Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,339
Erlang
31
GitHub Actions
22
Go
2,099
Maven
5,000+
npm
3,763
NuGet
678
pip
3,448
Pub
12
RubyGems
892
Rust
883
Swift
37
Unreviewed advisories
All unreviewed
5,000+

683 advisories

Loading
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability High Unreviewed
CVE-2023-41771 was published Oct 10, 2023
Windows Graphics Component Elevation of Privilege Vulnerability High Unreviewed
CVE-2023-38159 was published Oct 10, 2023
An issue was discovered in drivers/net/ethernet/arc/emac_main.c in the Linux kernel before 4.5. A... High Unreviewed
CVE-2016-10906 was published May 24, 2022
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability High Unreviewed
CVE-2023-24903 was published May 9, 2023
Metadata verification and partial hash system calls by bootloader may corrupt parallel hashing... High Unreviewed
CVE-2018-13909 was published May 24, 2022
There is a race condition vulnerability on Huawei Honor V10 smartphones versions earlier than... High Unreviewed
CVE-2019-5216 was published May 24, 2022
Microsoft Message Queuing Remote Code Execution Vulnerability High Unreviewed
CVE-2023-35309 was published Jul 11, 2023
Remote Desktop Client Remote Code Execution Vulnerability High Unreviewed
CVE-2024-21307 was published Jan 9, 2024
The session index variable in PCM host voice audio driver initialized before PCM open, accessed... High Unreviewed
CVE-2023-33110 was published Jan 2, 2024
An issue was discovered in bgpd in FRRouting (FRR) 8.3. In bgp_notify_send_with_data() and... High Unreviewed
CVE-2022-37035 was published Aug 3, 2022
In the Linux kernel before 5.17.3, fs/io_uring.c has a use-after-free due to a race condition in... High Unreviewed
CVE-2022-29582 was published Apr 23, 2022
Race condition vulnerability in the binder driver module Impact: Successful exploitation of this... High Unreviewed
CVE-2024-32997 was published May 14, 2024
A use-after-free flaw was found in the Linux Kernel due to a race problem in the unix garbage... High Unreviewed
CVE-2023-6531 was published Jan 21, 2024
Microsoft Security Advisory CVE-2023-33170: .NET Security Feature Bypass Vulnerability High
CVE-2023-33170 was published for Microsoft.AspNet.Identity.Owin (NuGet) Jul 11, 2023
DmitriyLewen gillarramendi
In the Linux kernel, the following vulnerability has been resolved: tcp: TX zerocopy should not... High Unreviewed
CVE-2022-48689 was published May 3, 2024
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix... High Unreviewed
CVE-2024-27020 was published May 1, 2024
Microsoft is investigating reports of a series of remote code execution vulnerabilities impacting... High Unreviewed
CVE-2023-36884 was published Jul 11, 2023
In sec_media_unprotect of media.c, there is a possible memory corruption due to a race condition.... High Unreviewed
CVE-2024-32891 was published Jun 13, 2024
A defect was discovered in the Python “ssl” module where there is a memory race condition with... High Unreviewed
CVE-2024-0397 was published Jun 17, 2024
OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of... High Unreviewed
CVE-2023-41915 was published Sep 10, 2023
In sec_media_protect of media.c, there is a possible permission bypass due to a race condition.... High Unreviewed
CVE-2024-32908 was published Jun 13, 2024
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix a race on... High Unreviewed
CVE-2022-48858 was published Jul 16, 2024
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to... High Unreviewed
CVE-2016-5195 was published May 13, 2022
A signal handler race condition was found in OpenSSH's server (sshd), where a client does not... High Unreviewed
CVE-2024-6387 was published Jul 1, 2024
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability High Unreviewed
CVE-2023-28232 was published Apr 11, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database