GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,350
Erlang
31
GitHub Actions
22
Go
2,119
Maven
5,000+
npm
3,770
NuGet
680
pip
3,459
Pub
12
RubyGems
892
Rust
888
Swift
38
Unreviewed advisories
All unreviewed
5,000+
372 advisories
Filter by severity
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...
High
Unreviewed
CVE-2023-21837
was published
Jan 18, 2023
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...
High
Unreviewed
CVE-2023-21839
was published
Jan 18, 2023
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web...
High
Unreviewed
CVE-2023-21842
was published
Jan 18, 2023
NVIDIA BMC IPMI handler allows an unauthenticated host to write to a host SPI flash bypassing...
High
Unreviewed
CVE-2022-42275
was published
Jan 13, 2023
NVIDIA DGX Station contains a vulnerability in SBIOS in the SmiFlash, where a local user with...
High
Unreviewed
CVE-2022-42277
was published
Jan 13, 2023
NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmiFlash, where a local user with...
High
Unreviewed
CVE-2022-42276
was published
Jan 13, 2023
An access control issue in Harbor v1.X.X to v2.5.3 allows attackers to access public and private...
High
Unreviewed
CVE-2022-46463
was published
Jan 13, 2023
A vulnerability classified as problematic has been found in SourceCodester Book Store Management...
High
Unreviewed
CVE-2022-4228
was published
Nov 30, 2022
BKG Professional NtripCaster 2.0.39 allows querying information over the UDP protocol without...
High
Unreviewed
CVE-2022-42982
was published
Nov 17, 2022
The memory management module has the logic bypass vulnerability. Successful exploitation of this...
High
Unreviewed
CVE-2021-46852
was published
Nov 10, 2022
Password recovery vulnerability in SICK SIM2x00 (ARM) Partnumber 1092673 and 1081902 with...
High
Unreviewed
CVE-2022-43989
was published
Nov 2, 2022
Password recovery vulnerability in SICK SIM1012 Partnumber 1098146 with firmware version < 2.2.0...
High
Unreviewed
CVE-2022-43990
was published
Nov 2, 2022
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior lacks authentication for...
High
Unreviewed
CVE-2022-41644
was published
Nov 1, 2022
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior lack proper...
High
Unreviewed
CVE-2022-41688
was published
Nov 1, 2022
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated...
High
Unreviewed
CVE-2022-41776
was published
Nov 1, 2022
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....
High
Unreviewed
CVE-2022-39426
was published
Oct 19, 2022
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....
High
Unreviewed
CVE-2022-39425
was published
Oct 19, 2022
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Admin...
High
Unreviewed
CVE-2022-39412
was published
Oct 19, 2022
Asus RT-N12E 2.0.0.39 is affected by an incorrect access control vulnerability. Through system...
High
Unreviewed
CVE-2020-23648
was published
Oct 19, 2022
Dapr Dashboard vulnerable to Incorrect Access Control
High
CVE-2022-38817
was published
for
github.com/dapr/dashboard
(Go)
Oct 4, 2022
An access control issue in Canaan Avalon ASIC Miner 2020.3.30 and below allows unauthenticated...
High
Unreviewed
CVE-2022-36604
was published
Sep 2, 2022
In D-link DIR-816 A2_v1.10CNB04.img,the network can be reset without authentication via /goform...
High
Unreviewed
CVE-2022-36619
was published
Sep 1, 2022
Insecure permissions in cskefu v7.0.1 allows unauthenticated attackers to arbitrarily add...
High
Unreviewed
CVE-2022-36521
was published
Aug 27, 2022
All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are affected by an...
High
Unreviewed
CVE-2022-37062
was published
Aug 19, 2022
Honeywell Experion PKS Safety Manager through 2022-05-06 has Missing Authentication for a...
High
Unreviewed
CVE-2022-30313
was published
Jul 29, 2022
ProTip!
Advisories are also available from the
GraphQL API