GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,635
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+
3,036 advisories
Filter by severity
** DISPUTED ** The Schneider Electric M340 PLC modules allow remote attackers to cause a denial...
Moderate
Unreviewed
CVE-2013-2763
was published
May 13, 2022
An issue was discovered in Schneider Electric Magelis HMI Magelis GTO Advanced Optimum Panels,...
High
Unreviewed
CVE-2016-8374
was published
May 13, 2022
An issue was discovered in Schneider Electric Magelis HMI Magelis GTO Advanced Optimum Panels,...
Moderate
Unreviewed
CVE-2016-8367
was published
May 13, 2022
A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: DK Standard...
High
Unreviewed
CVE-2017-12741
was published
May 13, 2022
nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that...
High
Unreviewed
CVE-2018-16843
was published
May 13, 2022
nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might...
Moderate
Unreviewed
CVE-2018-16845
was published
May 13, 2022
nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that...
High
Unreviewed
CVE-2018-16844
was published
May 13, 2022
A Resource Exhaustion issue was discovered in Rockwell Automation ControlLogix 5580 controllers...
High
Unreviewed
CVE-2017-6024
was published
May 13, 2022
The SdpContents::Session::Medium::parse function in resip/stack/SdpContents.cxx in reSIProcate 1...
High
Unreviewed
CVE-2017-11521
was published
May 13, 2022
Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of...
High
Unreviewed
CVE-2017-2680
was published
May 13, 2022
Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected...
High
Unreviewed
CVE-2017-2681
was published
May 13, 2022
RSA BSAFE Micro Edition Suite, prior to 4.1.6.1 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition...
Moderate
Unreviewed
CVE-2018-11056
was published
May 13, 2022
An exploitable code execution vulnerability exists in the UDP network functionality of Yi Home...
High
Unreviewed
CVE-2018-3935
was published
May 13, 2022
A remote denial-of-service vulnerability exists in the way the Nouveau Display Driver (the...
Moderate
Unreviewed
CVE-2018-3979
was published
May 13, 2022
An exploitable insufficient resource pool vulnerability exists in the session communication...
High
Unreviewed
CVE-2017-12093
was published
May 13, 2022
An exploitable denial of service vulnerability exists in the processing of snmp-set commands of...
High
Unreviewed
CVE-2017-12090
was published
May 13, 2022
An exploitable vulnerability exists in the user photo update functionality of Circle with Disney...
High
Unreviewed
CVE-2017-2884
was published
May 13, 2022
An exploitable Denial of Service vulnerability exists in the API daemon of Circle with Disney...
High
Unreviewed
CVE-2017-2889
was published
May 13, 2022
An exploitable denial of service exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file...
Moderate
Unreviewed
CVE-2016-9039
was published
May 13, 2022
An exploitable denial of service exists in the the Joyent SmartOS OS 20161110T013148Z Hyprlofs...
Moderate
Unreviewed
CVE-2016-9040
was published
May 13, 2022
Apache Tomcat EncryptInterceptor error leads to Uncontrolled Resource Consumption
High
CVE-2022-29885
was published
for
org.apache.tomcat:tomcat
(Maven)
May 13, 2022
Uncontrolled Resource Consumption in GitHub repository causefx/organizr prior to 2.1.2000. This...
High
Unreviewed
CVE-2022-1699
was published
May 13, 2022
Uncontrolled resource consumption in the Linux kernel drivers for Intel(R) SGX may allow an...
Moderate
Unreviewed
CVE-2021-33135
was published
May 13, 2022
Asus DSL-N14U-B1 1.1.2.3_805 allows remote attackers to cause a Denial of Service (DoS) via a TCP...
High
Unreviewed
CVE-2021-3254
was published
May 12, 2022
A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 ...
Moderate
Unreviewed
CVE-2022-24040
was published
May 11, 2022
ProTip!
Advisories are also available from the
GraphQL API