Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,274
Erlang
31
GitHub Actions
21
Go
2,056
Maven
5,000+
npm
3,740
NuGet
668
pip
3,419
Pub
12
RubyGems
891
Rust
872
Swift
36
Unreviewed advisories
All unreviewed
5,000+

12,814 advisories

Loading
The WebVPN CIFS implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0(.4.1) and... Moderate Unreviewed
CVE-2013-6691 was published May 13, 2022
An issue was discovered in certain Apple products. iOS before 10 is affected. Safari before 10 is... High Unreviewed
CVE-2016-4764 was published May 13, 2022
coders/wpg.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (heap... High Unreviewed
CVE-2017-16669 was published May 13, 2022
The parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which... Critical Unreviewed
CVE-2016-4303 was published May 13, 2022
In Tidy 5.7.0, the prvTidyTidyMetaCharset function in clean.c allows attackers to cause a denial... High Unreviewed
CVE-2017-17497 was published May 13, 2022
The hash_buffer function in schnorr.c in OpenSSH through 6.4, when Makefile.inc is modified to... High Unreviewed
CVE-2014-1692 was published May 13, 2022
ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0 allows remote attackers to execute... Critical Unreviewed
CVE-2018-0487 was published May 13, 2022
A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP... Critical Unreviewed
CVE-2018-8476 was published May 13, 2022
Buffer overflow in the GlobalProtect Portal in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x... Critical Unreviewed
CVE-2016-3657 was published May 13, 2022
Buffer overflow in the management web interface in Palo Alto Networks PAN-OS before 5.0.20, 5.1.x... Critical Unreviewed
CVE-2016-9150 was published May 13, 2022
The GlobalProtect Portal in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x... High Unreviewed
CVE-2016-3656 was published May 13, 2022
Buffer overflow in Novell iPrint Server in Novell Open Enterprise Server 2 (OES2) through SP3 on... High Unreviewed
CVE-2011-4194 was published May 13, 2022
/opt/novell/ncl/bin/nwrights in Novell Client for Linux in Novell Open Enterprise Server (OES) 11... Low Unreviewed
CVE-2014-0595 was published May 13, 2022
Integer overflow in the getword function in options.c in pppd in Paul's PPP Package (ppp) before... High Unreviewed
CVE-2014-3158 was published May 13, 2022
Buffer overflow in the rc_mksid function in plugins/radius/util.c in Paul's PPP Package (ppp) 2.4... Moderate Unreviewed
CVE-2015-3310 was published May 13, 2022
An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles... High Unreviewed
CVE-2018-8464 was published May 13, 2022
Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess (aka... Critical Unreviewed
CVE-2015-8972 was published May 13, 2022
A buffer overflow issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib... High Unreviewed
CVE-2018-14779 was published May 13, 2022
Heap-based buffer overflow in the dissector_postgresql function in dissectors/ec_postgresql.c in... High Unreviewed
CVE-2014-6395 was published May 13, 2022
The dissector_postgresql function in dissectors/ec_postgresql.c in Ettercap before 0.8.1 allows... High Unreviewed
CVE-2014-6396 was published May 13, 2022
Stack-based buffer overflow in the scan_load_hosts function in ec_scan.c in Ettercap 0.7.5.1 and... Moderate Unreviewed
CVE-2013-0722 was published May 13, 2022
Heap-based buffer overflow in the nbns_spoof function in plug-ins/nbns_spoof/nbns_spoof.c in... High Unreviewed
CVE-2014-9377 was published May 13, 2022
The htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive... Critical Unreviewed
CVE-2015-8710 was published May 13, 2022
The radius_get_attribute function in dissectors/ec_radius.c in Ettercap 0.8.1 performs an... High Unreviewed
CVE-2014-9379 was published May 13, 2022
The dissector_cvs function in dissectors/ec_cvs.c in Ettercap 0.8.1 allows remote attackers to... Moderate Unreviewed
CVE-2014-9380 was published May 13, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database