Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,084
Erlang
29
GitHub Actions
19
Go
1,910
Maven
5,000+
npm
3,646
NuGet
638
pip
3,261
Pub
10
RubyGems
870
Rust
820
Swift
35
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

416 advisories

Loading
A user authorized to perform database queries may trigger denial of service by issuing specially... Moderate Unreviewed
CVE-2019-2392 was published May 24, 2022
Integer overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to... Moderate Unreviewed
CVE-2019-14562 was published May 24, 2022
Integer overflow in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0... Moderate Unreviewed
CVE-2020-8746 was published May 24, 2022
An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc`... Moderate Unreviewed
CVE-2020-14378 was published May 24, 2022
Integer overflow in WebUSB in Google Chrome prior to 85.0.4183.83 allowed a remote attacker who... Moderate Unreviewed
CVE-2020-6569 was published May 24, 2022
In the camera, there is a possible out of bounds read due to an integer overflow. This could lead... Moderate Unreviewed
CVE-2020-0328 was published May 24, 2022
In the Bluetooth server, there is a possible out of bounds write due to an integer overflow. This... Moderate Unreviewed
CVE-2020-0309 was published May 24, 2022
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an... Moderate Unreviewed
CVE-2020-3990 was published May 24, 2022
A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension... Moderate Unreviewed
CVE-2020-14346 was published May 24, 2022
A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to... Moderate Unreviewed
CVE-2020-14362 was published May 24, 2022
A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to... Moderate Unreviewed
CVE-2020-14361 was published May 24, 2022
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated 3DM file received... Moderate Unreviewed
CVE-2020-6327 was published May 24, 2022
In QEMU through 5.0.0, an integer overflow was found in the SM501 display driver implementation.... Moderate Unreviewed
CVE-2020-12829 was published May 24, 2022
** UNSUPPORTED WHEN ASSIGNED ** An issue was discovered in ReadyTalk Avian 1.2.0. The vm:... Moderate Unreviewed
CVE-2020-17360 was published May 24, 2022
An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM)... Moderate Unreviewed
CVE-2020-14344 was published May 24, 2022
There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems... Moderate Unreviewed
CVE-2020-14309 was published May 24, 2022
An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context... Moderate Unreviewed
CVE-2020-14147 was published May 24, 2022
ScaleViewPortExtEx in libemf.cpp in libEMF (aka ECMA-234 Metafile Library) 1.0.12 allows an... Moderate Unreviewed
CVE-2020-13999 was published May 24, 2022
In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due... Moderate Unreviewed
CVE-2020-0216 was published May 24, 2022
In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer... Moderate Unreviewed
CVE-2020-0198 was published May 24, 2022
In ihevcd_parse_slice_header of ihevcd_parse_slice_header.c, there is a possible out of bounds... Moderate Unreviewed
CVE-2020-0194 was published May 24, 2022
In exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an... Moderate Unreviewed
CVE-2020-0181 was published May 24, 2022
In multiple locations of Parcel.cpp, there is a possible out-of-bounds write due to an integer... Moderate Unreviewed
CVE-2020-0136 was published May 24, 2022
In addPacket of AMPEG4ElementaryAssembler, there is an out of bounds read due to an integer... Moderate Unreviewed
CVE-2020-0128 was published May 24, 2022
SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c. Moderate Unreviewed
CVE-2020-13434 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database