GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,238
Erlang
31
GitHub Actions
21
Go
2,005
Maven
5,000+
npm
3,716
NuGet
662
pip
3,388
Pub
11
RubyGems
885
Rust
851
Swift
36
Unreviewed advisories
All unreviewed
5,000+
406 advisories
Filter by severity
Mercurial missing symlink check
High
CVE-2017-1000115
was published
for
mercurial
(pip)
May 14, 2022
lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to...
High
Unreviewed
CVE-2015-1335
was published
May 14, 2022
Ansible Sandbox Escape via Symlink Attack
High
CVE-2015-6240
was published
for
ansible
(pip)
May 13, 2022
fish before 2.1.1 allows local users to write to arbitrary files via a symlink attack on (1) /tmp...
High
Unreviewed
CVE-2014-3219
was published
May 13, 2022
SoSReport Predictable Tmp File Names
High
CVE-2015-7529
was published
for
sosreport
(pip)
May 13, 2022
Unspecified tests in Lynis before 2.5.0 allow local users to write to arbitrary files or possibly...
High
Unreviewed
CVE-2017-8108
was published
May 13, 2022
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10...
High
Unreviewed
CVE-2017-6981
was published
May 13, 2022
In open buildservice 2.6 before 2.6.3, 2.5 before 2.5.7 and 2.4 before 2.4.8 the source service...
High
Unreviewed
CVE-2015-0796
was published
May 13, 2022
A privilege escalation vulnerability was found in nagios 4.2.x that occurs in daemon-init.in when...
High
Unreviewed
CVE-2016-8641
was published
May 13, 2022
Qemu before version 2.9 is vulnerable to an improper link following when built with the VirtFS. A...
High
Unreviewed
CVE-2016-9602
was published
May 13, 2022
PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x...
High
Unreviewed
CVE-2017-12172
was published
May 13, 2022
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could...
High
Unreviewed
CVE-2018-1780
was published
May 13, 2022
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could...
High
Unreviewed
CVE-2018-1781
was published
May 13, 2022
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1...
High
Unreviewed
CVE-2018-1834
was published
May 13, 2022
NVIDIA GeForce Experience before 3.18 contains a vulnerability when ShadowPlay or GameStream is...
High
Unreviewed
CVE-2019-5674
was published
May 13, 2022
NVIDIA Windows GPU Display driver contains a vulnerability in the 3D vision component in which...
High
Unreviewed
CVE-2019-5665
was published
May 13, 2022
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC)...
High
Unreviewed
CVE-2019-0841
was published
May 13, 2022
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly...
High
Unreviewed
CVE-2019-0572
was published
May 13, 2022
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly...
High
Unreviewed
CVE-2019-0574
was published
May 13, 2022
In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory...
High
Unreviewed
CVE-2018-12015
was published
May 13, 2022
Information leakage vulnerability in the administrative console in Dialogic PowerMedia XMS...
High
Unreviewed
CVE-2018-11637
was published
May 13, 2022
RubyGems Link Following vulnerability
High
CVE-2018-1000073
was published
for
org.jruby:jruby-stdlib
(RubyGems)
May 13, 2022
A hard-link created from the log file of Check Point ZoneAlarm up to 15.4.062 to any file on the...
High
Unreviewed
CVE-2019-8455
was published
May 13, 2022
mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14;...
High
Unreviewed
CVE-2016-6664
was published
May 13, 2022
It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when...
High
Unreviewed
CVE-2017-7501
was published
May 13, 2022
ProTip!
Advisories are also available from the
GraphQL API