Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,279
Erlang
31
GitHub Actions
21
Go
2,056
Maven
5,000+
npm
3,740
NuGet
668
pip
3,421
Pub
12
RubyGems
891
Rust
873
Swift
36
Unreviewed advisories
All unreviewed
5,000+

237 advisories

Loading
In onCreate of ReviewPermissionsActivity.java, there is a possible way to grant permissions for a... High Unreviewed
CVE-2022-20442 was published Dec 13, 2022
In the user interface buttons of PermissionController, there is a possible way to bypass... High Unreviewed
CVE-2021-39617 was published Dec 13, 2022
AeroCMS v0.0.1 is vulnerable to ClickJacking. Moderate Unreviewed
CVE-2022-46061 was published Dec 13, 2022
IBM CICS TX 11.1 could allow a remote attacker to hijack the clicking action of the victim. By... Moderate Unreviewed
CVE-2022-34318 was published Dec 12, 2022
The response header has not enabled X-FRAME-OPTIONS, Which helps prevents against Clickjacking... Moderate Unreviewed
CVE-2022-3260 was published Dec 8, 2022
The issue was addressed with improved UI handling. This issue is fixed in tvOS 16.1, macOS... Moderate Unreviewed
CVE-2022-42799 was published Nov 2, 2022
Hashicorp Boundary vulnerable to clickjacking Moderate
CVE-2022-36182 was published for github.com/hashicorp/boundary (Go) Oct 27, 2022
IBM Robotic Process Automation 21.0.0 could allow a remote attacker to hijack the clicking action... Moderate Unreviewed
CVE-2022-22503 was published Oct 6, 2022
rdiffweb vulnerable to Improper Restriction of Rendered UI Layers or Frames Critical
CVE-2022-3167 was published for rdiffweb (pip) Sep 9, 2022
** DISPUTED ** Jitsi-2.10.5550 was discovered to contain a vulnerability in its web UI which... Moderate Unreviewed
CVE-2022-36736 was published Sep 9, 2022
Improper Restriction of Rendered UI Layers or Frames in GitHub repository notrinos/notrinoserp... Moderate Unreviewed
CVE-2022-2965 was published Aug 24, 2022
In the Framework, there is a possible way to enable a work profile without user consent due to a... High Unreviewed
CVE-2022-20331 was published Aug 13, 2022
A vulnerability, which was classified as problematic, has been found in SourceCodester Gym... Moderate Unreviewed
CVE-2022-2800 was published Aug 13, 2022
Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow a remote... Moderate Unreviewed
CVE-2022-20852 was published Aug 11, 2022
Improper Restriction of Rendered UI Layers or Frames in GitHub repository openemr/openemr prior... Unknown Unreviewed
CVE-2022-2734 was published Aug 10, 2022
A vulnerable code in onCreate of SecDevicePickerDialog prior to SMR Aug-2022 Release 1, allows... Moderate Unreviewed
CVE-2022-33727 was published Aug 6, 2022
A vulnerable code in onCreate of BluetoothScanDialog prior to SMR Aug-2022 Release 1, allows... Moderate Unreviewed
CVE-2022-33723 was published Aug 6, 2022
IBM CICS TX 11.1 could allow a remote attacker to hijack the clicking action of the victim. By... Moderate Unreviewed
CVE-2022-34162 was published Aug 2, 2022
The X-Frame-Options header in Rockwell Automation MicroLogix 1100/1400 Versions 21.007 and prior... Moderate Unreviewed
CVE-2022-2179 was published Jul 21, 2022
In wifi.RequestToggleWifiActivity of AndroidManifest.xml, there is a possible EoP due to a... High Unreviewed
CVE-2022-20212 was published Jul 14, 2022
In finishDrawingWindow of WindowManagerService.java, there is a possible tapjacking due to... Low Unreviewed
CVE-2022-20226 was published Jul 14, 2022
Apache Druid before 0.23.0 vulnerable to clickjacking Moderate
CVE-2022-28889 was published for org.apache.druid:druid (Maven) Jul 8, 2022
IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to... Moderate Unreviewed
CVE-2021-29865 was published Jun 25, 2022
In WindowManager, there is a possible tapjacking attack due to an incorrect window flag when... High Unreviewed
CVE-2021-39691 was published Jun 16, 2022
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2).... Moderate Unreviewed
CVE-2022-27219 was published Jun 15, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database