GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,272
Erlang
31
GitHub Actions
21
Go
2,047
Maven
5,000+
npm
3,739
NuGet
668
pip
3,415
Pub
12
RubyGems
891
Rust
868
Swift
36
Unreviewed advisories
All unreviewed
5,000+
69 advisories
Filter by severity
There is an Uninitialized AOD driver structure in Smartphones.Successful exploitation of this...
High
Unreviewed
CVE-2021-39966
was published
Jan 4, 2022
report_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the...
High
Unreviewed
CVE-2021-36386
was published
May 24, 2022
In ipSecSetEncapSocketOwner of XfrmController.cpp, there is a possible failure to initialize a...
Moderate
Unreviewed
CVE-2018-9511
was published
May 13, 2022
A denial of service vulnerability in the Android media framework (h264 decoder). Product: Android...
Moderate
Unreviewed
CVE-2017-0730
was published
May 13, 2022
The snd_hdspm_hwdep_ioctl function in sound/pci/rme9652/hdspm.c in the Linux kernel before 2.6.36...
Low
Unreviewed
CVE-2010-4081
was published
May 13, 2022
The sisfb_ioctl function in drivers/video/sis/sis_main.c in the Linux kernel before 2.6.36-rc6...
Low
Unreviewed
CVE-2010-4078
was published
May 13, 2022
The ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux kernel before...
Low
Unreviewed
CVE-2011-1044
was published
May 13, 2022
The viafb_ioctl_get_viafb_info function in drivers/video/via/ioctl.c in the Linux kernel before 2...
Low
Unreviewed
CVE-2010-4082
was published
May 13, 2022
Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization....
High
Unreviewed
CVE-2018-14647
was published
May 13, 2022
The copy_semid_to_user function in ipc/sem.c in the Linux kernel before 2.6.36 does not...
Low
Unreviewed
CVE-2010-4083
was published
May 13, 2022
In quota_proc_write of xt_quota2.c, there is a possible way to read kernel memory due to...
Moderate
Unreviewed
CVE-2021-0961
was published
Dec 16, 2021
Memory corruption in array-tools
Critical
CVE-2020-36452
was published
for
array-tools
(Rust)
Aug 25, 2021
strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a...
High
Unreviewed
CVE-2018-10811
was published
May 13, 2022
It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly...
High
Unreviewed
CVE-2019-3804
was published
May 13, 2022
In writeToParcel of SurfaceControl.cpp, there is a possible information disclosure due to...
Moderate
Unreviewed
CVE-2022-20357
was published
Aug 11, 2022
The tc_fill_tclass function in net/sched/sch_api.c in the tc subsystem in the Linux kernel 2.4.x...
Low
Unreviewed
CVE-2009-3228
was published
May 2, 2022
A flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The virgl did not properly...
Moderate
Unreviewed
CVE-2022-0175
was published
Aug 27, 2022
In the Linux kernel before 5.2.14, rds6_inc_info_copy in net/rds/recv.c allows attackers to...
Moderate
Unreviewed
CVE-2019-16714
was published
May 24, 2022
There is an Uninitialized variable vulnerability in Huawei Smartphone.Successful exploitation of...
Moderate
Unreviewed
CVE-2021-22482
was published
May 24, 2022
An issue was discovered in function sofia_handle_sip_i_notify in sofia.c in SignalWire freeswitch...
High
Unreviewed
CVE-2021-36513
was published
May 24, 2022
An information disclosure vulnerability exists in AMD Platform Security Processor (PSP) chipset...
Moderate
Unreviewed
CVE-2021-26333
was published
May 24, 2022
A vulnerability was found in the Linux kernel in versions before v5.14-rc1. Missing size...
Low
Unreviewed
CVE-2021-3655
was published
May 24, 2022
Uninitialized memory in a canvas object could have caused an incorrect free() leading to memory...
High
Unreviewed
CVE-2021-29980
was published
May 24, 2022
A WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out...
High
Unreviewed
CVE-2021-23994
was published
May 24, 2022
HVM soft-reset crashes toolstack libxl requires all data structures passed across its public...
Moderate
Unreviewed
CVE-2021-28687
was published
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API