Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
37
GitHub Actions
36
Go
2,500
Maven
5,000+
npm
4,147
NuGet
735
pip
3,948
Pub
12
RubyGems
945
Rust
1,025
Swift
39
Unreviewed advisories
All unreviewed
5,000+

26,879 advisories

Loading
Product: AndroidVersions: Android kernelAndroid ID: A-207975764References: N/A Critical Unreviewed
CVE-2022-20403 was published Aug 12, 2022
Product: AndroidVersions: Android kernelAndroid ID: A-234657153References: N/A Critical Unreviewed
CVE-2022-20378 was published Aug 12, 2022
Product: AndroidVersions: Android kernelAndroid ID: A-218701042References: N/A Critical Unreviewed
CVE-2022-20402 was published Aug 12, 2022
In unixODBC before 2.3.5, there is a buffer overflow in the unicode_to_ansi_copy() function in... Critical Unreviewed
CVE-2018-7409 was published May 14, 2022
Adobe Acrobat and Reader versions 2018.011.20055 and earlier, 2017.011.30096 and earlier, and... Critical Unreviewed
CVE-2018-12808 was published May 14, 2022
A vulnerability has been identified in CP 1604 (All versions), CP 1616 (All versions). An... Critical Unreviewed
CVE-2018-13808 was published May 14, 2022
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006... Critical Unreviewed
CVE-2018-12784 was published May 14, 2022
In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer... Critical Unreviewed
CVE-2018-16428 was published May 14, 2022
The VBWinExec function in Node\AspVBObj.dll in Advantech WebAccess 8.3.0 allows remote attackers... Critical Unreviewed
CVE-2018-6911 was published May 14, 2022
The API in Cisco Prime Infrastructure 1.2 through 3.0 and Evolved Programmable Network Manager ... Critical Unreviewed
CVE-2016-1289 was published May 14, 2022
procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.*... Critical Unreviewed
CVE-2018-1126 was published May 14, 2022
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006... Critical Unreviewed
CVE-2018-12791 was published May 14, 2022
The demo feature in Oracle GlassFish Open Source Edition 5.0 has TCP port 7676 open by default... Critical Unreviewed
CVE-2018-14324 was published May 14, 2022
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006... Critical Unreviewed
CVE-2018-5021 was published May 14, 2022
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and... Critical Unreviewed
CVE-2018-4958 was published May 14, 2022
The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before... Critical Unreviewed
CVE-2015-5041 was published May 14, 2022
Multiple buffer overflows in mDNSResponder before 625.41.2 allow remote attackers to read or... Critical Unreviewed
CVE-2015-7987 was published May 14, 2022
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and... Critical Unreviewed
CVE-2018-4983 was published May 14, 2022
HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers... Critical Unreviewed
CVE-2016-2006 was published May 14, 2022
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and... Critical Unreviewed
CVE-2018-4989 was published May 14, 2022
An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x... Critical Unreviewed
CVE-2019-9021 was published May 14, 2022
A Vulnerability in Brocade Network Advisor versions before 14.1.0 could allow a remote... Critical Unreviewed
CVE-2018-6444 was published May 14, 2022
Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow... Critical Unreviewed
CVE-2014-9761 was published May 14, 2022
Kibana versions before 6.6.1 contain an arbitrary code execution flaw in the security audit... Critical Unreviewed
CVE-2019-7610 was published May 14, 2022
The secure_load function in gluon/utils.py in web2py before 2.14.2 uses pickle.loads to... Critical Unreviewed
CVE-2016-3957 was published May 14, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database