Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,636
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

1,630 advisories

Loading
The svpn component of the F5 BIG-IP APM client prior to version 7.1.7.2 for Linux and macOS runs... High Unreviewed
CVE-2018-15332 was published May 13, 2022
Race condition in gpu/command_buffer/service/gles2_cmd_decoder.cc in Google Chrome before 41.0... Moderate Unreviewed
CVE-2015-1234 was published May 13, 2022
Race condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9... Moderate Unreviewed
CVE-2015-1791 was published May 13, 2022
systemd does not properly use D-Bus for communication with a polkit authority, which allows local... Moderate Unreviewed
CVE-2013-4327 was published May 13, 2022
In systemd prior to 234 a race condition exists between .mount and .automount units such that... Moderate Unreviewed
CVE-2018-1049 was published May 13, 2022
A race condition in chown_one() of systemd allows an attacker to cause systemd to set arbitrary... High Unreviewed
CVE-2018-15687 was published May 13, 2022
Race condition in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute... High Unreviewed
CVE-2010-2558 was published May 13, 2022
Race condition in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute... High Unreviewed
CVE-2011-1257 was published May 13, 2022
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to... High Unreviewed
CVE-2016-5195 was published May 13, 2022
In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles... High Unreviewed
CVE-2019-6974 was published May 13, 2022
Incorrect handling of picture ID in WebRTC in Google Chrome prior to 58.0.3029.96 for Mac,... High Unreviewed
CVE-2017-5068 was published May 13, 2022
A race condition in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac... Moderate Unreviewed
CVE-2017-5061 was published May 13, 2022
An exploitable vulnerability exists in the signature verification of the firmware update... High Unreviewed
CVE-2017-2898 was published May 13, 2022
An exploitable double fetch vulnerability exists in the SboxDrv.sys driver functionality of... High Unreviewed
CVE-2016-9038 was published May 13, 2022
Race condition in firmware for some Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Intel... Moderate Unreviewed
CVE-2021-33075 was published May 13, 2022
Race condition within a thread in firmware for some Intel(R) Optane(TM) SSD and Intel(R) SSD DC... Moderate Unreviewed
CVE-2021-33078 was published May 13, 2022
In several functions of KeyguardServiceWrapper.java and related files,, there is a possible way... High Unreviewed
CVE-2022-20006 was published May 11, 2022
In startActivityForAttachedApplicationIfNeeded of RootWindowContainer.java, there is a possible... High Unreviewed
CVE-2022-20007 was published May 11, 2022
In ion_ioctl and related functions of ion.c, there is a possible use after free due to a race... High Unreviewed
CVE-2022-20118 was published May 11, 2022
Storage Spaces Direct Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022... High Unreviewed
CVE-2022-26939 was published May 11, 2022
Windows Kernel Information Disclosure Vulnerability. Moderate Unreviewed
CVE-2022-29116 was published May 11, 2022
Windows Digital Media Receiver Elevation of Privilege Vulnerability. High Unreviewed
CVE-2022-29113 was published May 11, 2022
manifests/base.pp in the puppetlabs-cinder module, as used in PackStack, uses world-readable... Low Unreviewed
CVE-2013-0266 was published May 5, 2022
Race condition in sap_suse_cluster_connector before 1.0.0-0.8.1 in SUSE Linux Enterprise for SAP... High Unreviewed
CVE-2012-0426 was published May 4, 2022
In aee driver, there is a possible use after free due to a race condition. This could lead to... Moderate Unreviewed
CVE-2022-20090 was published May 4, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database