GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,869
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,122
NuGet
735
pip
3,942
Pub
12
RubyGems
945
Rust
1,020
Swift
39
Unreviewed advisories
All unreviewed
5,000+
387 advisories
Filter by severity
The net_ctl_permissions function in net/sysctl_net.c in the Linux kernel before 3.11.5 does not...
Low
Unreviewed
CVE-2013-4270
was published
May 17, 2022
The nfs_addmntent function in support/nfs/nfs_mntent.c in the mount.nsf tool in nfs-utils before...
Low
Unreviewed
CVE-2011-1749
was published
May 17, 2022
Xen 3.1 through 4.x, when running 64-bit hosts on Intel CPUs, does not clear the NT flag when...
Low
Unreviewed
CVE-2013-1917
was published
May 17, 2022
channels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1...
Low
Unreviewed
CVE-2014-2287
was published
May 17, 2022
res/res_pjsip_exten_state.c in the PJSIP channel driver in Asterisk Open Source 12.x before 12.1...
Low
Unreviewed
CVE-2014-2289
was published
May 17, 2022
pyxtrlock before 0.2 does not properly check the return values of the (1) xcb_grab_pointer and (2...
Low
Unreviewed
CVE-2013-4427
was published
May 17, 2022
Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows physically proximate attackers to...
Low
Unreviewed
CVE-2014-2343
was published
May 17, 2022
The ktrace utility in the FreeBSD kernel 8.4 before p11, 9.1 before p14, 9.2 before p7, and 9.3...
Low
Unreviewed
CVE-2014-3873
was published
May 17, 2022
Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote...
Low
Unreviewed
CVE-2014-5398
was published
May 17, 2022
The Sleuth Kit (TSK) 4.0.1 does not properly handle "." (dotfile) file system entries in FAT file...
Low
Unreviewed
CVE-2012-5619
was published
May 17, 2022
Juniper WLC devices with WLAN Software releases 8.0.x before 8.0.4, 9.0.x before 9.0.2.11, 9.0.3...
Low
Unreviewed
CVE-2014-6381
was published
May 17, 2022
mbae.sys in Malwarebytes Anti-Exploit before 1.05.1.2014 allows local users to cause a denial of...
Low
Unreviewed
CVE-2014-100039
was published
May 17, 2022
The Core Server in OpenAM 9.5.3 through 9.5.5, 10.0.0 through 10.0.2, 10.1.0-Xpress, and 11.0.0...
Low
Unreviewed
CVE-2014-7246
was published
May 17, 2022
arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.12 does not have an exit...
Low
Unreviewed
CVE-2014-3645
was published
May 17, 2022
The do_replace function in net/bridge/netfilter/ebtables.c in the Linux kernel before 2.6.39 does...
Low
Unreviewed
CVE-2011-1080
was published
May 17, 2022
LaunchServices in Apple OS X before 10.10.3 allows local users to cause a denial of service ...
Low
Unreviewed
CVE-2015-1142
was published
May 17, 2022
The do_task_stat function in fs/proc/array.c in the Linux kernel before 2.6.39-rc1 does not...
Low
Unreviewed
CVE-2011-0726
was published
May 17, 2022
IBM Sterling B2B Integrator 5.2 before 5020500_8 allows remote authenticated users to conduct...
Low
Unreviewed
CVE-2015-4992
was published
May 17, 2022
The File Bookmark component in Apple OS X before 10.11.1 allows local users to cause a denial of...
Low
Unreviewed
CVE-2015-6987
was published
May 17, 2022
The Flow Collector in IBM Security QRadar QFLOW 7.1.x before 7.1 MR2 Patch 11 IF3 and 7.2.x...
Low
Unreviewed
CVE-2015-5044
was published
May 17, 2022
Jenkins Vulnerable to Denial of Service (DoS)
Low
CVE-2015-1808
was published
for
org.jenkins-ci.main:jenkins-core
(Maven)
May 17, 2022
ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from...
Low
Unreviewed
CVE-2015-8946
was published
May 17, 2022
IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4...
Low
Unreviewed
CVE-2015-1980
was published
May 17, 2022
Messages in Apple iOS before 9.3 does not ensure that an auto-fill action applies to the intended...
Low
Unreviewed
CVE-2016-1763
was published
May 17, 2022
The receive_ra function in rdisc/nm-lndp-rdisc.c in the Neighbor Discovery (ND) protocol...
Low
Unreviewed
CVE-2015-2924
was published
May 17, 2022
ProTip!
Advisories are also available from the
GraphQL API