Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,636
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

391 advisories

Loading
In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This... Moderate Unreviewed
CVE-2022-32655 was published Feb 6, 2023
A vulnerability in class-of-service (CoS) queue management in Juniper Networks Junos OS on the... High Unreviewed
CVE-2023-22391 was published Jan 13, 2023
In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This... Moderate Unreviewed
CVE-2022-32658 was published Jan 3, 2023
In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This... Moderate Unreviewed
CVE-2022-32657 was published Jan 3, 2023
In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This... Moderate Unreviewed
CVE-2022-32659 was published Jan 3, 2023
Brave Browser before 1.42.51 allowed a remote attacker to cause a denial of service via a crafted... Moderate Unreviewed
CVE-2022-47933 was published Dec 25, 2022
The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2... High Unreviewed
CVE-2022-46403 was published Dec 20, 2022
In loadFromXml of ShortcutPackage.java, there is a possible crash on boot due to an uncaught... Moderate Unreviewed
CVE-2022-20500 was published Dec 13, 2022
An improper handling of exceptional conditions vulnerability in Trend Micro Apex One and Apex One... High Unreviewed
CVE-2022-44652 was published Dec 12, 2022
Improper handling of insufficient permissions vulnerability in setSecureFolderPolicy in... Low Unreviewed
CVE-2022-39912 was published Dec 8, 2022
Redmine 5.x before 5.0.4 allows downloading of file attachments of any Issue or any Wiki page due... High Unreviewed
CVE-2022-44030 was published Dec 7, 2022
A vulnerability in the processing of SSH connections of Cisco Firepower Management Center (FMC)... High Unreviewed
CVE-2022-20854 was published Nov 16, 2022
Uncaught exception in the firmware for some Intel(R) Server Board M50CYP Family before version... Moderate Unreviewed
CVE-2022-25917 was published Nov 11, 2022
Improper access control vulnerability in IpcRxServiceModeBigDataInfo in RIL prior to SMR Nov-2022... Low Unreviewed
CVE-2022-39886 was published Nov 10, 2022
Improper access control vulnerability in BootCompletedReceiver_CMCC in DeviceManagement prior to... Low Unreviewed
CVE-2022-39885 was published Nov 10, 2022
In setImpl of AlarmManagerService.java, there is a possible way to put a device into a boot loop... Moderate Unreviewed
CVE-2022-20414 was published Nov 9, 2022
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel... High Unreviewed
CVE-2022-35268 was published Oct 25, 2022
An unhandled exception in job log parsing in GitLab CE/EE affecting all versions prior to 15.2.5,... Moderate Unreviewed
CVE-2022-3279 was published Oct 17, 2022
lock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call... Moderate Unreviewed
CVE-2022-33748 was published Oct 11, 2022
A vulnerability in the SSH implementation of Cisco IOS Software and Cisco IOS XE Software could... High Unreviewed
CVE-2022-20920 was published Oct 11, 2022
In wlan, there is a possible use after free due to an incorrect status check. This could lead to... Moderate Unreviewed
CVE-2022-32590 was published Oct 8, 2022
Improper restriction of broadcasting Intent in ShareLive prior to version 13.2.03.5 leaks MAC... Low Unreviewed
CVE-2022-39872 was published Oct 7, 2022
A maliciously crafted MODEL and SLDPRT file can be used to write beyond the allocated buffer... High Unreviewed
CVE-2022-33886 was published Oct 4, 2022
A maliciously crafted PDF file when parsed through Autodesk AutoCAD 2023 causes an unhandled... High Unreviewed
CVE-2022-33887 was published Oct 4, 2022
A vulnerability in the processing of malformed Common Industrial Protocol (CIP) packets that are... High Unreviewed
CVE-2022-20919 was published Oct 1, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database