Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,266
Erlang
31
GitHub Actions
21
Go
2,035
Maven
5,000+
npm
3,732
NuGet
662
pip
3,413
Pub
12
RubyGems
891
Rust
865
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

45 advisories

Loading
There is an incorrect buffer size calculation vulnerability in the video framework. Successful... High Unreviewed
CVE-2021-40052 was published Mar 11, 2022
There is an incorrect buffer size calculation vulnerability in the video framework. Successful... High Unreviewed
CVE-2021-40048 was published Mar 11, 2022
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using... High Unreviewed
CVE-2021-44510 was published Apr 16, 2022
Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to... High Unreviewed
CVE-2003-0899 was published Apr 29, 2022
Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via... High Unreviewed
CVE-2004-1363 was published Apr 29, 2022
Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by... High Unreviewed
CVE-2001-0249 was published Apr 30, 2022
Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by... High Unreviewed
CVE-2001-0248 was published Apr 30, 2022
Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow... High Unreviewed
CVE-2002-0184 was published Apr 30, 2022
Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause... High Unreviewed
CVE-2002-1347 was published Apr 30, 2022
Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a... High Unreviewed
CVE-2005-2103 was published May 1, 2022
The init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly... High Unreviewed
CVE-2008-0599 was published May 1, 2022
An exploitable arbitrary write vulnerability exists in the open document format parser of the... High Unreviewed
CVE-2018-4038 was published May 13, 2022
The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a... High Unreviewed
CVE-2014-3468 was published May 13, 2022
An elevation of privilege vulnerability exists in Windows when LDAP request buffer lengths are... High Unreviewed
CVE-2017-0166 was published May 13, 2022
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local... High Unreviewed
CVE-2017-0569 was published May 13, 2022
In writeToParcel and createFromParcel of RttManager.java, there is a permission bypass due to a... High Unreviewed
CVE-2017-13289 was published May 13, 2022
A vulnerability has been identified in OpenPCS 7 V8.1 (All versions), OpenPCS 7 V8.2 (All... High Unreviewed
CVE-2019-19282 was published May 24, 2022
Windows Kernel Local Elevation of Privilege Vulnerability High Unreviewed
CVE-2020-17087 was published May 24, 2022
Microsoft Defender Remote Code Execution Vulnerability High Unreviewed
CVE-2021-1647 was published May 24, 2022
An out-of-bounds write vulnerability exists in the PSD Header processing functionality of... High Unreviewed
CVE-2020-13585 was published May 24, 2022
An out-of-bounds write vulnerability exists in the SGI Format Buffer Size Processing... High Unreviewed
CVE-2021-21776 was published May 24, 2022
An out-of-bounds write vulnerability exists in the TIFF header count-processing functionality of... High Unreviewed
CVE-2021-21773 was published May 24, 2022
An out-of-bounds write vulnerability exists in the SGI format buffer size processing... High Unreviewed
CVE-2021-21782 was published May 24, 2022
Memory corruption due to ioctl command size was incorrectly set to the size of a pointer and not... High Unreviewed
CVE-2020-11240 was published May 24, 2022
An out-of-bounds write vulnerability exists in the JPG sof_nb_comp header processing... High Unreviewed
CVE-2021-21793 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database