Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,343
Erlang
31
GitHub Actions
22
Go
2,107
Maven
5,000+
npm
3,764
NuGet
679
pip
3,452
Pub
12
RubyGems
892
Rust
886
Swift
37
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

212 advisories

Loading
In sched driver, there is a possible use after free due to improper locking. This could lead to... Moderate Unreviewed
CVE-2022-21775 was published Jul 7, 2022
MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress... Moderate Unreviewed
CVE-2022-31623 was published May 26, 2022
MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_xbstream... Moderate Unreviewed
CVE-2022-31621 was published May 26, 2022
MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress... Moderate Unreviewed
CVE-2022-31622 was published May 26, 2022
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it... Moderate Unreviewed
CVE-2021-1123 was published May 24, 2022
The Bluetooth Classic implementation on Zhuhai Jieli AC690X and AC692X devices does not properly... Moderate Unreviewed
CVE-2021-31611 was published May 24, 2022
The Bluetooth Classic implementation on Actions ATS2815 and ATS2819 chipsets does not properly... Moderate Unreviewed
CVE-2021-31785 was published May 24, 2022
btrfs in the Linux kernel before 5.13.4 allows attackers to cause a denial of service (deadlock)... Moderate Unreviewed
CVE-2021-38203 was published May 24, 2022
An issue was discovered in fs/io_uring.c in the Linux kernel through 5.11.8. It allows attackers... Moderate Unreviewed
CVE-2021-28951 was published May 24, 2022
In priorLinearAllocation of C2AllocatorIon.cpp, there is a possible use-after-free due to... Moderate Unreviewed
CVE-2020-27035 was published May 24, 2022
This issue was addressed with improved checks. This issue is fixed in iOS 14.0 and iPadOS 14.0,... Moderate Unreviewed
CVE-2020-9946 was published May 24, 2022
An issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md... Moderate Unreviewed
CVE-2020-12771 was published May 24, 2022
An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of... Moderate Unreviewed
CVE-2019-17343 was published May 24, 2022
In the Linux kernel before 4.16.4, a double-locking error in drivers/usb/dwc3/gadget.c may... Moderate Unreviewed
CVE-2019-14763 was published May 24, 2022
A vulnerability in the Remote Package Manager (RPM) subsystem of Cisco NX-OS Software could allow... Moderate Unreviewed
CVE-2019-1732 was published May 24, 2022
A race condition in perf_event_open() allows local attackers to leak sensitive data from setuid... Moderate Unreviewed
CVE-2019-3901 was published May 24, 2022
A vulnerability in the Cisco Aironet Series Access Points (APs) software could allow an... Moderate Unreviewed
CVE-2018-0381 was published May 13, 2022
The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris before snv_103, does not properly handle... Moderate Unreviewed
CVE-2009-2857 was published May 2, 2022
The Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable... Moderate Unreviewed
CVE-2009-2699 was published May 2, 2022
The ptrace_start function in kernel/ptrace.c in the Linux kernel 2.6.18 does not properly handle... Moderate Unreviewed
CVE-2009-1388 was published May 2, 2022
The inotify_read function in the Linux kernel 2.6.27 to 2.6.27.13, 2.6.28 to 2.6.28.2, and 2.6.29... Moderate Unreviewed
CVE-2009-0935 was published May 2, 2022
fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle... Moderate Unreviewed
CVE-2008-4302 was published May 2, 2022
The kernel in Red Hat Enterprise Linux 3, when running on SMP systems, allows local users to... Moderate Unreviewed
CVE-2006-4342 was published May 1, 2022
Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (deadlock)... Moderate Unreviewed
CVE-2006-2275 was published May 1, 2022
The handle_stop_signal function in signal.c in Linux kernel 2.6.11 up to other versions before 2... Moderate Unreviewed
CVE-2005-3847 was published May 1, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database