GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,224
Erlang
31
GitHub Actions
19
Go
1,990
Maven
5,000+
npm
3,706
NuGet
661
pip
3,336
Pub
11
RubyGems
884
Rust
845
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
61 advisories
Filter by severity
Incorrect Calculation and Use of Insufficiently Random Values in Python
Moderate
Unreviewed
CVE-2020-14422
was published
May 11, 2021
On BIG-IP AFM version 16.x before 16.1.0, 15.1.x before 15.1.5, 14.1.x before 14.1.4.5, and all...
Moderate
Unreviewed
CVE-2022-23028
was published
Jan 26, 2022
On certain hardware BIG-IP platforms, in version 15.1.x before 15.1.4 and 14.1.x before 14.1.3,...
High
Unreviewed
CVE-2022-23011
was published
Jan 26, 2022
In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts...
High
Unreviewed
CVE-2021-45960
was published
Feb 10, 2022
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using...
High
Unreviewed
CVE-2021-44504
was published
Apr 16, 2022
An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can...
High
Unreviewed
CVE-2021-44491
was published
Apr 16, 2022
An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can...
High
Unreviewed
CVE-2021-44490
was published
Apr 16, 2022
STB v2.27 was discovered to contain an integer shift of invalid size in the component...
High
Unreviewed
CVE-2022-28048
was published
Apr 16, 2022
On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x...
High
Unreviewed
CVE-2022-26517
was published
May 6, 2022
There is a floating point exception error in sixel_encoder_do_resize, encoder.c:633 in libsixel...
Moderate
Unreviewed
CVE-2022-29978
was published
May 12, 2022
NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote...
Moderate
Unreviewed
CVE-2016-7433
was published
May 13, 2022
In Wireshark 2.6.0 to 2.6.3, the CoAP dissector could crash. This was addressed in epan...
High
Unreviewed
CVE-2018-18225
was published
May 13, 2022
ffjpeg.dll in ffjpeg before 2018-08-22 allows remote attackers to cause a denial of service (FPE...
Moderate
Unreviewed
CVE-2018-16781
was published
May 13, 2022
net/sctp/sm_make_chunk.c in the Linux kernel before 2.6.34, when addip_enable and auth_enable are...
Moderate
Unreviewed
CVE-2011-1573
was published
May 13, 2022
Xen allows local OS guest users to cause a denial of service (crash) or possibly obtain sensitive...
High
Unreviewed
CVE-2017-12135
was published
May 13, 2022
Off-by-one error in the OpenType Sanitizer in Google Chrome before 18.0.1025.142 allows remote...
Moderate
Unreviewed
CVE-2011-3062
was published
May 13, 2022
When loading a document with Apache Open Office 4.1.5 and earlier with smaller end line...
High
Unreviewed
CVE-2018-11790
was published
May 13, 2022
A vulnerability in certain IPv4 fragment-processing functions of Cisco Remote PHY Software could...
High
Unreviewed
CVE-2018-15391
was published
May 13, 2022
A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr...
Moderate
Unreviewed
CVE-2017-2618
was published
May 13, 2022
An elevation of privilege vulnerability in Audioserver could enable a local malicious application...
High
Unreviewed
CVE-2017-0545
was published
May 13, 2022
A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 4.4...
High
Unreviewed
CVE-2017-0666
was published
May 13, 2022
A remote code execution vulnerability in the Android media framework. Product: Android. Versions:...
High
Unreviewed
CVE-2017-0679
was published
May 13, 2022
A vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1...
High
Unreviewed
CVE-2017-0819
was published
May 13, 2022
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Floating Point...
Moderate
Unreviewed
CVE-2017-11537
was published
May 13, 2022
The xen_biovec_phys_mergeable function in drivers/xen/biomerge.c in Xen might allow local OS...
High
Unreviewed
CVE-2017-12134
was published
May 13, 2022
ProTip!
Advisories are also available from the
GraphQL API