GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,239
Erlang
31
GitHub Actions
21
Go
2,007
Maven
5,000+
npm
3,716
NuGet
662
pip
3,388
Pub
11
RubyGems
885
Rust
851
Swift
36
Unreviewed advisories
All unreviewed
5,000+
348 advisories
Filter by severity
Mattermost versions 10.0.x <= 10.0.1, 10.1.x <= 10.1.1, 9.11.x <= 9.11.3, 9.5.x <= 9.5.11 fail to...
High
Unreviewed
CVE-2024-11599
was published
Nov 28, 2024
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: Fix the missing...
Moderate
Unreviewed
CVE-2024-50284
was published
Nov 19, 2024
A Local Privilege Escalation vulnerability exists in the affected product. The vulnerability...
High
Unreviewed
CVE-2024-10945
was published
Nov 12, 2024
Moodle has insufficient capability checks
Low
CVE-2024-43435
was published
for
moodle/moodle
(Composer)
Nov 11, 2024
vmir e8117 was discovered to contain a segmentation violation via the export_function function at...
Moderate
Unreviewed
CVE-2024-35427
was published
Nov 9, 2024
vmir e8117 was discovered to contain a segmentation violation via the import_function function at...
Moderate
Unreviewed
CVE-2024-35424
was published
Nov 9, 2024
vmir e8117 was discovered to contain a segmentation violation via the function_prepare_parse...
Unknown
Unreviewed
CVE-2024-35425
was published
Nov 9, 2024
vmir e8117 was discovered to contain a segmentation violation via the wasm_parse_block function...
Moderate
Unreviewed
CVE-2024-35421
was published
Nov 9, 2024
In the Linux kernel, the following vulnerability has been resolved:
pinctrl: ocelot: fix system...
Moderate
Unreviewed
CVE-2024-50196
was published
Nov 8, 2024
In the Linux kernel, the following vulnerability has been resolved:
posix-clock: Fix missing...
Moderate
Unreviewed
CVE-2024-50195
was published
Nov 8, 2024
loona-hpack Panic Vulnerability
Moderate
CVE-2024-51502
was published
for
loona-hpack
(Rust)
Nov 4, 2024
The issue was addressed with improved checks. This issue is fixed in iOS 18.1 and iPadOS 18.1. An...
Moderate
Unreviewed
CVE-2024-44235
was published
Oct 28, 2024
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15. An...
Moderate
Unreviewed
CVE-2024-44174
was published
Oct 28, 2024
An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser...
Moderate
Unreviewed
CVE-2024-50602
was published
Oct 27, 2024
In the Linux kernel, the following vulnerability has been resolved:
x86/tdx: Fix "in-kernel MMIO...
High
Unreviewed
CVE-2024-47727
was published
Oct 21, 2024
IBM WebSphere Application Server 8.5 is vulnerable to a denial of service, under certain...
Moderate
Unreviewed
CVE-2024-45085
was published
Oct 16, 2024
An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow processing...
High
Unreviewed
CVE-2024-47503
was published
Oct 11, 2024
An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol...
High
Unreviewed
CVE-2024-47499
was published
Oct 11, 2024
An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol...
Moderate
Unreviewed
CVE-2024-47507
was published
Oct 11, 2024
A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows...
Moderate
Unreviewed
CVE-2024-9469
was published
Oct 9, 2024
Improper check for unusual or exceptional conditions in Intel(R) TDX Module firmware before...
Low
Unreviewed
CVE-2024-27457
was published
Oct 8, 2024
A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 600T. If the...
High
Unreviewed
CVE-2024-9124
was published
Oct 8, 2024
Improper Check for Unusual or Exceptional Conditions vulnerability in Webroot SecureAnywhere -...
Moderate
Unreviewed
CVE-2024-7826
was published
Oct 3, 2024
An unauthenticated remote attacker can causes the CODESYS web server to access invalid memory...
High
Unreviewed
CVE-2024-8175
was published
Sep 25, 2024
A vulnerability in the ClamD service module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and...
Moderate
Unreviewed
CVE-2024-20506
was published
Sep 5, 2024
ProTip!
Advisories are also available from the
GraphQL API