GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,333
Erlang
31
GitHub Actions
22
Go
2,095
Maven
5,000+
npm
3,760
NuGet
678
pip
3,446
Pub
12
RubyGems
892
Rust
882
Swift
37
Unreviewed advisories
All unreviewed
5,000+
10,786 advisories
Filter by severity
Microsoft Power BI Client JavaScript SDK Information Disclosure Vulnerability
Moderate
CVE-2024-30054
was published
for
Microsoft.PowerBI.JavaScript
(NuGet)
May 14, 2024
Denial of service in DataCommunicator class in Vaadin 8
Moderate
CVE-2021-33609
was published
for
com.vaadin:vaadin-server
(Maven)
Oct 13, 2021
Improper Input Validation and Allocation of Resources Without Limits or Throttling in poi-scratchpad
Moderate
CVE-2022-26336
was published
for
org.apache.poi:poi-scratchpad
(Maven)
Mar 5, 2022
Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by an Improper Input...
High
Unreviewed
CVE-2024-34098
was published
May 15, 2024
A Header Injection vulnerability in the JFrog platform in versions below 7.85.0 (SaaS) and 7.84.7...
Moderate
Unreviewed
CVE-2024-2248
was published
May 15, 2024
Remote Code
Execution has been discovered in
OpenText™ iManager 3.2.6.0200. The vulnerability can...
High
Unreviewed
CVE-2024-3968
was published
May 15, 2024
A vulnerability in Cisco AppDynamics Network Visibility Agent could allow an unauthenticated,...
Moderate
Unreviewed
CVE-2024-20394
was published
May 15, 2024
Drupal Core Insufficient Contextual Links validation leads to Remote Code Execution
Critical
GHSA-jjx7-8462-w4m4
was published
for
drupal/drupal
(Composer)
May 15, 2024
Laravel Risk of mass-assignment vulnerabilities
Moderate
GHSA-cc2w-ghc5-m5qr
was published
for
illuminate/database
(Composer)
May 15, 2024
Laravel Risk of mass-assignment vulnerabilities
Moderate
GHSA-rj3w-99gc-8j58
was published
for
laravel/framework
(Composer)
May 15, 2024
Laravel Guard bypass in Eloquent models
Moderate
GHSA-44pg-c29v-hp6r
was published
for
laravel/framework
(Composer)
May 15, 2024
A Local File Inclusion (LFI) vulnerability exists in the gaizhenbiao/chuanhuchatgpt application,...
High
Unreviewed
CVE-2024-4321
was published
May 16, 2024
A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that...
Unknown
Unreviewed
CVE-2024-4609
was published
May 16, 2024
Improper input validation for some some Intel(R) PROSet/Wireless WiFi software for Windows before...
High
Unreviewed
CVE-2023-38654
was published
May 16, 2024
Improper input validation in some Intel(R) CBI software before version 1.1.0 may allow an...
Low
Unreviewed
CVE-2023-43745
was published
May 16, 2024
Improper input validation of EpsdSrMgmtConfig in UEFI firmware for some Intel(R) Server Board...
Moderate
Unreviewed
CVE-2023-22662
was published
May 16, 2024
Improper input validation in some Intel(R) BIOS Guard firmware may allow a privileged user to...
High
Unreviewed
CVE-2023-28402
was published
May 16, 2024
Improper input validation for some Intel(R) PROSet/Wireless WiFi software before version 23.20...
Moderate
Unreviewed
CVE-2023-38417
was published
May 16, 2024
Improper input validation for some Intel(R) PROSet/Wireless WiFi software for linux before...
Moderate
Unreviewed
CVE-2023-47210
was published
May 16, 2024
Improper input validation in PlatformVariableInitDxe driver in UEFI firmware for some Intel(R)...
High
Unreviewed
CVE-2024-22095
was published
May 16, 2024
Improper input validation in some Intel(R) Neural Compressor software before version 2.5.0 may...
Critical
Unreviewed
CVE-2024-22476
was published
May 16, 2024
Improper input validation in firmware for some Intel(R) FPGA products before version 2.9.1 may...
Moderate
Unreviewed
CVE-2024-22390
was published
May 16, 2024
Improper input validation in UserAuthenticationSmm driver in UEFI firmware for some Intel(R)...
High
Unreviewed
CVE-2024-23487
was published
May 16, 2024
Improper input validation for some Intel(R) DLB driver software before version 8.5.0 may allow an...
Moderate
Unreviewed
CVE-2024-22015
was published
May 16, 2024
Improper input validation in PprRequestLog module in UEFI firmware for some Intel(R) Server...
High
Unreviewed
CVE-2024-22382
was published
May 16, 2024
ProTip!
Advisories are also available from the
GraphQL API