GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,097
Erlang
29
GitHub Actions
19
Go
1,925
Maven
5,000+
npm
3,657
NuGet
638
pip
3,264
Pub
10
RubyGems
873
Rust
823
Swift
35
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
47 advisories
Filter by severity
IBM Aspera Console 3.4.0 through 3.4.4 could allow a remote attacker to obtain sensitive...
Low
Unreviewed
CVE-2022-43845
was published
Sep 25, 2024
SAP NetWeaver (Change and Transport System) - versions 702, 731, 740, 750, 751, 752, 753, 754,...
Low
Unreviewed
CVE-2023-32114
was published
Jun 13, 2023
SAP Cloud Connector - version 2.0, allows an authenticated user with low privilege to perform...
Low
Unreviewed
CVE-2023-49578
was published
Dec 12, 2023
On Windows systems, the Arc configuration files resulted to be world-readable.
This can lead...
Low
Unreviewed
CVE-2023-5937
was published
May 15, 2024
IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could...
Low
Unreviewed
CVE-2022-33167
was published
Jul 30, 2024
Shared memory sections and events in IBM DB2 8.1 have default permissions of read and write for...
Low
Unreviewed
CVE-2005-4868
was published
May 1, 2022
The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control...
Low
Unreviewed
CVE-2001-0006
was published
Apr 30, 2022
BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3)...
Low
Unreviewed
CVE-2004-1714
was published
Apr 29, 2022
common/snapshots.py in Back In Time (aka backintime) 0.9.26 changes certain permissions to 0777...
Low
Unreviewed
CVE-2009-3611
was published
May 2, 2022
XTerm in Apple Mac OS X 10.4.11 and 10.5.6, when used with luit, creates tty devices with...
Low
Unreviewed
CVE-2009-0141
was published
May 2, 2022
Default permissions for a properties file were too permissive. Local system users could read...
Low
Unreviewed
CVE-2023-26427
was published
Jun 20, 2023
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to...
Low
Unreviewed
CVE-2020-0904
was published
May 24, 2022
Improper access control vulnerability in clearAllGlobalProxy in MiscPolicy prior to SMR Nov-2022...
Low
Unreviewed
CVE-2022-39887
was published
Nov 10, 2022
Improper access control vulnerability in TelephonyUI prior to SMR Jul-2022 Release 1 allows...
Low
Unreviewed
CVE-2022-33689
was published
Jul 13, 2022
An improper access control vulnerability in CPLC prior to SMR Dec-2021 Release 1 allows local...
Low
Unreviewed
CVE-2021-25519
was published
Dec 9, 2021
Incorrect scoping of kill operations in MongoDB Server's packaged SysV init scripts allow users...
Low
Unreviewed
CVE-2019-2389
was published
May 24, 2022
A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission...
Low
Unreviewed
CVE-2019-14824
was published
May 24, 2022
During installation of an OpenShift 4 cluster, the `openshift-install` command line tool creates...
Low
Unreviewed
CVE-2019-19335
was published
May 24, 2022
A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2, where files in '/var/backup/tower...
Low
Unreviewed
CVE-2019-19341
was published
May 24, 2022
In ActivityManager, there is a possible way to check another process's capabilities due to a...
Low
Unreviewed
CVE-2022-20262
was published
Aug 13, 2022
Anne-AL00 Huawei phones with versions earlier than 8.0.0.151(C00) have an information leak...
Low
Unreviewed
CVE-2018-7924
was published
May 13, 2022
An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue...
Low
Unreviewed
CVE-2018-4238
was published
May 13, 2022
Insufficient access control in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before...
Low
Unreviewed
CVE-2018-12217
was published
May 13, 2022
Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows* before...
Low
Unreviewed
CVE-2018-12209
was published
May 13, 2022
IBM MQ Managed File Transfer Agent 8.0 and 9.0 sets insecure permissions on certain files it...
Low
Unreviewed
CVE-2017-1699
was published
May 13, 2022
ProTip!
Advisories are also available from the
GraphQL API