Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,768
Erlang
35
GitHub Actions
29
Go
2,332
Maven
5,000+
npm
3,965
NuGet
713
pip
3,748
Pub
12
RubyGems
921
Rust
975
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

1,913 advisories

Loading
StarWind iSCSI SAN before 3.5 build 2007-08-09 allows socket exhaustion. High Unreviewed
CVE-2007-20001 was published Feb 12, 2022
StarWind iSCSI SAN before 6.0 build 2013-03-20 allows a memory leak. Critical Unreviewed
CVE-2013-20004 was published Feb 12, 2022
Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can... High Unreviewed
CVE-2022-23772 was published Feb 12, 2022
Improper access control in the firmware for some Intel(R) Processors may allow a privileged user... Moderate Unreviewed
CVE-2021-0092 was published Feb 11, 2022
SAP NetWeaver Application Server for ABAP (Kernel) and ABAP Platform (Kernel) - versions KERNEL 7... High Unreviewed
CVE-2022-22543 was published Feb 11, 2022
The Zoom Client for Meetings chat functionality was susceptible to Zip bombing attacks in the... High Unreviewed
CVE-2022-22780 was published Feb 11, 2022
In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts... High Unreviewed
CVE-2021-45960 was published Feb 10, 2022
Windows User Account Profile Picture Denial of Service Vulnerability. Moderate Unreviewed
CVE-2022-22002 was published Feb 10, 2022
Windows Common Log File System Driver Denial of Service Vulnerability. Moderate Unreviewed
CVE-2022-22710 was published Feb 10, 2022
Windows Hyper-V Denial of Service Vulnerability. Moderate Unreviewed
CVE-2022-22712 was published Feb 10, 2022
A CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of... High Unreviewed
CVE-2022-22724 was published Feb 6, 2022
MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements... High Unreviewed
CVE-2021-46668 was published Feb 2, 2022
get_sort_by_table in MariaDB before 10.6.2 allows an application crash via certain subquery uses... Moderate Unreviewed
CVE-2021-46657 was published Jan 31, 2022
save_window_function_values in MariaDB before 10.6.3 allows an application crash because of... Moderate Unreviewed
CVE-2021-46658 was published Jan 31, 2022
A denial of service vulnerability exists in the cgiserver.cgi session creation functionality of... High Unreviewed
CVE-2021-40406 was published Jan 29, 2022
A denial of service vulnerability exists in the netserver recv_command functionality of reolink... High Unreviewed
CVE-2022-21801 was published Jan 29, 2022
On BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, and 14.1.2.6-14.1.4.4, when a... High Unreviewed
CVE-2022-23015 was published Jan 26, 2022
On BIG-IP version 16.1.x before 16.1.2.1, 15.1.x before 15.1.5, 14.1.x before 14.1.4.5, and all... Moderate Unreviewed
CVE-2022-23023 was published Jan 26, 2022
On BIG-IP AFM version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.2, and all... High Unreviewed
CVE-2022-23024 was published Jan 26, 2022
On version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions... Moderate Unreviewed
CVE-2022-23030 was published Jan 26, 2022
Requests may be used to interrupt the normal operation of the device. When exploited, Fresenius... High Unreviewed
CVE-2021-23236 was published Jan 22, 2022
Due to the lack of media file checks before rendering, it was possible for an attacker to cause... Moderate Unreviewed
CVE-2022-22820 was published Jan 21, 2022
An Uncontrolled Resource Consumption vulnerability in the handling of IPv6 neighbor state change... Moderate Unreviewed
CVE-2022-22155 was published Jan 20, 2022
A vulnerability in the NETISR network queue functionality of Juniper Networks Junos OS kernel... High Unreviewed
CVE-2022-22159 was published Jan 20, 2022
An Uncontrolled Resource Consumption vulnerability in the kernel of Juniper Networks Junos OS... High Unreviewed
CVE-2022-22161 was published Jan 20, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database