Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,636
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+

2,321 advisories

Loading
There is a heap-based buffer overflow vulnerability in some Huawei Smartphone, Successful exploit... Moderate Unreviewed
CVE-2020-9138 was published May 24, 2022
In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to... Moderate Unreviewed
CVE-2021-0301 was published May 24, 2022
A stack overflow vulnerability in Aleth Ethereum C++ client version <= 1.8.0 using a specially... Moderate Unreviewed
CVE-2020-26800 was published May 24, 2022
A Memory Leak issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53. Moderate Unreviewed
CVE-2018-11007 was published May 24, 2022
Insufficient data validation in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote... Moderate Unreviewed
CVE-2020-16040 was published May 24, 2022
There's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c. When an attacker... Moderate Unreviewed
CVE-2020-27841 was published May 24, 2022
track_header in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of... Moderate Unreviewed
CVE-2020-35964 was published May 24, 2022
In /SM8250_Q_Master/android/vendor/oppo_charger/oppo/charger_ic/oppo_mp2650.c, the function... Moderate Unreviewed
CVE-2020-11833 was published May 24, 2022
In /SM8250_Q_Master/android/vendor/oppo_charger/oppo/charger_ic/oppo_da9313.c, failure to check... Moderate Unreviewed
CVE-2020-11835 was published May 24, 2022
In functions charging_limit_current_write and charging_limit_time_write in /SM8250_Q_Master... Moderate Unreviewed
CVE-2020-11832 was published May 24, 2022
In /SM8250_Q_Master/android/vendor/oppo_charger/oppo/oppo_vooc.c, the function... Moderate Unreviewed
CVE-2020-11834 was published May 24, 2022
WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in pack_utils.c because of an... Moderate Unreviewed
CVE-2020-35738 was published May 24, 2022
An arbitrary memory write vulnerability in Asylo versions up to 0.6.0 allows an untrusted... Moderate Unreviewed
CVE-2020-8944 was published May 24, 2022
In phNxpNciHal_send_ext_cmd of phNxpNciHal_ext.cc, there is a possible out of bounds write due to... Moderate Unreviewed
CVE-2020-27036 was published May 24, 2022
In extend_frame_highbd of restoration.c, there is a possible out of bounds write due to a heap... Moderate Unreviewed
CVE-2020-0470 was published May 24, 2022
A flaw was found in the memory management API of QEMU during the initialization of a memory... Moderate Unreviewed
CVE-2020-27821 was published May 24, 2022
A flaw was found in ImageMagick in MagickCore/quantum-private.h. An attacker who submits a... Moderate Unreviewed
CVE-2020-27752 was published May 24, 2022
In WriteOnePNGImage() of the PNG coder at coders/png.c, an improper call to AcquireVirtualMemory(... Moderate Unreviewed
CVE-2020-25664 was published May 24, 2022
A head-based buffer overflow exists in Academy Software Foundation OpenEXR 2.3.0 in writeTileData... Moderate Unreviewed
CVE-2020-16589 was published May 24, 2022
A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in... Moderate Unreviewed
CVE-2020-16587 was published May 24, 2022
A heap-based buffer overflow privilege escalation vulnerability in Trend Micro ServerProtect for... Moderate Unreviewed
CVE-2020-28575 was published May 24, 2022
An out-of-bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 uses SPECS... Moderate Unreviewed
CVE-2020-13524 was published May 24, 2022
A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 parsing of compressed string... Moderate Unreviewed
CVE-2020-13494 was published May 24, 2022
In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer... Moderate Unreviewed
CVE-2020-28928 was published May 24, 2022
Out of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an... Moderate Unreviewed
CVE-2020-0569 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database