Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,636
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+

3,203 advisories

Loading
Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x... Moderate Unreviewed
CVE-2022-28259 was published May 12, 2022
Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x... Moderate Unreviewed
CVE-2022-28251 was published May 12, 2022
Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x... Moderate Unreviewed
CVE-2022-28246 was published May 12, 2022
Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x... Moderate Unreviewed
CVE-2022-28245 was published May 12, 2022
Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x... Moderate Unreviewed
CVE-2022-28249 was published May 12, 2022
Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x... Moderate Unreviewed
CVE-2022-28248 was published May 12, 2022
In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to an... Moderate Unreviewed
CVE-2022-20010 was published May 11, 2022
Libarchive v3.6.0 was discovered to contain a read memory access vulnerability via the function... Moderate Unreviewed
CVE-2022-28066 was published May 5, 2022
The GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-3 allows remote... Moderate Unreviewed
CVE-2012-0259 was published May 4, 2022
In alac decoder, there is a possible out of bounds read due to a missing bounds check. This could... Moderate Unreviewed
CVE-2022-20092 was published May 4, 2022
Improper buffer size check logic in aviextractor library prior to SMR May-2022 Release 1 allows... Moderate Unreviewed
CVE-2022-28785 was published May 4, 2022
Improper buffer size check logic in aviextractor library prior to SMR May-2022 Release 1 allows... Moderate Unreviewed
CVE-2022-28786 was published May 4, 2022
Improper buffer size check logic in wmfextractor library prior to SMR May-2022 Release 1 allows... Moderate Unreviewed
CVE-2022-28787 was published May 4, 2022
Improper buffer size check logic in aviextractor library prior to SMR May-2022 Release 1 allows... Moderate Unreviewed
CVE-2022-28788 was published May 4, 2022
The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a... Moderate Unreviewed
CVE-2007-3847 was published May 1, 2022
wp-admin/user-edit.php in WordPress before 2.0.5 allows remote authenticated users to read the... Moderate Unreviewed
CVE-2006-6016 was published May 1, 2022
A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel... Moderate Unreviewed
CVE-2019-3459 was published Apr 30, 2022
sipclient.cpp in KPhone 4.0.1 and earlier allows remote attackers to cause a denial of service ... Moderate Unreviewed
CVE-2004-1940 was published Apr 29, 2022
The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a... Moderate Unreviewed
CVE-2004-0421 was published Apr 29, 2022
isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash)... Moderate Unreviewed
CVE-2004-0221 was published Apr 29, 2022
Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to... Moderate Unreviewed
CVE-2004-0184 was published Apr 29, 2022
TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP... Moderate Unreviewed
CVE-2004-0183 was published Apr 29, 2022
gp_rtp_builder_do_hevc in ietf/rtp_pck_mpeg4.c in GPAC 2.0.0 has a heap-based buffer over-read,... Moderate Unreviewed
CVE-2022-29537 was published Apr 22, 2022
An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and B_03 of Webroot... Moderate Unreviewed
CVE-2021-40424 was published Apr 15, 2022
An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and B_03 of Webroot... Moderate Unreviewed
CVE-2021-40425 was published Apr 15, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database