GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,126
NuGet
735
pip
3,943
Pub
12
RubyGems
945
Rust
1,021
Swift
39
Unreviewed advisories
All unreviewed
5,000+
137,190 advisories
Filter by severity
Under certain conditions SAP Business Objects Business Intelligence Platform - versions 420, 430,...
Moderate
Unreviewed
CVE-2022-24398
was published
Mar 11, 2022
A stored cross-site scripting vulnerability in marktext versions prior to v0.17.0 due to improper...
Moderate
Unreviewed
CVE-2022-21158
was published
Mar 11, 2022
In ims service, there is a possible unexpected application behavior due to incorrect privilege...
Moderate
Unreviewed
CVE-2022-20051
was published
Mar 11, 2022
SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not...
Moderate
Unreviewed
CVE-2022-24395
was published
Mar 11, 2022
In vpu, there is a possible escalation of privilege due to a missing permission check. This could...
Moderate
Unreviewed
CVE-2022-20049
was published
Mar 11, 2022
SAP NetWeaver Enterprise Portal - versions 7.30, 7.31, 7.40, 7.50, does not sufficiently encode...
Moderate
Unreviewed
CVE-2022-24397
was published
Mar 11, 2022
In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This...
Moderate
Unreviewed
CVE-2022-20056
was published
Mar 11, 2022
In btif, there is a possible memory corruption due to incorrect error handling. This could lead...
Moderate
Unreviewed
CVE-2022-20057
was published
Mar 11, 2022
In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This...
Moderate
Unreviewed
CVE-2022-20059
was published
Mar 11, 2022
Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history ...
Moderate
Unreviewed
CVE-2022-25368
was published
Mar 11, 2022
In preloader (usb), there is a possible permission bypass due to a missing proper image...
Moderate
Unreviewed
CVE-2022-20060
was published
Mar 11, 2022
In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This...
Moderate
Unreviewed
CVE-2022-20058
was published
Mar 11, 2022
A flaw was found in the io-workqueue implementation in the Linux kernel versions prior to 5.15...
Moderate
Unreviewed
CVE-2021-4023
was published
Mar 11, 2022
There is a permission control vulnerability in the Wi-Fi module. Successful exploitation of this...
Moderate
Unreviewed
CVE-2021-40059
was published
Mar 11, 2022
Ming 0.4.8 has an out-of-bounds buffer access issue in the function decompileINCR_DECR() in...
Moderate
Unreviewed
CVE-2021-34340
was published
Mar 11, 2022
An out-of-bounds read in the function write_title() in subs.c of abcm2ps v8.14.11 allows remote...
Moderate
Unreviewed
CVE-2021-32436
was published
Mar 11, 2022
A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user...
Moderate
Unreviewed
CVE-2022-0433
was published
Mar 11, 2022
Northern.tech CFEngine Enterprise 3.15.4 before 3.15.5 has Insecure Permissions that may allow...
Moderate
Unreviewed
CVE-2021-44215
was published
Mar 11, 2022
A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...
Moderate
Unreviewed
CVE-2022-24322
was published
Mar 11, 2022
A NULL pointer dereference was found in the Linux kernel's KVM when dirty ring logging is enabled...
Moderate
Unreviewed
CVE-2021-4095
was published
Mar 11, 2022
Ming 0.4.8 has an out-of-bounds buffer overwrite issue in the function getName() in decompiler.c...
Moderate
Unreviewed
CVE-2021-34338
was published
Mar 11, 2022
Stack-based buffer overflow in the function get_key in parse.c of abcm2ps v8.14.11 allows remote...
Moderate
Unreviewed
CVE-2021-32435
was published
Mar 11, 2022
Ming 0.4.8 has an out-of-bounds buffer access issue in the function getString() in decompiler.c...
Moderate
Unreviewed
CVE-2021-34339
was published
Mar 11, 2022
This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Permission...
Moderate
Unreviewed
CVE-2021-32006
was published
Mar 11, 2022
Northern.tech CFEngine Enterprise before 3.15.5 and 3.18.x before 3.18.1 has Insecure Permissions...
Moderate
Unreviewed
CVE-2021-44216
was published
Mar 11, 2022
ProTip!
Advisories are also available from the
GraphQL API