GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,869
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,122
NuGet
735
pip
3,943
Pub
12
RubyGems
945
Rust
1,020
Swift
39
Unreviewed advisories
All unreviewed
5,000+
1,300 advisories
Filter by severity
cups (Common Unix Printing System) 'Listen localhost:631' option not honored correctly which...
Moderate
Unreviewed
CVE-2012-6094
was published
Apr 23, 2022
Improper authorization in Keycloak
Moderate
CVE-2022-1466
was published
for
org.keycloak:keycloak-core
(Maven)
Apr 27, 2022
In this physical attack, an attacker may potentially exploit the Zynq-7000 SoC First Stage Boot...
Moderate
Unreviewed
CVE-2022-23822
was published
Apr 28, 2022
Missing authorization in Moodle
Moderate
CVE-2022-0984
was published
for
moodle/moodle
(Composer)
Apr 30, 2022
Improper Authentication in moodle
Moderate
CVE-2022-0985
was published
for
moodle/moodle
(Composer)
Apr 30, 2022
Raritan Dominion SX (DSX) Console Servers DSX16, DSX32, DSX4, DSX8, and DSXA-48 set (1) world...
Moderate
Unreviewed
CVE-2005-2136
was published
May 1, 2022
index.php in dirLIST before 0.1.1 allows remote attackers to list the contents of an excluded...
Moderate
Unreviewed
CVE-2007-3968
was published
May 1, 2022
dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes send_interface attributes...
Moderate
Unreviewed
CVE-2008-0595
was published
May 1, 2022
The ACL plugin in Dovecot before 1.1.4 treats negative access rights as if they are positive...
Moderate
Unreviewed
CVE-2008-4577
was published
May 2, 2022
parse.c in sudo 1.6.9p17 through 1.6.9p19 does not properly interpret a system group (aka %group)...
Moderate
Unreviewed
CVE-2009-0034
was published
May 2, 2022
The default configuration of the Security global settings on the Citrix NetScaler Access Gateway...
Moderate
Unreviewed
CVE-2009-2213
was published
May 2, 2022
Improper access control vulnerability in Contents To Window prior to SMR May-2022 Release 1...
Moderate
Unreviewed
CVE-2022-28782
was published
May 4, 2022
Permissions were not properly verified in the API on projects using version control in Git. This...
Moderate
Unreviewed
CVE-2022-1502
was published
May 5, 2022
Review Board: URL processing gives unauthorized users access to review lists
Moderate
Unreviewed
CVE-2013-4411
was published
May 5, 2022
The OG access fields (visibility fields) implementation in Organic Groups (OG) module 7.x-2.x...
Moderate
Unreviewed
CVE-2013-4228
was published
May 5, 2022
IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0...
Moderate
Unreviewed
CVE-2013-0543
was published
May 5, 2022
Windows Print Spooler Information Disclosure Vulnerability. This CVE ID is unique from CVE-2022...
Moderate
Unreviewed
CVE-2022-29114
was published
May 11, 2022
Microsoft Office Security Feature Bypass Vulnerability.
Moderate
Unreviewed
CVE-2022-29107
was published
May 11, 2022
A Two-Factor Authentication (2FA) bypass vulnerability in "Simple 2FA Plugin for Moodle" by LMS...
Moderate
Unreviewed
CVE-2022-28601
was published
May 11, 2022
Windows Hyper-V Security Feature Bypass Vulnerability.
Moderate
Unreviewed
CVE-2022-24466
was published
May 11, 2022
Improper access control in GitLab CE/EE affecting all versions starting from 8.12 before 14.8.6,...
Moderate
Unreviewed
CVE-2022-1417
was published
May 11, 2022
This is a concurrency issue that can result in the wrong caller principal being returned from the...
Moderate
Unreviewed
CVE-2022-0866
was published
May 11, 2022
Incorrect access control in Yubico OTP functionality of the YubiKey hardware tokens along with...
Moderate
Unreviewed
CVE-2022-24584
was published
May 12, 2022
Insufficient checks in System Management Unit (SMU) FeatureConfig may result in reenabling...
Moderate
Unreviewed
CVE-2021-26376
was published
May 12, 2022
An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables...
Moderate
Unreviewed
CVE-2022-0027
was published
May 12, 2022
ProTip!
Advisories are also available from the
GraphQL API