Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,094
Erlang
29
GitHub Actions
19
Go
1,920
Maven
5,000+
npm
3,648
NuGet
638
pip
3,263
Pub
10
RubyGems
873
Rust
822
Swift
35
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

836 advisories

Loading
A partial fix for  CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of... Moderate Unreviewed
CVE-2024-40725 was published Jul 18, 2024
An Exposure of Resource to Wrong Sphere vulnerability in the sampling service of Juniper Networks... Moderate Unreviewed
CVE-2024-39553 was published Jul 11, 2024
Windows MSHTML Platform Spoofing Vulnerability High Unreviewed
CVE-2024-38112 was published Jul 9, 2024
IBM Maximo Asset Management 7.6.1.3 and IBM Maximo Application Suite 8.10 and 8.11 allows web... Moderate Unreviewed
CVE-2024-22333 was published Jun 13, 2024
CWE-668: Exposure of the Resource Wrong Sphere vulnerability exists that exposes a SSH interface... Moderate Unreviewed
CVE-2024-5313 was published Jun 12, 2024
A local attacker with low privileges can read and modify any users files and cause a DoS in the... High Unreviewed
CVE-2023-5751 was published Jun 4, 2024
Exposure of resource to wrong sphere in some Intel(R) DTT software installers may allow an... High Unreviewed
CVE-2024-21813 was published May 16, 2024
Softing Secure Integration Server Exposure of Resource to Wrong Sphere Remote Code Execution... Moderate Unreviewed
CVE-2023-39478 was published May 3, 2024
Vladimir Kononovich, a Security Researcher has found a flaw that using a inappropriate... High Unreviewed
CVE-2023-6096 was published Apr 26, 2024
An Exposure of Resource to Wrong Sphere vulnerability in the Packet Forwarding Engine (PFE) of... Moderate Unreviewed
CVE-2024-21605 was published Apr 12, 2024
A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to... High Unreviewed
CVE-2024-3019 was published Mar 28, 2024
In the Linux kernel, the following vulnerability has been resolved: mm/damon/dbgfs: fix 'struct... Moderate Unreviewed
CVE-2021-46937 was published Feb 27, 2024
In the Linux kernel, the following vulnerability has been resolved: binder: fix async_free_space... Moderate Unreviewed
CVE-2021-46935 was published Feb 27, 2024
In the Linux kernel, the following vulnerability has been resolved: locking/qrwlock: Fix... Moderate Unreviewed
CVE-2021-46921 was published Feb 27, 2024
In the Linux kernel, the following vulnerability has been resolved: fs/mount_setattr: always... Moderate Unreviewed
CVE-2021-46923 was published Feb 27, 2024
In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix wq... Moderate Unreviewed
CVE-2021-46917 was published Feb 27, 2024
In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: fix info leak... Moderate Unreviewed
CVE-2021-46906 was published Feb 26, 2024
The Author Box, Guest Author and Co-Authors for Your Posts – Molongui plugin for WordPress is... Moderate Unreviewed
CVE-2023-7014 was published Feb 6, 2024
IBM PowerSC 1.3, 2.0, and 2.1 may allow a remote attacker to view session identifiers passed via... Low Unreviewed
CVE-2023-50328 was published Feb 2, 2024
An issue in Fronius Datalogger Web v.2.0.5-4, allows remote attackers to obtain sensitive... Critical Unreviewed
CVE-2023-37621 was published Feb 1, 2024
The WP STAGING WordPress Backup plugin before 3.2.0 allows access to cache files during the... High Unreviewed
CVE-2023-7204 was published Jan 29, 2024
An improper access control vulnerability exists in GitLab Remote Development affecting all... Moderate Unreviewed
CVE-2023-6955 was published Jan 12, 2024
An Exposure of Resource to Wrong Sphere vulnerability in the Packet Forwarding Engine (PFE) of... Moderate Unreviewed
CVE-2024-21597 was published Jan 12, 2024
A flaw was found in the blkgs destruction path in block/blk-cgroup.c in the Linux kernel, leading... Moderate Unreviewed
CVE-2024-0443 was published Jan 12, 2024
Windows CoreMessaging Information Disclosure Vulnerability Moderate Unreviewed
CVE-2024-20694 was published Jan 9, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database