GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,635
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+
771 advisories
Filter by severity
In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from...
High
Unreviewed
CVE-2017-14880
was published
May 13, 2022
A race condition in the postgresql init script could be used by attackers able to access the...
High
Unreviewed
CVE-2017-14798
was published
May 13, 2022
The driver_override implementation in drivers/base/platform.c in the Linux kernel before 4.12.1...
High
Unreviewed
CVE-2017-12146
was published
May 13, 2022
The Microsoft Device Guard on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server...
High
Unreviewed
CVE-2017-11823
was published
May 13, 2022
A elevation of privilege vulnerability in the Upstream kernel scsi driver. Product: Android....
High
Unreviewed
CVE-2017-0794
was published
May 13, 2022
A elevation of privilege vulnerability in the Android media framework (libgui). Product: Android....
High
Unreviewed
CVE-2017-0727
was published
May 13, 2022
An elevation of privilege vulnerability in the Qualcomm Seemp driver could enable a local...
High
Unreviewed
CVE-2017-0462
was published
May 13, 2022
Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a...
High
Unreviewed
CVE-2017-2619
was published
May 13, 2022
The domain management component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO...
High
Unreviewed
CVE-2018-18808
was published
May 13, 2022
In Veraport G3 ALL on MacOS, a race condition when calling the Veraport API allow remote attacker...
High
Unreviewed
CVE-2018-5198
was published
May 13, 2022
In some Lenovo IdeaPad consumer notebook models, a race condition in the BIOS flash device...
High
Unreviewed
CVE-2018-9069
was published
May 13, 2022
Race condition in the Inter-process Communication (IPC) implementation in Google Chrome before 18...
High
Unreviewed
CVE-2011-3080
was published
May 13, 2022
Radicale is vulnerable to timing oracles and simple bruteforce attacks
High
CVE-2017-8342
was published
for
Radicale
(pip)
May 13, 2022
The setpermissions function in the auto-updater in Arq before 5.9.7 for Mac allows local users to...
High
Unreviewed
CVE-2017-15357
was published
May 13, 2022
Race condition in Google Chrome before 17.0.963.46 allows remote attackers to execute arbitrary...
High
Unreviewed
CVE-2011-3961
was published
May 13, 2022
A flaw was found in qemu Media Transfer Protocol (MTP) before version 3.1.0. A path traversal in...
High
Unreviewed
CVE-2018-16867
was published
May 13, 2022
SuiteCRM before 7.2.3 allows remote attackers to execute arbitrary code.
High
Unreviewed
CVE-2015-5947
was published
May 13, 2022
In the Linux kernel 4.12, 3.10, 2.6 and possibly earlier versions a race condition vulnerability...
High
Unreviewed
CVE-2018-1000004
was published
May 13, 2022
Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to...
High
Unreviewed
CVE-2017-15265
was published
May 13, 2022
Race condition in the VRF-aware NAT feature in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2...
High
Unreviewed
CVE-2013-1142
was published
May 13, 2022
Race condition in the IP implementation in the Linux kernel before 3.0 might allow remote...
High
Unreviewed
CVE-2012-3552
was published
May 13, 2022
Race condition in the console implementation in Google Chrome before 6.0.472.59 has unspecified...
High
Unreviewed
CVE-2010-3412
was published
May 13, 2022
Race condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in...
High
Unreviewed
CVE-2014-1490
was published
May 13, 2022
Multiple race conditions in drivers/char/adsprpc.c and drivers/char/adsprpc_compat.c in the...
High
Unreviewed
CVE-2015-0572
was published
May 13, 2022
Race condition in the mac80211 subsystem in the Linux kernel before 3.13.7 allows remote...
High
Unreviewed
CVE-2014-2706
was published
May 13, 2022
ProTip!
Advisories are also available from the
GraphQL API