GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,056
Erlang
29
GitHub Actions
19
Go
1,889
Maven
5,000+
npm
3,612
NuGet
638
pip
3,208
Pub
10
RubyGems
853
Rust
816
Swift
35
Unreviewed advisories
All unreviewed
5,000+
12,719 advisories
Filter by severity
The X.25 implementation in the Linux kernel before 2.6.36.2 does not properly parse facilities,...
Moderate
Unreviewed
CVE-2010-3873
was published
May 13, 2022
tcsd in TrouSerS before 0.3.10 allows remote attackers to cause a denial of service (daemon crash...
Moderate
Unreviewed
CVE-2012-0698
was published
May 13, 2022
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11...
High
Unreviewed
CVE-2018-4162
was published
May 13, 2022
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial...
High
Unreviewed
CVE-2017-15746
was published
May 13, 2022
The cr_tknzr_parse_comment function in cr-tknzr.c in libcroco 0.6.12 allows remote attackers to...
Moderate
Unreviewed
CVE-2017-8834
was published
May 13, 2022
X.org libXi 1.7.1 and earlier allows X servers to trigger allocation of insufficient memory and a...
Moderate
Unreviewed
CVE-2013-1995
was published
May 13, 2022
Multiple buffer overflows in X.org libXi 1.7.1 and earlier allow X servers to cause a denial of...
Moderate
Unreviewed
CVE-2013-1998
was published
May 13, 2022
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for...
High
Unreviewed
CVE-2019-5670
was published
May 13, 2022
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for...
High
Unreviewed
CVE-2019-5669
was published
May 13, 2022
The Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write...
High
Unreviewed
CVE-2018-7566
was published
May 13, 2022
HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to a...
High
Unreviewed
CVE-2018-7116
was published
May 13, 2022
Buffer overflow in event handler in Intel Active Management Technology in Intel Converged...
Moderate
Unreviewed
CVE-2018-3629
was published
May 13, 2022
Buffer overflow in HTTP handler in Intel Active Management Technology in Intel Converged Security...
High
Unreviewed
CVE-2018-3628
was published
May 13, 2022
In LibSass 3.5-stable, there is an illegal address access at Sass::Eval::operator that will lead...
Moderate
Unreviewed
CVE-2018-19219
was published
May 13, 2022
An issue was discovered on Epson WorkForce WF-2861 10.48 LQ22I3, 10.51.LQ20I6 and 10.52.LQ17IA...
High
Unreviewed
CVE-2018-18959
was published
May 13, 2022
The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote...
High
Unreviewed
CVE-2018-18956
was published
May 13, 2022
Qemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data...
High
Unreviewed
CVE-2018-17962
was published
May 13, 2022
golang.org/x/net/html has Improper Restriction of Operations within the Bounds of a Memory Buffer
High
CVE-2018-17847
was published
for
golang.org/x/net
(Go)
May 13, 2022
golang.org/x/net/html has Improper Restriction of Operations within the Bounds of a Memory Buffer
High
CVE-2018-17143
was published
for
golang.org/x/net
(Go)
May 13, 2022
There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and...
Moderate
Unreviewed
CVE-2018-16644
was published
May 13, 2022
libarchive version commit 9693801580c0cf7c70e862d305270a16b52826a7 onwards (release v3.2.0...
Moderate
Unreviewed
CVE-2018-1000880
was published
May 13, 2022
The Linux Kernel version 3.18 contains a dangerous feature vulnerability in...
Moderate
Unreviewed
CVE-2018-1000199
was published
May 13, 2022
An unauthenticated network-based attacker able to send a maliciously crafted LLDP packet to the...
Critical
Unreviewed
CVE-2018-0007
was published
May 13, 2022
Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X,...
High
Unreviewed
CVE-2013-3326
was published
May 13, 2022
Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X,...
High
Unreviewed
CVE-2013-3325
was published
May 13, 2022
ProTip!
Advisories are also available from the
GraphQL API