Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
102
GitHub Actions
54
Go
4,347
Maven
5,000+
npm
5,000+
NuGet
1,042
pip
5,000+
Pub
13
RubyGems
1,122
Rust
1,498
Swift
61
Unreviewed advisories
All unreviewed
5,000+

31,971 advisories

Loading
Heap-based buffer overflow in MatrixSSL before 3.8.6 allows remote attackers to execute arbitrary... Critical Unreviewed
CVE-2016-6890 was published May 17, 2022
Heap-based buffer overflow in ultra.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote... Critical Unreviewed
CVE-2016-9942 was published May 13, 2022
Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11... Critical Unreviewed
CVE-2016-10107 was published May 17, 2022
Heap-based buffer overflow in rfbproto.c in LibVNCClient in LibVNCServer before 0.9.11 allows... Critical Unreviewed
CVE-2016-9941 was published May 13, 2022
NETGEAR Arlo base stations with firmware 1.7.5_6178 and earlier, Arlo Q devices with firmware 1.8... Critical Unreviewed
CVE-2016-10115 was published May 17, 2022
SQL injection vulnerability in the "aWeb Cart Watching System for Virtuemart" extension before 2... Critical Unreviewed
CVE-2016-10114 was published May 17, 2022
Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11... Critical Unreviewed
CVE-2016-10108 was published May 17, 2022
MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote... Critical Unreviewed
CVE-2016-9565 was published May 14, 2022
Adobe Animate versions 15.2.1.95 and earlier have an exploitable memory corruption vulnerability.... Critical Unreviewed
CVE-2016-7866 was published May 14, 2022
Mailcwp remote file upload vulnerability incomplete fix v1.100 Critical Unreviewed
CVE-2016-1000156 was published May 17, 2022
Multiple integer overflows in X.org libXtst before 1.2.3 allow remote X servers to trigger out-of... Critical Unreviewed
CVE-2016-7951 was published May 13, 2022
Multiple integer overflows in X.org libXrandr before 1.5.1 allow remote X servers to trigger out... Critical Unreviewed
CVE-2016-7947 was published May 17, 2022
Multiple buffer overflows in the (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org... Critical Unreviewed
CVE-2016-7949 was published May 17, 2022
The XRenderQueryFilters function in X.org libXrender before 0.9.10 allows remote X servers to... Critical Unreviewed
CVE-2016-7950 was published May 17, 2022
X.org libXrandr before 1.5.1 allows remote X servers to trigger out-of-bounds write operations by... Critical Unreviewed
CVE-2016-7948 was published May 17, 2022
Buffer underflow in X.org libXvMC before 1.0.10 allows remote X servers to have unspecified... Critical Unreviewed
CVE-2016-7953 was published May 17, 2022
Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers... Critical Unreviewed
CVE-2016-7944 was published May 17, 2022
The XListFonts function in X.org libX11 before 1.6.4 might allow remote X servers to gain... Critical Unreviewed
CVE-2016-7943 was published May 14, 2022
The ReadDCMImage function in DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7... Critical Unreviewed
CVE-2016-5690 was published May 17, 2022
The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to... Critical Unreviewed
CVE-2016-5689 was published May 17, 2022
The VerticalFilter function in the DDS coder in ImageMagick before 6.9.4-3 and 7.x before 7.0.1-4... Critical Unreviewed
CVE-2016-5687 was published May 17, 2022
The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to... Critical Unreviewed
CVE-2016-5691 was published May 17, 2022
Use-after-free vulnerability in the CURLFile implementation in ext/curl/curl_file.c in PHP before... Critical Unreviewed
CVE-2016-9137 was published May 17, 2022
Integer signedness error in the dynamicGetbuf function in gd_io_dp.c in the GD Graphics Library ... Critical Unreviewed
CVE-2016-8670 was published May 17, 2022
libdwarf 2016-10-21 allows context-dependent attackers to obtain sensitive information or cause a... Critical Unreviewed
CVE-2016-9480 was published May 17, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database