Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,239
Erlang
31
GitHub Actions
21
Go
2,007
Maven
5,000+
npm
3,716
NuGet
662
pip
3,388
Pub
11
RubyGems
885
Rust
851
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

154 advisories

Loading
DLL hijacking could lead to denial of service. The following products are affected: Acronis Cyber... Moderate Unreviewed
CVE-2021-44199 was published Nov 30, 2021
Uncontrolled Search Path Element in software for Intel(R) PROSet/Wireless Wi-Fi in Windows 10 and... Moderate Unreviewed
CVE-2021-0169 was published Feb 11, 2022
An installer search patch element vulnerability in Trend Micro Portable Security 3.0 Pro, 3.0 and... Moderate Unreviewed
CVE-2022-26319 was published Mar 9, 2022
Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x searches for and loads DLLs as dynamic... Moderate Unreviewed
CVE-2020-25182 was published Mar 19, 2022
Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x... Moderate Unreviewed
CVE-2022-28247 was published May 12, 2022
DLL injection vulnerability in software installer for Intel Data Center Migration Center Software... Moderate Unreviewed
CVE-2018-12160 was published May 13, 2022
Norton Utilities (prior to 16.0.3.44) may be susceptible to a DLL Preloading vulnerability, which... Moderate Unreviewed
CVE-2018-5235 was published May 13, 2022
A vulnerability in the search path processing of Cisco Directory Connector could allow an... Moderate Unreviewed
CVE-2019-1794 was published May 13, 2022
A vulnerability in the DLL loading component of Cisco Advanced Malware Protection (AMP) for... Moderate Unreviewed
CVE-2018-15452 was published May 13, 2022
An Uncontrolled Search Path Element issue was discovered in AzeoTech DAQFactory versions prior to... Moderate Unreviewed
CVE-2017-5147 was published May 13, 2022
A vulnerability in the routine that loads DLL files in Cisco Meeting App for Windows could allow... Moderate Unreviewed
CVE-2017-12266 was published May 13, 2022
A DLL injection vulnerability in the Intel IoT Developers Kit 4.0 installer may allow an... Moderate Unreviewed
CVE-2018-12163 was published May 13, 2022
HiSuite 9.1.0.300 versions and earlier contains a DLL hijacking vulnerability. This vulnerability... Moderate Unreviewed
CVE-2019-5245 was published May 24, 2022
An Uncontrolled Search Path Vulnerability is applicable to the following: Dell Update Package ... Moderate Unreviewed
CVE-2019-3726 was published May 24, 2022
Adobe Animate CC versions 19.2.1 and earlier have an insecure library loading (dll hijacking)... Moderate Unreviewed
CVE-2019-7960 was published May 24, 2022
A vulnerability in the loading mechanism of specific dynamic link libraries in Cisco Webex Teams... Moderate Unreviewed
CVE-2019-16001 was published May 24, 2022
Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A... Moderate Unreviewed
CVE-2019-3750 was published May 24, 2022
In Sony Catalyst Production Suite through 2019.1 (1.1.0.21) and Catalyst Browse through 2019.1 (1... Moderate Unreviewed
CVE-2019-19364 was published May 24, 2022
Trend Micro HouseCall for Home Networks (versions below 5.3.0.1063) could be exploited via a DLL... Moderate Unreviewed
CVE-2019-19689 was published May 24, 2022
The usage of Tomcat in Jira before version 8.5.2 allows local attackers with permission to write... Moderate Unreviewed
CVE-2019-20400 was published May 24, 2022
The usage of Tomcat in Confluence on the Microsoft Windows operating system before version 7.0.5,... Moderate Unreviewed
CVE-2019-20406 was published May 24, 2022
A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows... Moderate Unreviewed
CVE-2020-3153 was published May 24, 2022
Uncontrolled search path element in the installer for Intel(R) Graphics Drivers before versions... Moderate Unreviewed
CVE-2020-0515 was published May 24, 2022
Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017... Moderate Unreviewed
CVE-2020-3803 was published May 24, 2022
In Fazecast jSerialComm, Version 2.2.2 and prior, an uncontrolled search path element... Moderate Unreviewed
CVE-2020-10626 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database