Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,635
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+

1,019 advisories

Loading
The Linux kernel before version 4.11 is vulnerable to a NULL pointer dereference in fs/cifs... High Unreviewed
CVE-2018-1066 was published May 14, 2022
In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE... High Unreviewed
CVE-2017-3730 was published May 14, 2022
An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2... High Unreviewed
CVE-2018-0490 was published May 14, 2022
The FoFiTrueType::getCFFBlock function in FoFiTrueType.cc in Poppler 0.59.0 has a NULL pointer... High Unreviewed
CVE-2017-14977 was published May 14, 2022
The FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a NULL pointer... High Unreviewed
CVE-2017-14975 was published May 14, 2022
In ncurses 6.0, there is a NULL Pointer Dereference in the _nc_parse_entry function of tinfo... High Unreviewed
CVE-2017-11113 was published May 14, 2022
The kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2,... High Unreviewed
CVE-2015-1721 was published May 14, 2022
In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was... High Unreviewed
CVE-2019-9208 was published May 14, 2022
In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the RPCAP dissector could crash. This was... High Unreviewed
CVE-2019-9214 was published May 14, 2022
The Goodix GT9xx touchscreen driver for custom Linux kernels on Xiaomi daisy-o-oss and daisy-p... High Unreviewed
CVE-2018-19939 was published May 14, 2022
An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "1 of 9.... High Unreviewed
CVE-2017-6298 was published May 14, 2022
For the NVIDIA Quadro, NVS, and GeForce products, there is a Remote Desktop denial of service. A... High Unreviewed
CVE-2016-4959 was published May 14, 2022
ext/imap/php_imap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of... High Unreviewed
CVE-2018-19935 was published May 14, 2022
The WEBP::GetLE32 function in XMPFiles/source/FormatSupport/WEBP_Support.hpp in Exempi 2.4.5 has... High Unreviewed
CVE-2018-12648 was published May 14, 2022
In ReadOneJNGImage in coders/png.c in GraphicsMagick 1.3.26, a Null Pointer Dereference occurs... High Unreviewed
CVE-2017-15930 was published May 14, 2022
The Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a... High Unreviewed
CVE-2018-1000027 was published May 14, 2022
A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code... High Unreviewed
CVE-2018-1000121 was published May 14, 2022
A NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in... High Unreviewed
CVE-2018-12697 was published May 14, 2022
The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer... High Unreviewed
CVE-2016-3616 was published May 14, 2022
An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer... High Unreviewed
CVE-2018-14609 was published May 14, 2022
An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference... High Unreviewed
CVE-2018-14617 was published May 14, 2022
An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x... High Unreviewed
CVE-2018-10548 was published May 14, 2022
An issue was discovered in PHP 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1.... High Unreviewed
CVE-2018-14884 was published May 14, 2022
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006... High Unreviewed
CVE-2018-5030 was published May 14, 2022
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006... High Unreviewed
CVE-2018-5012 was published May 14, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database