Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,454
Erlang
33
GitHub Actions
22
Go
2,153
Maven
5,000+
npm
3,818
NuGet
693
pip
3,492
Pub
12
RubyGems
902
Rust
903
Swift
38
Unreviewed advisories
All unreviewed
5,000+

2,142 advisories

Loading
fs/f2fs/segment.c in the Linux kernel before 4.13 allows local users to cause a denial of service... Moderate Unreviewed
CVE-2017-18241 was published May 14, 2022
The function TextExtractor::ExtractText in TextExtractor.cpp:77 in PoDoFo 0.9.5 allows remote... Moderate Unreviewed
CVE-2017-7994 was published May 14, 2022
Unchecked NULL pointer usage when handling invalid aliases in CopyKeyAliasesToKeymap in xkbcomp... Moderate Unreviewed
CVE-2018-15858 was published May 14, 2022
The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before... Moderate Unreviewed
CVE-2016-1865 was published May 14, 2022
The vcpu_scan_ioapic function in arch/x86/kvm/x86.c in the Linux kernel through 4.19.2 allows... Moderate Unreviewed
CVE-2018-19407 was published May 14, 2022
ImageIO in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2... Moderate Unreviewed
CVE-2016-1811 was published May 14, 2022
IOAcceleratorFamily in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 allows... Moderate Unreviewed
CVE-2016-1814 was published May 14, 2022
An issue was discovered in Xpdf 4.01.01. There is a NULL pointer dereference in the function Gfx:... Moderate Unreviewed
CVE-2019-10022 was published May 14, 2022
In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function find_cc()... Moderate Unreviewed
CVE-2017-17819 was published May 14, 2022
A NULL pointer dereference was found in the net/rds/rdma.c __rds_rdma_map() function in the Linux... Moderate Unreviewed
CVE-2018-7492 was published May 14, 2022
In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function... Moderate Unreviewed
CVE-2017-14228 was published May 14, 2022
An error within the "LibRaw::unpack()" function (src/libraw_cxx.cpp) in LibRaw versions prior to... Moderate Unreviewed
CVE-2018-5801 was published May 14, 2022
In line libavcodec/h264dec.c:500 in libav(v13_dev0), ffmpeg(n3.4), chromium(56 prior Feb 13, 2017... Moderate Unreviewed
CVE-2017-1000460 was published May 14, 2022
A NULL pointer dereference in the function _TIFFmemcmp at tif_unix.c (called from... Moderate Unreviewed
CVE-2018-17000 was published May 14, 2022
In LibTIFF 4.0.9, there is a NULL pointer dereference in the TIFFWriteDirectorySec function in... Moderate Unreviewed
CVE-2018-19210 was published May 14, 2022
** DISPUTED ** In ncurses, possibly a 6.x version, there is a NULL pointer dereference at the... Moderate Unreviewed
CVE-2018-19217 was published May 14, 2022
The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1... Moderate Unreviewed
CVE-2014-3470 was published May 14, 2022
In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c... Moderate Unreviewed
CVE-2018-19211 was published May 14, 2022
An issue was discovered in fs/xfs/libxfs/xfs_attr_leaf.c in the Linux kernel through 4.17.3. An... Moderate Unreviewed
CVE-2018-13094 was published May 14, 2022
There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an... Moderate Unreviewed
CVE-2018-10768 was published May 14, 2022
The readEncUInt30 function in util/read.c in libming 0.4.8 mishandles memory allocation. A... Moderate Unreviewed
CVE-2017-9988 was published May 14, 2022
util/outputtxt.c in libming 0.4.8 mishandles memory allocation. A crafted input will lead to a... Moderate Unreviewed
CVE-2017-9989 was published May 14, 2022
A null pointer dereference vulnerability was found in the function stackswap (called from... Moderate Unreviewed
CVE-2017-11733 was published May 14, 2022
A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets... Moderate Unreviewed
CVE-2019-3840 was published May 14, 2022
The tower_probe function in drivers/usb/misc/legousbtower.c in the Linux kernel before 4.8.1... Moderate Unreviewed
CVE-2017-15102 was published May 14, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database