Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
37
GitHub Actions
36
Go
2,500
Maven
5,000+
npm
4,147
NuGet
735
pip
3,948
Pub
12
RubyGems
945
Rust
1,025
Swift
39
Unreviewed advisories
All unreviewed
5,000+

6,725 advisories

Loading
The vrend_draw_vbo function in virglrenderer before 0.6.0 allows local guest OS users to cause a... Moderate Unreviewed
CVE-2017-5956 was published May 17, 2022
The trad_enc_decrypt_update function in archive_read_support_format_zip.c in libarchive before 3... Moderate Unreviewed
CVE-2015-8927 was published May 17, 2022
JavaScriptCore in WebKit allows attackers to cause a denial of service (out-of-bounds heap read)... Moderate Unreviewed
CVE-2016-9642 was published May 17, 2022
There is a heap-based buffer over-read in libdwarf 0.4.0. This issue is related to... High Unreviewed
CVE-2022-34299 was published Jun 24, 2022
Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by an out-of... High Unreviewed
CVE-2022-30651 was published Jun 17, 2022
CVA6 commit 909d85a accesses invalid memory when reading the value of MHPMCOUNTER30. High Unreviewed
CVE-2022-33021 was published Jun 30, 2022
When performing the inference shape operation of the SparseToDense operator, if the number of... High Unreviewed
CVE-2021-33650 was published Jun 28, 2022
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. Unknown Unreviewed
CVE-2022-2206 was published Jun 27, 2022
The parser_yyerror function in the UTF-8 parser in Ruby 2.4.1 allows attackers to cause a denial... Critical Unreviewed
CVE-2017-11465 was published May 17, 2022
There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker... Moderate Unreviewed
CVE-2021-3605 was published May 24, 2022
In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to an... High Unreviewed
CVE-2022-20410 was published Oct 12, 2022
VMware Workstation Pro/Player 12.x before 12.5.3 contains a security vulnerability that exists in... Moderate Unreviewed
CVE-2017-4899 was published May 17, 2022
VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain... High Unreviewed
CVE-2017-4910 was published May 17, 2022
Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out... Moderate Unreviewed
CVE-2022-30669 was published Jun 16, 2022
Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out... Moderate Unreviewed
CVE-2022-30668 was published Jun 16, 2022
An out-of-bounds read and write flaw was found in the way SIPcrack 0.2 processed SIP traffic,... Moderate Unreviewed
CVE-2017-11654 was published May 17, 2022
Denial of service due to memory corruption while extracting ape header from clips in Snapdragon... High Unreviewed
CVE-2022-22083 was published Jun 15, 2022
Possible out of bound read due to lack of length check of data length for a DIAG event in... High Unreviewed
CVE-2021-35084 was published Jun 15, 2022
Potential out of Bounds read in FIPS event processing due to improper validation of the length... Moderate Unreviewed
CVE-2021-35119 was published Jun 15, 2022
Out-of-bounds read vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0... High Unreviewed
CVE-2022-30549 was published Jun 17, 2022
A maliciously crafted TIF file can be forced to read beyond allocated boundaries in Autodesk 3ds... High Unreviewed
CVE-2022-27531 was published Jun 17, 2022
In fdt_next_tag of fdt.c, there is a possible out of bounds read due to an incorrect bounds check... Moderate Unreviewed
CVE-2022-20412 was published Oct 12, 2022
In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to... High Unreviewed
CVE-2022-20123 was published Jun 16, 2022
The GetImageDepth function in MagickCore/attribute.c in ImageMagick 7.0.6-4 might allow remote... Moderate Unreviewed
CVE-2017-11753 was published May 17, 2022
The resample_gauss function in resample.c in TiMidity++ 2.14.0 allows remote attackers to cause a... Moderate Unreviewed
CVE-2017-11547 was published May 17, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database