GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
3,626
Erlang
29
GitHub Actions
16
Go
1,698
Maven
4,936
npm
3,466
NuGet
601
pip
2,975
Pub
10
RubyGems
826
Rust
767
Swift
34
Unreviewed advisories
All unreviewed
5,000+
159 advisories
Filter by severity
D-Link G416 httpd Improper Handling of Exceptional Conditions Information Disclosure...
Moderate
Unreviewed
CVE-2023-50212
was published
May 3, 2024
An Improper Handling of Exceptional Conditions vulnerability in Juniper Networks Junos OS and...
Moderate
Unreviewed
CVE-2024-30380
was published
Apr 16, 2024
An Improper Handling of Exceptional Conditions vulnerability in the Class of Service daemon (cosd...
Moderate
Unreviewed
CVE-2024-21610
was published
Apr 12, 2024
JFrog Artifactory later than version 7.17.4 but prior to version 7.77.0 is vulnerable to an issue...
Moderate
Unreviewed
CVE-2023-42509
was published
Mar 7, 2024
In the Linux kernel, the following vulnerability has been resolved:
parisc: Clear stale IIR...
Moderate
Unreviewed
CVE-2021-46928
was published
Feb 27, 2024
In the Linux kernel, the following vulnerability has been resolved:
net: tls: handle backlogging...
Moderate
Unreviewed
CVE-2024-26584
was published
Feb 21, 2024
An Improper Handling of Exceptional Conditions vulnerability in BGP session processing of...
Moderate
Unreviewed
CVE-2024-21585
was published
Jan 12, 2024
An Improper Check for Unusual or Exceptional Conditions vulnerability in Juniper DHCP Daemon ...
Moderate
Unreviewed
CVE-2023-36842
was published
Jan 12, 2024
An Improper Handling of Exceptional Conditions vulnerability in the broadband edge subscriber...
Moderate
Unreviewed
CVE-2024-21587
was published
Jan 12, 2024
An issue was discovered in open5gs v2.6.6. InitialUEMessage, Registration request sent at a...
Moderate
Unreviewed
CVE-2023-50019
was published
Jan 3, 2024
There is a denial of service vulnerability in some ZTE mobile internet products. Due to...
Moderate
Unreviewed
CVE-2023-25644
was published
Dec 14, 2023
Improper exception management vulnerability in Knox Guard prior to SMR Dec-2023 Release 1 allows...
Moderate
Unreviewed
CVE-2023-42559
was published
Dec 5, 2023
Improper handling of insufficient permissions or privileges vulnerability in Samsung Data Store...
Moderate
Unreviewed
CVE-2023-42578
was published
Dec 5, 2023
Elasticsearch Improper Handling of Exceptional Conditions
Moderate
CVE-2023-46673
was published
for
org.elasticsearch:elasticsearch
(Maven)
Nov 22, 2023
A flaw was found in KVM. An improper check in svm_set_x2apic_msr_interception() may allow direct...
Moderate
Unreviewed
CVE-2023-5090
was published
Nov 6, 2023
Dell PowerScale OneFS 8.2.x, 9.0.0.x-9.5.0.x contains an improper handling of insufficient...
Moderate
Unreviewed
CVE-2023-43087
was published
Nov 2, 2023
Buffer Overflow vulnerability in baramundi software GmbH EMM Agent 23.1.50 and before allows an...
Moderate
Unreviewed
CVE-2023-37605
was published
Oct 2, 2023
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows...
Moderate
Unreviewed
CVE-2023-3280
was published
Sep 13, 2023
A lack of custom error pages vulnerability [CWE-756] in FortiPresence versions 1.2.0 through 1.2...
Moderate
Unreviewed
CVE-2023-27998
was published
Sep 13, 2023
Apollo Router Unnamed "Subscription" operation results in Denial-of-Service
Moderate
CVE-2023-41317
was published
for
apollo-router
(Rust)
Sep 7, 2023
An Improper Handling of Unicode Encoding vulnerability in the Schweitzer Engineering...
Moderate
Unreviewed
CVE-2023-31169
was published
Aug 31, 2023
A lack of exception handling in the Renault Easy Link Multimedia System Software Version...
Moderate
Unreviewed
CVE-2023-39801
was published
Aug 24, 2023
Improper frame handling in the Zyxel XGS2220-30 firmware version V4.80(ABXN.1), XMG1930-30...
Moderate
Unreviewed
CVE-2023-28768
was published
Aug 14, 2023
An authenticated attacker with guest privileges or higher can cause the iControl SOAP process to...
Moderate
Unreviewed
CVE-2023-38419
was published
Aug 2, 2023
Improper random reading in CIRCL
Moderate
CVE-2023-1732
was published
for
github.com/cloudflare/circl
(Go)
May 11, 2023
ProTip!
Advisories are also available from the
GraphQL API