GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,051
Erlang
29
GitHub Actions
19
Go
1,887
Maven
5,000+
npm
3,602
NuGet
638
pip
3,205
Pub
10
RubyGems
852
Rust
816
Swift
35
Unreviewed advisories
All unreviewed
5,000+
116 advisories
Filter by severity
In sched driver, there is a possible use after free due to improper locking. This could lead to...
Moderate
Unreviewed
CVE-2022-21775
was published
Jul 7, 2022
MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress...
Moderate
Unreviewed
CVE-2022-31623
was published
May 26, 2022
MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress...
Moderate
Unreviewed
CVE-2022-31622
was published
May 26, 2022
MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_xbstream...
Moderate
Unreviewed
CVE-2022-31621
was published
May 26, 2022
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it...
Moderate
Unreviewed
CVE-2021-1123
was published
May 24, 2022
The Bluetooth Classic implementation on Actions ATS2815 and ATS2819 chipsets does not properly...
Moderate
Unreviewed
CVE-2021-31785
was published
May 24, 2022
The Bluetooth Classic implementation on Zhuhai Jieli AC690X and AC692X devices does not properly...
Moderate
Unreviewed
CVE-2021-31611
was published
May 24, 2022
btrfs in the Linux kernel before 5.13.4 allows attackers to cause a denial of service (deadlock)...
Moderate
Unreviewed
CVE-2021-38203
was published
May 24, 2022
An issue was discovered in fs/io_uring.c in the Linux kernel through 5.11.8. It allows attackers...
Moderate
Unreviewed
CVE-2021-28951
was published
May 24, 2022
In priorLinearAllocation of C2AllocatorIon.cpp, there is a possible use-after-free due to...
Moderate
Unreviewed
CVE-2020-27035
was published
May 24, 2022
This issue was addressed with improved checks. This issue is fixed in iOS 14.0 and iPadOS 14.0,...
Moderate
Unreviewed
CVE-2020-9946
was published
May 24, 2022
An issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md...
Moderate
Unreviewed
CVE-2020-12771
was published
May 24, 2022
An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of...
Moderate
Unreviewed
CVE-2019-17343
was published
May 24, 2022
In the Linux kernel before 4.16.4, a double-locking error in drivers/usb/dwc3/gadget.c may...
Moderate
Unreviewed
CVE-2019-14763
was published
May 24, 2022
A vulnerability in the Remote Package Manager (RPM) subsystem of Cisco NX-OS Software could allow...
Moderate
Unreviewed
CVE-2019-1732
was published
May 24, 2022
A race condition in perf_event_open() allows local attackers to leak sensitive data from setuid...
Moderate
Unreviewed
CVE-2019-3901
was published
May 24, 2022
A vulnerability in the Cisco Aironet Series Access Points (APs) software could allow an...
Moderate
Unreviewed
CVE-2018-0381
was published
May 13, 2022
The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris before snv_103, does not properly handle...
Moderate
Unreviewed
CVE-2009-2857
was published
May 2, 2022
The Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable...
Moderate
Unreviewed
CVE-2009-2699
was published
May 2, 2022
The ptrace_start function in kernel/ptrace.c in the Linux kernel 2.6.18 does not properly handle...
Moderate
Unreviewed
CVE-2009-1388
was published
May 2, 2022
The inotify_read function in the Linux kernel 2.6.27 to 2.6.27.13, 2.6.28 to 2.6.28.2, and 2.6.29...
Moderate
Unreviewed
CVE-2009-0935
was published
May 2, 2022
fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle...
Moderate
Unreviewed
CVE-2008-4302
was published
May 2, 2022
The kernel in Red Hat Enterprise Linux 3, when running on SMP systems, allows local users to...
Moderate
Unreviewed
CVE-2006-4342
was published
May 1, 2022
Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (deadlock)...
Moderate
Unreviewed
CVE-2006-2275
was published
May 1, 2022
The handle_stop_signal function in signal.c in Linux kernel 2.6.11 up to other versions before 2...
Moderate
Unreviewed
CVE-2005-3847
was published
May 1, 2022
ProTip!
Advisories are also available from the
GraphQL API