GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,645
Maven
5,000+
npm
4,271
NuGet
760
pip
4,065
Pub
12
RubyGems
957
Rust
1,057
Swift
45
Unreviewed advisories
All unreviewed
5,000+
9,975 advisories
Filter by severity
This vulnerability allows remote attackers to disclose sensitive information on vulnerable...
Moderate
Unreviewed
CVE-2017-16589
was published
May 13, 2022
This vulnerability allows remote attackers to disclose sensitive information on vulnerable...
Moderate
Unreviewed
CVE-2017-16579
was published
May 13, 2022
This vulnerability allows remote attackers to disclose sensitive information on vulnerable...
Moderate
Unreviewed
CVE-2017-14822
was published
May 13, 2022
This vulnerability allows remote attackers to disclose sensitive information on vulnerable...
Moderate
Unreviewed
CVE-2017-16584
was published
May 13, 2022
This vulnerability allows remote attackers to disclose sensitive information on vulnerable...
Moderate
Unreviewed
CVE-2017-16580
was published
May 13, 2022
This vulnerability allows remote attackers to disclose sensitive information on vulnerable...
Moderate
Unreviewed
CVE-2017-16574
was published
May 13, 2022
This vulnerability allows remote attackers to disclose sensitive information on vulnerable...
Moderate
Unreviewed
CVE-2017-14819
was published
May 13, 2022
This vulnerability allows remote attackers to disclose sensitive information on vulnerable...
Moderate
Unreviewed
CVE-2017-14821
was published
May 13, 2022
ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have...
Critical
Unreviewed
CVE-2017-3185
was published
May 13, 2022
Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by...
High
Unreviewed
CVE-2017-3194
was published
May 13, 2022
The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows...
Moderate
Unreviewed
CVE-2017-16787
was published
May 14, 2022
A debug tool in Synaptics TouchPad drivers allows local users with administrative access to...
Moderate
Unreviewed
CVE-2017-17556
was published
May 14, 2022
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and...
Moderate
Unreviewed
CVE-2017-11906
was published
May 14, 2022
Node.js had a bug in versions 8.X and 9.X which caused buffers to not be initialized when the...
Moderate
Unreviewed
CVE-2017-15897
was published
May 14, 2022
There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation...
Moderate
Unreviewed
CVE-2017-3738
was published
May 14, 2022
The Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing...
High
Unreviewed
CVE-2017-1000410
was published
May 14, 2022
In Open Ticket Request System (OTRS) through 3.3.20, 4 through 4.0.26, 5 through 5.0.24, and 6...
Moderate
Unreviewed
CVE-2017-16854
was published
May 14, 2022
kernel/bpf/verifier.c in the Linux kernel through 4.14.8 mishandles states_equal comparisons...
Low
Unreviewed
CVE-2017-17864
was published
May 14, 2022
An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10...
Moderate
Unreviewed
CVE-2017-13865
was published
May 14, 2022
Huawei HG8245H version earlier than V300R018C00SPC110 has an authentication bypass vulnerability....
High
Unreviewed
CVE-2017-15328
was published
May 14, 2022
Files or directories accessible to external parties vulnerability in picasa.php in Synology Photo...
High
Unreviewed
CVE-2017-12079
was published
May 13, 2022
Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and...
High
Unreviewed
CVE-2017-17692
was published
May 14, 2022
In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the SNMP read-only (RO)...
High
Unreviewed
CVE-2017-5262
was published
May 13, 2022
A vulnerability in Cisco Jabber for Windows could allow an unauthenticated, local attacker to...
Moderate
Unreviewed
CVE-2017-12361
was published
May 13, 2022
The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles...
Moderate
Unreviewed
CVE-2017-16994
was published
May 14, 2022
ProTip!
Advisories are also available from the
GraphQL API