GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
109
GitHub Actions
55
Go
4,569
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,522
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19
382 advisories
Filter by severity
u'Out of Bound issue in DSP services while processing received arguments due to improper...
High
Unreviewed
CVE-2020-11208
was published
May 24, 2022
The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers from an integer...
Critical
Unreviewed
CVE-2021-33316
was published
May 12, 2022
The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers from an integer...
Critical
Unreviewed
CVE-2021-33315
was published
May 12, 2022
Allowing long password leads to denial of service in GitHub repository causefx/organizr prior to...
High
Unreviewed
CVE-2022-1698
was published
May 13, 2022
An exploitable integer underflow vulnerability exists in the ZigBee firmware update routine of...
Moderate
Unreviewed
CVE-2018-3926
was published
May 13, 2022
An exploitable integer underflow vulnerability exists in the mdnscap binary of the CUJO Smart...
High
Unreviewed
CVE-2018-4011
was published
May 13, 2022
Integer underflow in the base64-decoding implementation in EMC RSA BSAFE Micro Edition Suite (MES...
Critical
Unreviewed
CVE-2015-0537
was published
May 13, 2022
When processing subtitles format media file, KMPlayer version 2018.12.24.14 or lower doesn't...
Moderate
Unreviewed
CVE-2019-9133
was published
May 13, 2022
In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message,...
Critical
Unreviewed
CVE-2017-9214
was published
May 13, 2022
Integer underflow in glyph handling in FreeType before 2.4.0 allows remote attackers to cause a...
Moderate
Unreviewed
CVE-2010-2497
was published
May 13, 2022
A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco...
High
Unreviewed
CVE-2018-15418
was published
May 13, 2022
An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for...
Moderate
Unreviewed
CVE-2017-8906
was published
May 13, 2022
Apache PLC4X - PLC4C (Only the C language implementation was effected) was vulnerable to an...
High
Unreviewed
CVE-2021-43083
was published
Dec 20, 2021
Integer underflow in the ksba_oid_to_str function in Libksba before 1.3.2, as used in GnuPG,...
High
Unreviewed
CVE-2014-9087
was published
May 13, 2022
Integer underflow in header.c in lha allows remote attackers to have unspecified impact via a...
Critical
Unreviewed
CVE-2016-1925
was published
May 13, 2022
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in...
Critical
Unreviewed
CVE-2018-14353
was published
May 13, 2022
Fuji Electric V-Server 4.0.3.0 and prior, An integer underflow vulnerability has been identified,...
Critical
Unreviewed
CVE-2018-14817
was published
May 13, 2022
Heap-based buffer overflow in Actian Pervasive PSQL v12.10 and Zen v13 allows remote attackers to...
Critical
Unreviewed
CVE-2017-11757
was published
May 13, 2022
rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap...
Critical
Unreviewed
CVE-2018-20180
was published
May 13, 2022
The edge_bulk_in_callback function in drivers/usb/serial/io_ti.c in the Linux kernel before 4.10...
Moderate
Unreviewed
CVE-2017-8924
was published
May 14, 2022
rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap...
Critical
Unreviewed
CVE-2018-20179
was published
May 14, 2022
An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0...
High
Unreviewed
CVE-2018-16601
was published
May 14, 2022
Improper input validation in Bluetooth Controller function can lead to possible memory corruption...
High
Unreviewed
CVE-2017-18170
was published
May 14, 2022
Multiple Integer underflows in the geonet_print function in tcpdump 4.5.0 through 4.6.2, when in...
Moderate
Unreviewed
CVE-2014-8768
was published
May 14, 2022
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...
High
Unreviewed
CVE-2018-11301
was published
May 14, 2022
ProTip!
Advisories are also available from the
GraphQL API