Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,779
Erlang
36
GitHub Actions
29
Go
2,338
Maven
5,000+
npm
3,972
NuGet
714
pip
3,769
Pub
12
RubyGems
923
Rust
976
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

125 advisories

Loading
The class file parser in IBM Java before 1.4.2 SR13 FP9, as used in IBM Runtimes for Java... Low Unreviewed
CVE-2011-0311 was published May 17, 2022
Bootloader contains a vulnerability in the NV3P server where any user with physical access... Low Unreviewed
CVE-2021-1111 was published May 24, 2022
A flaw was found in the Linux kernel in versions before 5.4.92 in the BPF protocol. This flaw... Low Unreviewed
CVE-2021-20239 was published May 24, 2022
Buffer overflow in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0... Low Unreviewed
CVE-2016-0385 was published May 17, 2022
There is a stack-based buffer overflow on some Tenda routers (FH1202/F1202/F1200: versions before... Low Unreviewed
CVE-2017-9139 was published May 17, 2022
slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion... Low Unreviewed
CVE-2012-1164 was published May 17, 2022
Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3... Low Unreviewed
CVE-2014-1647 was published May 17, 2022
Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3... Low Unreviewed
CVE-2014-1646 was published May 17, 2022
Multiple buffer overflows in the NMEA parser (nmea-gen.c) in gypsy 0.8 allow local users to cause... Low Unreviewed
CVE-2011-0524 was published May 17, 2022
OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend... Low Unreviewed
CVE-2013-4261 was published May 17, 2022
Cisco IOS 15.1 and 15.2, when a clientless SSL VPN is configured, allows remote authenticated... Low Unreviewed
CVE-2012-1344 was published May 17, 2022
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not... Low Unreviewed
CVE-2012-2394 was published May 17, 2022
Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 allows remote authenticated users to... Low Unreviewed
CVE-2012-1370 was published May 17, 2022
Improper validation for loop variable received from firmware can lead to out of bound access in... Low Unreviewed
CVE-2019-10535 was published May 24, 2022
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS... Low Unreviewed
CVE-2019-8798 was published May 24, 2022
An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service... Low Unreviewed
CVE-2020-0675 was published May 24, 2022
Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP... Low Unreviewed
CVE-2020-5826 was published May 24, 2022
An information disclosure vulnerability exists in the way that the Windows Graphics Device... Low Unreviewed
CVE-2020-0744 was published May 24, 2022
An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service... Low Unreviewed
CVE-2020-0676 was published May 24, 2022
An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service... Low Unreviewed
CVE-2020-0677 was published May 24, 2022
An access issue was addressed with improved memory management. This issue is fixed in iOS 13.3.1... Low Unreviewed
CVE-2020-3836 was published May 24, 2022
An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service... Low Unreviewed
CVE-2020-0748 was published May 24, 2022
An issue was discovered in the Linux kernel 5.4 and 5.5 through 5.5.6 on the AArch64 architecture... Low Unreviewed
CVE-2020-9391 was published May 24, 2022
Improper buffer restrictions in kernel mode driver for Intel(R) PROSet/Wireless WiFi products... Low Unreviewed
CVE-2020-0558 was published May 24, 2022
A denial of service vulnerability exists when Windows improperly handles objects in memory, aka ... Low Unreviewed
CVE-2020-1076 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database