Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,356
Erlang
31
GitHub Actions
22
Go
2,120
Maven
5,000+
npm
3,782
NuGet
683
pip
3,460
Pub
12
RubyGems
893
Rust
892
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

1,620 advisories

Loading
A vulnerability was found in Radare2 in versions prior to 5.6.2, 5.6.0, 5.5.4 and 5.5.2. Mapping... High Unreviewed
CVE-2021-4021 was published Feb 25, 2022
Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4. Moderate Unreviewed
CVE-2022-0476 was published Feb 24, 2022
There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to... Moderate Unreviewed
CVE-2021-4115 was published Feb 22, 2022
In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via... Moderate Unreviewed
CVE-2022-25313 was published Feb 19, 2022
Core FTP / SFTP Server v2 Build 725 was discovered to allow unauthenticated attackers to cause a... Moderate Unreviewed
CVE-2022-22899 was published Feb 18, 2022
A segmentation fault during PCF file parsing in pcf2bdf versions >=1.05 allows an attacker to... Moderate Unreviewed
CVE-2022-23319 was published Feb 18, 2022
The Popup | Custom Popup Builder WordPress plugin before 1.3.1 autoload data from its popup on... High Unreviewed
CVE-2022-0214 was published Feb 15, 2022
StarWind iSCSI SAN before 3.5 build 2007-08-09 allows socket exhaustion. High Unreviewed
CVE-2007-20001 was published Feb 12, 2022
StarWind iSCSI SAN before 6.0 build 2013-03-20 allows a memory leak. Critical Unreviewed
CVE-2013-20004 was published Feb 12, 2022
Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can... High Unreviewed
CVE-2022-23772 was published Feb 12, 2022
Improper access control in the firmware for some Intel(R) Processors may allow a privileged user... Moderate Unreviewed
CVE-2021-0092 was published Feb 11, 2022
SAP NetWeaver Application Server for ABAP (Kernel) and ABAP Platform (Kernel) - versions KERNEL 7... High Unreviewed
CVE-2022-22543 was published Feb 11, 2022
The Zoom Client for Meetings chat functionality was susceptible to Zip bombing attacks in the... High Unreviewed
CVE-2022-22780 was published Feb 11, 2022
In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts... High Unreviewed
CVE-2021-45960 was published Feb 10, 2022
Windows User Account Profile Picture Denial of Service Vulnerability. Moderate Unreviewed
CVE-2022-22002 was published Feb 10, 2022
Windows Hyper-V Denial of Service Vulnerability. Moderate Unreviewed
CVE-2022-22712 was published Feb 10, 2022
Windows Common Log File System Driver Denial of Service Vulnerability. Moderate Unreviewed
CVE-2022-22710 was published Feb 10, 2022
A CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of... High Unreviewed
CVE-2022-22724 was published Feb 6, 2022
MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements... High Unreviewed
CVE-2021-46668 was published Feb 2, 2022
save_window_function_values in MariaDB before 10.6.3 allows an application crash because of... Moderate Unreviewed
CVE-2021-46658 was published Jan 31, 2022
get_sort_by_table in MariaDB before 10.6.2 allows an application crash via certain subquery uses... Moderate Unreviewed
CVE-2021-46657 was published Jan 31, 2022
A denial of service vulnerability exists in the cgiserver.cgi session creation functionality of... High Unreviewed
CVE-2021-40406 was published Jan 29, 2022
A denial of service vulnerability exists in the netserver recv_command functionality of reolink... High Unreviewed
CVE-2022-21801 was published Jan 29, 2022
On BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, and 14.1.2.6-14.1.4.4, when a... High Unreviewed
CVE-2022-23015 was published Jan 26, 2022
On BIG-IP version 16.1.x before 16.1.2.1, 15.1.x before 15.1.5, 14.1.x before 14.1.4.5, and all... Moderate Unreviewed
CVE-2022-23023 was published Jan 26, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database