Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,645
Maven
5,000+
npm
4,271
NuGet
760
pip
4,065
Pub
12
RubyGems
957
Rust
1,057
Swift
45
Unreviewed advisories
All unreviewed
5,000+

11,577 advisories

Loading
A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some... High Unreviewed
CVE-2021-3970 was published Apr 23, 2022
gdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables... Critical Unreviewed
CVE-2011-2897 was published Apr 23, 2022
SugarCRM CE <= 6.3.1 contains scripts that use "unserialize()" with user controlled input which... Critical Unreviewed
CVE-2012-0694 was published Apr 23, 2022
Chicken before 4.8.0 is susceptible to algorithmic complexity attacks related to hash table... Critical Unreviewed
CVE-2012-6125 was published Apr 23, 2022
Chicken before 4.8.0 does not properly handle NUL bytes in certain strings, which allows an... Moderate Unreviewed
CVE-2012-6123 was published Apr 23, 2022
Jenkins allows Data Insertion and Execution of Code by those with Read and HTTP Access High
CVE-2012-4438 was published for org.jenkins-ci.main:jenkins-core (Maven) Apr 23, 2022
Falconpl before 0.9.6.9-git20120606 misuses the libcurl API which may allow remote attackers to... High Unreviewed
CVE-2012-6070 was published Apr 23, 2022
RubyGems passenger gem allows remote attackers to delete files High
CVE-2012-6135 was published for passenger (RubyGems) Apr 23, 2022
jasnow
Credited to jasnow
mono 2.10.x ASP.NET Web Form Hash collision DoS High Unreviewed
CVE-2012-3543 was published Apr 23, 2022
cumin: At installation postgresql database user created without password Critical Unreviewed
CVE-2012-3460 was published Apr 23, 2022
pam_shield before 0.9.4: Default configuration does not perform protective action High Unreviewed
CVE-2012-2350 was published Apr 23, 2022
xlockmore before 5.43 'dclock' security bypass vulnerability High Unreviewed
CVE-2012-4524 was published Apr 23, 2022
opendnssec misuses libcurl API Critical Unreviewed
CVE-2012-5582 was published Apr 23, 2022
An issue was discovered in dhclient 4.3.1-6 due to an embedded path variable. High Unreviewed
CVE-2012-2248 was published Apr 23, 2022
FreeBSD: Input Validation Flaw allows local users to gain elevated privileges High Unreviewed
CVE-2012-4576 was published Apr 23, 2022
ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which... High Unreviewed
CVE-2012-3409 was published Apr 23, 2022
LibreOffice and OpenOffice automatically open embedded content Moderate Unreviewed
CVE-2012-5639 was published Apr 23, 2022
gnome-keyring does not discard stored secrets when using gnome_keyring_lock_all_sync function High Unreviewed
CVE-2012-6111 was published Apr 23, 2022
Cisco IronPort Web Security Appliance AsyncOS software prior to 7.5 has a SSL Certificate Caching... Moderate Unreviewed
CVE-2012-0334 was published Apr 23, 2022
The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code... Critical Unreviewed
CVE-2022-29499 was published Apr 27, 2022
ballcat-codegen template engine remote code execution injection High
CVE-2022-24881 was published for com.hccake:ballcat-codegen (Maven) Apr 27, 2022
LuckyT0mat0
Credited to LuckyT0mat0
NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c,... High Unreviewed
CVE-2022-28193 was published Apr 28, 2022
NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot blob_decompress function... Moderate Unreviewed
CVE-2022-28196 was published Apr 28, 2022
Improper Input Validation in httpx Critical
CVE-2021-41945 was published for httpx (pip) Apr 29, 2022
lebr0nli Bibo-Joshi
AngellusMortis marcoaaguiar br3ndonland
Credited to lebr0nli, Bibo-Joshi, AngellusMortis, marcoaaguiar, and br3ndonland
Sed Injection Vulnerability in GitHub repository hestiacp/hestiacp prior to 1.5.12. An... High Unreviewed
CVE-2022-1509 was published Apr 29, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database