Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,635
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+

2,650 advisories

Loading
The DecodeNumber function in unrarlib.c in unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from... Moderate Unreviewed
CVE-2017-14121 was published May 13, 2022
MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP... Moderate Unreviewed
CVE-2018-5729 was published May 13, 2022
libjbig2dec.a in Artifex jbig2dec 0.13, as used in MuPDF and Ghostscript, has a NULL pointer... Moderate Unreviewed
CVE-2017-9216 was published May 13, 2022
Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service ... Moderate Unreviewed
CVE-2019-9704 was published May 13, 2022
The aiptek_probe function in drivers/input/tablet/aiptek.c in the Linux kernel before 4.4 allows... Moderate Unreviewed
CVE-2015-7515 was published May 13, 2022
The treo_attach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows... Moderate Unreviewed
CVE-2016-2782 was published May 13, 2022
ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of... Moderate Unreviewed
CVE-2015-7977 was published May 13, 2022
VMware ESXi 6.5 without patch ESXi650-201707101-SG, ESXi 6.0 without patch ESXi600-201706101-SG,... Moderate Unreviewed
CVE-2017-4925 was published May 13, 2022
fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer... Moderate Unreviewed
CVE-2012-3236 was published May 13, 2022
dwarf_form.c in libdwarf 20160115 allows remote attackers to cause a denial of service (crash)... Moderate Unreviewed
CVE-2016-5027 was published May 13, 2022
The _dwarf_calculate_info_section_end_ptr function in libdwarf before 20160923 allows remote... Moderate Unreviewed
CVE-2016-5030 was published May 13, 2022
The create_fullest_file_path function in libdwarf before 20160923 allows remote attackers to... Moderate Unreviewed
CVE-2016-5029 was published May 13, 2022
libdwarf 20151114 and earlier allows remote attackers to cause a denial of service (NULL pointer... Moderate Unreviewed
CVE-2015-8750 was published May 13, 2022
The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause... Moderate Unreviewed
CVE-2016-5028 was published May 13, 2022
The _dwarf_load_section function in libdwarf before 20160923 allows remote attackers to cause a... Moderate Unreviewed
CVE-2016-5037 was published May 13, 2022
** DISPUTED ** libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a... Moderate Unreviewed
CVE-2017-5969 was published May 13, 2022
NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim... Moderate Unreviewed
CVE-2022-1674 was published May 13, 2022
Mikrotik RouterOs before stable 6.48.2 suffers from a memory corruption vulnerability in the... Moderate Unreviewed
CVE-2021-36614 was published May 12, 2022
Mikrotik RouterOs before stable 6.48.2 suffers from a memory corruption vulnerability in the ptp... Moderate Unreviewed
CVE-2021-36613 was published May 12, 2022
Null pointer dereference in libr/bin/format/mach0/mach0.c in radareorg/radare2 in GitHub... Moderate Unreviewed
CVE-2022-1649 was published May 11, 2022
A NULL pointer dereference flaw was found in the Linux kernel’s X.25 set of standardized network... Moderate Unreviewed
CVE-2022-1516 was published May 6, 2022
Foxit PDF Reader v11.2.1.53537 was discovered to contain a NULL pointer dereference via the... Moderate Unreviewed
CVE-2022-27359 was published May 6, 2022
slim has NULL pointer dereference when using crypt() method from glibc 2.17 Moderate Unreviewed
CVE-2013-4412 was published May 5, 2022
On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and... Moderate Unreviewed
CVE-2022-20796 was published May 5, 2022
XMP Toolkit 2021.07 (and earlier) is affected by a Null pointer dereference vulnerability when... Moderate Unreviewed
CVE-2021-42528 was published May 4, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database