Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,856
Erlang
36
GitHub Actions
36
Go
2,488
Maven
5,000+
npm
4,104
NuGet
735
pip
3,923
Pub
12
RubyGems
945
Rust
1,017
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

1,216 advisories

Loading
NVIDIA distributions of Jetson Linux contain a vulnerability where an error in the IOMMU... High Unreviewed
CVE-2022-21819 was published Mar 12, 2022
Ericsson Network Manager 20.2 has Insecure Permissions. Moderate Unreviewed
CVE-2021-28488 was published Mar 11, 2022
It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent (DSA) uses the "... High Unreviewed
CVE-2021-42855 was published Mar 11, 2022
Incorrect Permission Assignment for Critical Resource vulnerability in the crash handling... High Unreviewed
CVE-2021-4199 was published Mar 8, 2022
A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels... Moderate Unreviewed
CVE-2021-3631 was published Mar 4, 2022
An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. The... Moderate Unreviewed
CVE-2022-26157 was published Mar 1, 2022
The Job Composer app in Ohio Supercomputer Center Open OnDemand before 1.7.19 and 1.8.x before 1... Moderate Unreviewed
CVE-2020-27958 was published Feb 27, 2022
An issue exists in Fuchsia where VMO data can be modified through access to copy-on-write... Moderate Unreviewed
CVE-2022-0247 was published Feb 26, 2022
In JetBrains Hub before 2021.1.13890, integration with JetBrains Account exposed an API key with... High Unreviewed
CVE-2022-24327 was published Feb 26, 2022
WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged... Moderate Unreviewed
CVE-2022-25363 was published Feb 25, 2022
A flaw was found in the way samba, as an Active Directory Domain Controller, is able to support... High Unreviewed
CVE-2020-25718 was published Feb 19, 2022
RigoBlock Dragos through 2022-02-17 lacks the onlyOwner modifier for setMultipleAllowances. This... High Unreviewed
CVE-2022-25335 was published Feb 19, 2022
A flaw was found in argocd. Any unprivileged user is able to deploy argocd in their namespace and... Moderate Unreviewed
CVE-2021-3557 was published Feb 17, 2022
Local privilege escalation due to insecure folder permissions. The following products are... High Unreviewed
CVE-2022-0483 was published Feb 12, 2022
There is an improper security permission configuration vulnerability on ACPU.Successful... High Unreviewed
CVE-2021-39992 was published Feb 11, 2022
Incorrect Permission Assignment for Critical Resource vulnerability in OPC Server for AC 800M... High Unreviewed
CVE-2021-22284 was published Feb 10, 2022
controller/org.controller/org.controller.js in the CVE Services API 1.1.1 before... High Unreviewed
CVE-2021-46561 was published Feb 8, 2022
Prior to v0.6.1, bored-agent failed to sanitize incoming kubernetes impersonation headers... High Unreviewed
CVE-2022-0270 was published Jan 26, 2022
An incorrect setting of UXN bits within mmu_flags_to_s1_pte_attr lead to privileged executable... Critical Unreviewed
CVE-2021-22566 was published Jan 19, 2022
During Zabbix installation from RPM, DAC_OVERRIDE SELinux capability is in use to access PID... High Unreviewed
CVE-2022-23132 was published Jan 14, 2022
File and directory permissions have been corrected to prevent unintended users from modifying or... Critical Unreviewed
CVE-2022-22988 was published Jan 14, 2022
An issue was discovered in CALDERA 2.8.1. It does not properly segregate user privileges,... High Unreviewed
CVE-2021-42562 was published Jan 13, 2022
ColorOS pregrant dangerous permissions to apps which are listed in a whitelist xml named default... High Unreviewed
CVE-2021-23244 was published Dec 28, 2021
Incorrect permission assignment for critical resource vulnerability in GroupSession Free edition... High Unreviewed
CVE-2021-20874 was published Dec 25, 2021
Mesa Labs AmegaView Versions 3.0 and prior has insecure file permissions that could be exploited... High Unreviewed
CVE-2021-27445 was published Dec 22, 2021
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database