Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,652
Erlang
34
GitHub Actions
26
Go
2,257
Maven
5,000+
npm
3,909
NuGet
704
pip
3,680
Pub
12
RubyGems
915
Rust
943
Swift
38
Unreviewed advisories
All unreviewed
5,000+

4,882 advisories

Loading
protobuf-java has potential Denial of Service issue High
CVE-2024-7254 was published for com.google.protobuf:protobuf-java (RubyGems) Sep 19, 2024
Apache Struts forced double OGNL evaluation High
CVE-2016-4461 was published for org.apache.struts:struts2-core (Maven) May 14, 2022
Memory corruption in SPI buses due to improper input validation while reading address... High Unreviewed
CVE-2022-25698 was published Dec 13, 2022
Memory corruption in i2c buses due to improper input validation while reading address... High Unreviewed
CVE-2022-25697 was published Dec 13, 2022
OpenFlow plugin for OpenDaylight LLDP Relay High
CVE-2015-1612 was published for org.opendaylight.openflowplugin:openflowplugin (Maven) May 17, 2022
OpenFlow plugin for OpenDaylight allows spoofing the SDN topology High
CVE-2015-1611 was published for org.opendaylight.openflowplugin:openflowplugin (Maven) May 17, 2022
WithSecure DeepGuard 6 allows attackers to affect confidentiality, availability, and/or integrity. High Unreviewed
CVE-2022-45871 was published Dec 13, 2022
This issue was addressed with improved checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7... High Unreviewed
CVE-2022-42800 was published Nov 2, 2022
In onMulticastListUpdateNotificationReceived of UwbEventManager.java, there is a possible... High Unreviewed
CVE-2022-20507 was published Dec 20, 2022
In Flexense SysGauge Server 3.6.18, the Control Protocol suffers from a denial of service. The... High Unreviewed
CVE-2017-15667 was published May 14, 2022
A vulnerability has been identified in RUGGEDCOM ROS for RSL910 devices (All versions < ROS V5.0... High Unreviewed
CVE-2017-12736 was published May 13, 2022
An issue was discovered in Enigmail before 1.9.9. Regular expressions are exploitable for Denial... High Unreviewed
CVE-2017-17846 was published May 14, 2022
The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero... High Unreviewed
CVE-2017-17805 was published May 14, 2022
Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012... High Unreviewed
CVE-2017-11885 was published May 14, 2022
The bnep_add_connection function in net/bluetooth/bnep/core.c in the Linux kernel before 3.19... High Unreviewed
CVE-2017-15868 was published May 13, 2022
MikroTik RouterBOARD v6.39.2 and v6.40.5 allows an unauthenticated remote attacker to cause a... High Unreviewed
CVE-2017-17537 was published May 14, 2022
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. A denial of service may occur. High Unreviewed
CVE-2017-13703 was published May 17, 2022
The Snap7 Server version 1.4.1 can be crashed when the ItemCount field of the ReadVar or WriteVar... High Unreviewed
CVE-2017-1000230 was published May 17, 2022
An untrusted search path (aka DLL Preload) vulnerability in the Cisco Network Academy Packet... High Unreviewed
CVE-2017-12313 was published May 13, 2022
In IKARUS anti.virus 2.16.7, the ntguard.sys driver contains an Arbitrary Write vulnerability... High Unreviewed
CVE-2017-14961 was published May 17, 2022
Certain function pointers in Trusted Boot (tboot) through 1.9.6 are not validated and can cause... High Unreviewed
CVE-2017-16837 was published May 14, 2022
drivers/media/usb/dvb-usb-v2/lmedm04.c in the Linux kernel through 4.13.11 allows local users to... High Unreviewed
CVE-2017-16538 was published May 14, 2022
In Vir.IT eXplorer Anti-Virus before 8.5.42, the driver file (VIAGLT64.SYS) contains an Arbitrary... High Unreviewed
CVE-2017-16237 was published May 17, 2022
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations... High Unreviewed
CVE-2017-10953 was published May 13, 2022
Inappropriate use of JIT optimisation in V8 in Google Chrome prior to 61.0.3163.100 for Linux,... High Unreviewed
CVE-2017-5121 was published May 13, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database