GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,354
Erlang
31
GitHub Actions
22
Go
2,120
Maven
5,000+
npm
3,779
NuGet
681
pip
3,460
Pub
12
RubyGems
892
Rust
888
Swift
38
Unreviewed advisories
All unreviewed
5,000+
190 advisories
Filter by severity
Apport before versions 2.14.1-0ubuntu3.29+esm1, 2.20.1-0ubuntu2.19, 2.20.9-0ubuntu7.7, 2.20.10...
High
Unreviewed
CVE-2019-7307
was published
May 24, 2022
arch/x86/kvm/svm/nested.c in the Linux kernel before 5.11.12 has a use-after-free in which an AMD...
High
Unreviewed
CVE-2021-29657
was published
May 24, 2022
This vulnerability allows remote attackers to bypass authentication on affected installations of...
High
Unreviewed
CVE-2022-36980
was published
Mar 29, 2023
Prior to 0.1, all builds of Eclipse OMR contain a bug where the loop versioner may fail to...
High
Unreviewed
CVE-2019-11774
was published
May 24, 2022
mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs
High
CVE-2021-30465
was published
for
github.com/opencontainers/runc
(Go)
May 25, 2021
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle...
High
Unreviewed
CVE-2019-1065
was published
May 24, 2022
Memory corruption in Core due to time-of-check time-of-use race condition during dump collection...
High
Unreviewed
CVE-2022-33257
was published
Mar 10, 2023
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability. This CVE ID...
High
Unreviewed
CVE-2022-44670
was published
Dec 13, 2022
An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. The IhisiDxe...
High
Unreviewed
CVE-2022-32471
was published
Feb 15, 2023
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the...
High
Unreviewed
CVE-2022-32473
was published
Feb 15, 2023
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the...
High
Unreviewed
CVE-2022-32478
was published
Feb 15, 2023
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the...
High
Unreviewed
CVE-2022-32474
was published
Feb 15, 2023
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the...
High
Unreviewed
CVE-2022-32955
was published
Feb 15, 2023
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the...
High
Unreviewed
CVE-2022-32953
was published
Feb 15, 2023
An issue was discovered in Insyde InsydeH2O with kernel 5.1 through 5.5. DMA attacks on the...
High
Unreviewed
CVE-2022-32954
was published
Feb 15, 2023
A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP...
High
Unreviewed
CVE-2022-43779
was published
Feb 12, 2023
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the...
High
Unreviewed
CVE-2022-32475
was published
Feb 15, 2023
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the...
High
Unreviewed
CVE-2022-32477
was published
Feb 15, 2023
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the...
High
Unreviewed
CVE-2022-32469
was published
Feb 15, 2023
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the...
High
Unreviewed
CVE-2022-32470
was published
Feb 15, 2023
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the...
High
Unreviewed
CVE-2022-32476
was published
Feb 15, 2023
Dell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious...
High
Unreviewed
CVE-2022-34398
was published
Feb 1, 2023
A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the BIOS...
High
Unreviewed
CVE-2022-27538
was published
Feb 1, 2023
DMA transactions which are targeted at input buffers used for the SdMmcDevice software SMI...
High
Unreviewed
CVE-2022-33984
was published
Nov 15, 2022
ProTip!
Advisories are also available from the
GraphQL API