in Intesync Solismed 3.3sp1. An flaw in the encryption implementation... Moderate Unreviewed
CVE-2019-17428 was published May 24, 2022
The Infinite Design application 3.4.12 for Android sends a username and password via TCP without... Moderate Unreviewed
CVE-2019-17356 was published May 24, 2022
A security feature bypass vulnerability exists in Microsoft Windows when a man-in-the-middle... Moderate Unreviewed
CVE-2019-1338 was published May 24, 2022
In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory. Upon a crash, it... Moderate Unreviewed
CVE-2019-15947 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database