Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,293
Erlang
31
GitHub Actions
21
Go
2,061
Maven
5,000+
npm
3,744
NuGet
668
pip
3,423
Pub
12
RubyGems
892
Rust
875
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

19 advisories

Loading
Windows Mobile Broadband Driver Remote Code Execution Vulnerability Moderate Unreviewed
CVE-2024-43524 was published Oct 8, 2024
Artifex MuPDF 1.14.0 has a SEGV in the function fz_load_page of the fitz/document.c file, as... Moderate Unreviewed
CVE-2019-6130 was published May 13, 2022
Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave... High Unreviewed
CVE-2023-37923 was published Jan 8, 2024
Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave... High Unreviewed
CVE-2023-37921 was published Jan 8, 2024
Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave... High Unreviewed
CVE-2023-37922 was published Jan 8, 2024
NVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a... Moderate Unreviewed
CVE-2023-0201 was published Apr 22, 2023
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software... High Unreviewed
CVE-2020-3235 was published May 24, 2022
gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which... High Unreviewed
CVE-2017-5884 was published May 14, 2022
In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out... Critical Unreviewed
CVE-2014-9411 was published May 17, 2022
The PJSIP PJSUA2 SDK before SVN Changeset 51322 for Android might allow attackers to execute... Critical Unreviewed
CVE-2015-2003 was published May 14, 2022
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile... Critical Unreviewed
CVE-2016-10495 was published May 14, 2022
The MetaIO SDK before 6.0.2.1 for Android might allow attackers to execute arbitrary code by... Critical Unreviewed
CVE-2015-2001 was published May 14, 2022
The Jumio SDK before 1.5.0 for Android might allow attackers to execute arbitrary code by... Critical Unreviewed
CVE-2015-2000 was published May 14, 2022
The GraceNote GNSDK SDK before SVN Changeset 1.1.7 for Android might allow attackers to execute... Critical Unreviewed
CVE-2015-2004 was published May 14, 2022
The ESRI ArcGis Runtime SDK before 10.2.6-2 for Android might allow attackers to execute... Critical Unreviewed
CVE-2015-2002 was published May 14, 2022
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile... Critical Unreviewed
CVE-2015-9142 was published May 14, 2022
Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following... High Unreviewed
CVE-2018-7530 was published May 13, 2022
H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server... Moderate Unreviewed
CVE-2017-10872 was published May 13, 2022
In F5 BIG-IP APM 12.0.0 through 12.1.2 and 13.0.0, an authenticated user with an established... Moderate Unreviewed
CVE-2017-0302 was published May 17, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database