Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,640
Maven
5,000+
npm
4,265
NuGet
760
pip
4,061
Pub
12
RubyGems
956
Rust
1,057
Swift
45
Unreviewed advisories
All unreviewed
5,000+

1,315 advisories

Loading
A peer could send empty handshake fragments containing only padding which would be kept in memory... High Unreviewed
CVE-2019-11924 was published May 24, 2022
IBM Security Guardium Big Data Intelligence 4.0 (SonarG) does not properly restrict the size or... High Unreviewed
CVE-2019-4338 was published May 24, 2022
OpenStack os-vif Ageing time of 0 disables linuxbridge MAC learning Critical
CVE-2019-15753 was published for os-vif (pip) May 24, 2022
Ubiquiti EdgeMAX devices before 2.0.3 allow remote attackers to cause a denial of service (disk... High Unreviewed
CVE-2019-16889 was published May 24, 2022
In Bluetooth, there is a possible remote code execution due to an improper memory allocation.... High Unreviewed
CVE-2019-9291 was published May 24, 2022
In tzdata there is possible memory corruption due to a mismatch between allocation and... High Unreviewed
CVE-2019-9290 was published May 24, 2022
A vulnerability in the web-based management interface of Cisco IC3000 Industrial Compute Gateway... Moderate Unreviewed
CVE-2019-12714 was published May 24, 2022
JetBrains PyCharm before 2019.2 was allocating a buffer of unknown size for one of the connection... High Unreviewed
CVE-2019-14958 was published May 24, 2022
An exploitable memory corruption vulnerability exists in the JavaScript engine of Foxit Software... High Unreviewed
CVE-2019-5031 was published May 24, 2022
sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before... Moderate Unreviewed
CVE-2019-15165 was published May 24, 2022
By design, BIND is intended to limit the number of TCP clients that can be connected at any given... High Unreviewed
CVE-2018-5743 was published May 24, 2022
An issue was discovered in Bitdefender BOX firmware versions before 2.1.37.37-34 that affects the... Moderate Unreviewed
CVE-2019-12611 was published May 24, 2022
Apache Traffic Server is vulnerable to HTTP/2 setting flood attacks. Earlier versions of Apache... High Unreviewed
CVE-2019-10079 was published May 24, 2022
An exploitable denial-of-service vulnerability exists in the Weave daemon of the Nest Cam IQ... High Unreviewed
CVE-2019-5043 was published May 24, 2022
An issue was discovered in NiceHash Miner before 2.0.3.0. A missing rate limit while adding a... High Unreviewed
CVE-2019-6120 was published May 24, 2022
GitLab 12.2.3 contains a security vulnerability that allows a user to affect the availability of... Moderate Unreviewed
CVE-2019-15593 was published May 24, 2022
A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote... Moderate Unreviewed
CVE-2019-14834 was published May 24, 2022
GNU LibreDWG 0.9.3.2564 has an attempted excessive memory allocation in read_sections_map in... Moderate Unreviewed
CVE-2020-6610 was published May 24, 2022
C++ Facebook Thrift servers would not error upon receiving messages declaring containers of sizes... High Unreviewed
CVE-2019-3553 was published May 24, 2022
Golang Facebook Thrift servers vulnerable to denial of service High
CVE-2019-11939 was published for github.com/facebook/fbthrift (Go) May 24, 2022
SHAREit through 4.0.6.177 does not check the full message length from the received packet header ... High Unreviewed
CVE-2019-15234 was published May 24, 2022
SHAREit through 4.0.6.177 does not check the body length from the received packet header (which... High Unreviewed
CVE-2019-14941 was published May 24, 2022
A potential DoS flaw was found in the virtio-fs shared file system daemon (virtiofsd)... Low Unreviewed
CVE-2020-10717 was published May 24, 2022
An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF... High Unreviewed
CVE-2020-13114 was published May 24, 2022
An issue was discovered in LibVNCServer before 0.9.13. libvncclient/rfbproto.c does not limit... High Unreviewed
CVE-2020-14405 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database