Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,189
Erlang
31
GitHub Actions
19
Go
1,985
Maven
5,000+
npm
3,701
NuGet
657
pip
3,326
Pub
11
RubyGems
882
Rust
836
Swift
35
Unreviewed advisories
All unreviewed
5,000+

4,829 advisories

Loading
A denial of service vulnerability was reported in the HTTPS service of some Lenovo Printers that... Moderate Unreviewed
CVE-2024-27909 was published Apr 5, 2024
A problem has been identified in the CloudStack additional VM configuration (extraconfig) feature... Moderate Unreviewed
CVE-2024-29008 was published Apr 4, 2024
Temporal Server Denial of Service Moderate
CVE-2024-2689 was published for github.com/temporalio/temporal (Go) Apr 4, 2024
A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS... Moderate Unreviewed
CVE-2024-20334 was published Apr 3, 2024
An improper input validation vulnerability exists in the OAS Engine User Configuration... Moderate Unreviewed
CVE-2024-27201 was published Apr 3, 2024
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 federated... Moderate Unreviewed
CVE-2024-27254 was published Apr 3, 2024
IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to denial of... Moderate Unreviewed
CVE-2023-52296 was published Apr 3, 2024
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to a denial... Moderate Unreviewed
CVE-2024-22360 was published Apr 3, 2024
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to... Moderate Unreviewed
CVE-2024-25046 was published Apr 3, 2024
A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone... Moderate Unreviewed
CVE-2023-51456 was published Apr 2, 2024
in OpenHarmony v3.2.4 and prior versions allow a local attacker arbitrary code execution in any... Moderate Unreviewed
CVE-2024-29074 was published Apr 2, 2024
Cache Poisoning Vulnerability Moderate
CVE-2024-29042 was published for translate (npm) Mar 22, 2024
PinkDraconian
IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS and 9.3 CD is vulnerable to a denial-of-service attack... Moderate Unreviewed
CVE-2023-45177 was published Mar 20, 2024
GeoServer Arbitrary file renaming vulnerability in REST Coverage/Data Store API Moderate
CVE-2024-23634 was published for org.geoserver:gs-restconfig (Maven) Mar 20, 2024
sikeoka
Improper Input Validation vulnerability in Apache Hop Engine Moderate
CVE-2024-24683 was published for org.apache.hop:hop (Maven) Mar 19, 2024
Dell PowerEdge Server BIOS contains an Improper SMM communication buffer verification... Moderate Unreviewed
CVE-2024-25942 was published Mar 19, 2024
Improper input validation in AVSystem Unified Management Platform (UMP) 23.07.0.16567~LTS can... Moderate Unreviewed
CVE-2024-25656 was published Mar 18, 2024
Certain functionality in OpenText Vertica Management console might be prone to bypass via... Moderate Unreviewed
CVE-2023-7248 was published Mar 15, 2024
Improper input validation in the Intel(R) CSME installer software before version 2328.5.5.0 may... Moderate Unreviewed
CVE-2023-32633 was published Mar 14, 2024
Apache Tomcat Denial of Service due to improper input validation vulnerability for HTTP/2 requests Moderate
CVE-2024-24549 was published for org.apache.tomcat.embed:tomcat-embed-core (Maven) Mar 13, 2024
oscerd westonsteimel
Windows Kernel Denial of Service Vulnerability Moderate Unreviewed
CVE-2024-26181 was published Mar 12, 2024
Windows Standards-Based Storage Management Service Denial of Service Vulnerability Moderate Unreviewed
CVE-2024-26197 was published Mar 12, 2024
Microsoft Teams for Android Information Disclosure Vulnerability Moderate Unreviewed
CVE-2024-21448 was published Mar 12, 2024
An unauthenticated remote attacker can upload a arbitrary script file due to improper input... Moderate Unreviewed
CVE-2024-25994 was published Mar 12, 2024
An unauthenticated remote attacker can perform a log injection due to improper input validation.... Moderate Unreviewed
CVE-2024-25997 was published Mar 12, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database