Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,783
Erlang
36
GitHub Actions
29
Go
2,353
Maven
5,000+
npm
3,977
NuGet
720
pip
3,774
Pub
12
RubyGems
923
Rust
981
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

21 advisories

Loading
VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within... High Unreviewed
CVE-2025-22225 was published Mar 4, 2025
Substance3D - Stager versions 3.0.3 and earlier are affected by a Write-what-where Condition... High Unreviewed
CVE-2024-45142 was published Oct 9, 2024
Micro-Star International Z-series motherboards (Z590, Z490, and Z790) and B-series motherboards ... High Unreviewed
CVE-2024-36877 was published Aug 12, 2024
Return registers were overwritten which could have allowed an attacker to execute arbitrary code.... High Unreviewed
CVE-2024-2607 was published Mar 19, 2024
Substance3D - Painter versions 9.1.1 and earlier are affected by a Write-what-where Condition... High Unreviewed
CVE-2024-20741 was published Feb 15, 2024
A vulnerability has been identified in syngo fastView (All versions). The affected application... High Unreviewed
CVE-2021-45465 was published Jan 4, 2024
Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to... High Unreviewed
CVE-2022-37904 was published Dec 12, 2022
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM callout... High Unreviewed
CVE-2022-35408 was published Sep 23, 2022
A potential attacker can write one byte by arbitrary address at the time of the PEI phase (only... High Unreviewed
CVE-2022-40246 was published Sep 21, 2022
A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the... High Unreviewed
CVE-2022-40262 was published Sep 21, 2022
A CWE-123: Write-what-where Condition vulnerability exists in EcoStruxure™ Control Expert (all... High Unreviewed
CVE-2020-7560 was published May 24, 2022
The affected product is vulnerable to a unsanitized extract folder for system configuration. A... High Unreviewed
CVE-2021-42540 was published May 24, 2022
A vulnerability in the internal message processing of Cisco RV340, RV340W, RV345, and RV345P Dual... High Unreviewed
CVE-2021-1520 was published May 24, 2022
A vulnerability in one of the diagnostic test CLI commands of Cisco IOS XE Software could allow... High Unreviewed
CVE-2021-1390 was published May 24, 2022
Foxit Reader before 8.3.1 and PhantomPDF before 8.3.1 have an Arbitrary Write vulnerability,... High Unreviewed
CVE-2017-10994 was published May 17, 2022
NVIDIA Tegra kernel driver contains a vulnerability in NVMAP where an attacker has the ability to... High Unreviewed
CVE-2017-6282 was published May 14, 2022
A vulnerability in the embedded test subsystem of Cisco IOS Software for Cisco 800 Series... High Unreviewed
CVE-2018-15375 was published May 13, 2022
A vulnerability in the embedded test subsystem of Cisco IOS Software for Cisco 800 Series... High Unreviewed
CVE-2018-15376 was published May 13, 2022
Webroot SecureAnywhere before 9.0.8.34 on macOS mishandles access to the driver by a process that... High Unreviewed
CVE-2018-16962 was published May 13, 2022
An exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality... High Unreviewed
CVE-2018-3971 was published May 13, 2022
An exploitable arbitrary write vulnerability exists in the open document format parser of the... High Unreviewed
CVE-2018-4038 was published May 13, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database