Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,333
Erlang
31
GitHub Actions
22
Go
2,095
Maven
5,000+
npm
3,760
NuGet
678
pip
3,446
Pub
12
RubyGems
892
Rust
882
Swift
37
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

452 advisories

Loading
In wlan driver, there is a possible missing bounds check, This could lead to local denial of... Moderate Unreviewed
CVE-2022-42765 was published Dec 6, 2022
In wlan driver, there is a possible missing bounds check, This could lead to local denial of... Moderate Unreviewed
CVE-2022-42763 was published Dec 6, 2022
An integer overflow and buffer overflow issues were found in the ACPI Error Record Serialization... Moderate Unreviewed
CVE-2022-4172 was published Nov 29, 2022
In fdt_next_tag of fdt.c, there is a possible out of bounds write due to an integer overflow.... Moderate Unreviewed
CVE-2022-20454 was published Nov 9, 2022
Denial of service in BOOT when partition size for a particular partition is requested due to... Moderate Unreviewed
CVE-2022-22078 was published Oct 19, 2022
In rndis_set_response of rndis.c, there is a possible out of bounds write due to an integer... Moderate Unreviewed
CVE-2022-20423 was published Oct 12, 2022
GNU oSIP v5.3.0 was discovered to contain an integer overflow via the component... Moderate Unreviewed
CVE-2022-41550 was published Oct 12, 2022
Qemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW... Moderate Unreviewed
CVE-2014-0147 was published Sep 30, 2022
An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf... Moderate Unreviewed
CVE-2022-36402 was published Sep 17, 2022
In extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read... Moderate Unreviewed
CVE-2022-20393 was published Sep 14, 2022
In vow, there is a possible out of bounds read due to an integer overflow. This could lead to... Moderate Unreviewed
CVE-2022-26459 was published Sep 7, 2022
In teei, there is a possible memory corruption due to an integer overflow. This could lead to... Moderate Unreviewed
CVE-2022-26454 was published Sep 7, 2022
In audio ipi, there is a possible out of bounds write due to an integer overflow. This could lead... Moderate Unreviewed
CVE-2022-26466 was published Sep 7, 2022
An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum() function in... Moderate Unreviewed
CVE-2021-20224 was published Aug 26, 2022
In construct_transaction of lwis_ioctl.c, there is a possible out of bounds write due to an... Moderate Unreviewed
CVE-2022-20367 was published Aug 12, 2022
In ioctl_dpm_clk_update of lwis_ioctl.c, there is a possible out of bounds write due to an... Moderate Unreviewed
CVE-2022-20366 was published Aug 12, 2022
Rizin v0.4.0 and below was discovered to contain an integer overflow via the function... Moderate Unreviewed
CVE-2022-34612 was published Jul 28, 2022
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6).... Moderate Unreviewed
CVE-2021-33439 was published Jul 27, 2022
An integer overflow / wraparound vulnerability [CWE-190] in FortiSwitch 7.0.2 and below, 6.4.9... Moderate Unreviewed
CVE-2021-42755 was published Jul 19, 2022
An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers... Moderate Unreviewed
CVE-2022-33068 was published Jun 24, 2022
The ap_rwrite() function in Apache HTTP Server 2.4.53 and earlier may read unintended memory if... Moderate Unreviewed
CVE-2022-28614 was published Jun 10, 2022
In apusys driver, there is a possible system crash due to an integer overflow. This could lead to... Moderate Unreviewed
CVE-2022-21760 was published Jun 7, 2022
In apusys driver, there is a possible system crash due to an integer overflow. This could lead to... Moderate Unreviewed
CVE-2022-21761 was published Jun 7, 2022
In apusys driver, there is a possible system crash due to an integer overflow. This could lead to... Moderate Unreviewed
CVE-2022-21762 was published Jun 7, 2022
Integer Overflow or Wraparound in GitHub repository polonel/trudesk prior to 1.2.3. Moderate Unreviewed
CVE-2022-1926 was published Jun 1, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database