GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,237
Erlang
31
GitHub Actions
20
Go
2,000
Maven
5,000+
npm
3,711
NuGet
661
pip
3,383
Pub
11
RubyGems
885
Rust
849
Swift
36
Unreviewed advisories
All unreviewed
5,000+
10,711 advisories
Filter by severity
Kubernetes csi-proxy vulnerable to privilege escalation due to improper input validation
High
CVE-2023-3893
was published
for
github.com/kubernetes-csi/csi-proxy
(Go)
Nov 3, 2023
An issue has been discovered in GitLab EE with Advanced Search affecting all versions from 13.9...
Low
Unreviewed
CVE-2023-5963
was published
Nov 6, 2023
The 1E-Exchange-DisplayMessageinstruction that is part of the End-User Interaction product pack...
Critical
Unreviewed
CVE-2023-5964
was published
Nov 6, 2023
The 1E-Exchange-CommandLinePing instruction that is part of the Network product pack available...
Critical
Unreviewed
CVE-2023-45163
was published
Nov 6, 2023
The 1E-Exchange-URLResponseTime instruction that is part of the Network product pack available on...
Critical
Unreviewed
CVE-2023-45161
was published
Nov 6, 2023
Apache UIMA Java SDK Deserialization of Untrusted Data, Improper Input Validation vulnerability
High
CVE-2023-39913
was published
for
org.apache.uima:uimaj
(Maven)
Nov 8, 2023
Vulnerability of background app permission management in the framework module. Successful...
Moderate
Unreviewed
CVE-2023-46763
was published
Nov 8, 2023
An improper input validation vulnerability has been found in Lanaccess ONSAFE MonitorHM affecting...
High
Unreviewed
CVE-2023-6012
was published
Nov 8, 2023
Lenovo LeCloud App improper input validation allows attackers to access arbitrary components and...
High
Unreviewed
CVE-2023-5079
was published
Nov 9, 2023
A potential vulnerability was reported in the SMI callback function of the OemSmi driver that...
Moderate
Unreviewed
CVE-2023-43570
was published
Nov 9, 2023
IBM AIX's 7.3 Python implementation could allow a non-privileged local user to exploit a...
Moderate
Unreviewed
CVE-2023-45167
was published
Nov 10, 2023
Attacker can perform a Denial of Service attack to crash the ICAS 3 IVI ECU in a Volkswagen ID.3 ...
Moderate
Unreviewed
CVE-2023-6073
was published
Nov 10, 2023
Improper input validation vulnerability in ProcessWriteFile of libsec-ril prior to SMR Nov-2023...
Moderate
Unreviewed
CVE-2023-42527
was published
Nov 13, 2023
Memory Corruption in Core during syscall for Sectools Fuse comparison feature.
High
Unreviewed
CVE-2023-21671
was published
Nov 14, 2023
Microsoft Security Advisory CVE-2023-36049: .NET Elevation of Privilege Vulnerability
High
CVE-2023-36049
was published
for
System.Net.Requests
(NuGet)
Nov 14, 2023
Memory corruption in core services when Diag handler receives a command to configure event...
High
Unreviewed
CVE-2023-28574
was published
Nov 14, 2023
Failure to validate the AMD SMM communication buffer
may allow an attacker to corrupt the SMRAM...
Critical
Unreviewed
CVE-2022-23820
was published
Nov 14, 2023
Improper input validation in some Intel(R) Server board and Intel(R) Server System BIOS firmware...
High
Unreviewed
CVE-2022-33945
was published
Nov 14, 2023
Improper input validation for some Intel Unison software may allow an authenticated user to...
Low
Unreviewed
CVE-2022-45469
was published
Nov 14, 2023
Improper input validation in some Intel(R) Server System M70KLP Family BIOS firmware before...
High
Unreviewed
CVE-2022-24379
was published
Nov 14, 2023
Improper input validation in firmware for some Intel(R) Optane(TM) SSD products may allow a...
Moderate
Unreviewed
CVE-2023-27519
was published
Nov 14, 2023
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow an...
Low
Unreviewed
CVE-2023-22329
was published
Nov 14, 2023
Improper input validation for some Intel Unison software may allow an unauthenticated user to...
High
Unreviewed
CVE-2023-22337
was published
Nov 14, 2023
Improper input validation in some OpenVINO Model Server software before version 2022.3 for Intel...
Moderate
Unreviewed
CVE-2023-31203
was published
Nov 14, 2023
Improper input validation in the AMD RadeonTM Graphics display driver may allow an attacker to...
High
Unreviewed
CVE-2023-31320
was published
Nov 14, 2023
ProTip!
Advisories are also available from the
GraphQL API