Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,161
Rust
1,598
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

1,167 advisories

Loading
The parseSWF_ACTIONRECORD function in util/parser.c in libming through 0.4.8 allows remote... High Unreviewed
CVE-2019-7581 was published May 13, 2022
calibre before 5.32.0 contains a regular expression that is vulnerable to ReDoS (Regular... High Unreviewed
CVE-2021-44686 was published Dec 8, 2021
In Tor before 0.3.3.12, 0.3.4.x before 0.3.4.11, 0.3.5.x before 0.3.5.8, and 0.4.x before 0.4.0.2... High Unreviewed
CVE-2019-8955 was published May 13, 2022
The readBytes function in util/read.c in libming through 0.4.8 allows remote attackers to have... High Unreviewed
CVE-2019-7582 was published May 13, 2022
remember_Ktype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows... High Unreviewed
CVE-2018-12934 was published May 13, 2022
IBM QRadar Incident Forensics 7.2 and 7.3 does not properly restrict the size or amount of... High Unreviewed
CVE-2018-1647 was published May 13, 2022
A vulnerability in the Shell Access Filter feature of Cisco Firepower Management Center (FMC),... High Unreviewed
CVE-2018-15458 was published May 13, 2022
It was found that vdsm before version 4.20.37 invokes qemu-img on untrusted inputs without... High Unreviewed
CVE-2018-10908 was published May 13, 2022
A vulnerability in the TCP throttling process for Cisco IoT Field Network Director (IoT-FND)... High Unreviewed
CVE-2017-6780 was published May 13, 2022
A vulnerability in the TCP connection handling functionality of Cisco Remote Expert Manager... High Unreviewed
CVE-2017-6641 was published May 13, 2022
A vulnerability in the TCP throttling process of Cisco Prime Network could allow an... High Unreviewed
CVE-2018-0137 was published May 13, 2022
An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator... High Unreviewed
CVE-2017-0612 was published May 13, 2022
A denial of service vulnerability in the Android media framework (libskia). Product: Android.... High Unreviewed
CVE-2017-0771 was published May 13, 2022
IBM Tivoli Endpoint Manager could allow a unauthorized user to consume all resources and crash... High Unreviewed
CVE-2017-1227 was published May 13, 2022
The ReadCINImage function in coders/cin.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1... High Unreviewed
CVE-2017-11525 was published May 13, 2022
A vulnerability in the Android media framework (libhevc) related to handling ps_codec_obj memory... High Unreviewed
CVE-2017-13190 was published May 13, 2022
The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29... High Unreviewed
CVE-2017-13716 was published May 13, 2022
A vulnerability in the Android media framework (libavc) related to handling dec_hdl memory... High Unreviewed
CVE-2017-13189 was published May 13, 2022
In ImageMagick 7.0.7-1 Q16, a memory exhaustion vulnerability was found in the function... High Unreviewed
CVE-2017-18028 was published May 13, 2022
libplist allows attackers to cause a denial of service (large memory allocation and crash) via... High Unreviewed
CVE-2017-5835 was published May 13, 2022
A vulnerability in the authentication, authorization, and accounting (AAA) implementation of... High Unreviewed
CVE-2017-3883 was published May 13, 2022
A STUN server in conjunction with a large number of "webkitRTCPeerConnection" objects can be used... High Unreviewed
CVE-2017-5388 was published May 13, 2022
A vulnerability in the TCP throttling process for the GUI of the Cisco Identity Services Engine ... High Unreviewed
CVE-2017-6653 was published May 13, 2022
In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel memory can... High Unreviewed
CVE-2017-8253 was published May 13, 2022
** DISPUTED ** The GNU Multiple Precision Arithmetic Library (GMP) interfaces for PHP through 7.1... High Unreviewed
CVE-2017-7963 was published May 13, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database