Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,318
Erlang
31
GitHub Actions
21
Go
2,074
Maven
5,000+
npm
3,746
NuGet
674
pip
3,434
Pub
12
RubyGems
892
Rust
880
Swift
37
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

294 advisories

Loading
In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the... High Unreviewed
CVE-2017-11032 was published May 17, 2022
The Touch Panel (TP) driver in P10 Plus smart phones with software versions earlier than VKY... High Unreviewed
CVE-2017-8141 was published May 17, 2022
The soundtrigger driver in P9 Plus smart phones with software versions earlier than VIE... High Unreviewed
CVE-2017-8140 was published May 17, 2022
The GPU driver of Mate 9 Huawei smart phones with software before MHA-AL00B 8.0.0.334(C00) and... High Unreviewed
CVE-2017-15316 was published May 14, 2022
In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can... High Unreviewed
CVE-2017-7393 was published May 14, 2022
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the... High Unreviewed
CVE-2017-9705 was published May 14, 2022
In the doGetThumb and getThumbnail functions of MtpServer, there is a possible double free due to... High Unreviewed
CVE-2017-13181 was published May 14, 2022
A double-free bug in the read_gif function in gifread.c in gifsicle 1.90 allows a remote attacker... High Unreviewed
CVE-2017-18120 was published May 14, 2022
The Flp Driver in some Huawei smartphones of the software Vicky-AL00AC00B124D, Vicky... High Unreviewed
CVE-2017-15330 was published May 14, 2022
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the... High Unreviewed
CVE-2018-3560 was published May 14, 2022
Huawei Mate 9 Pro smartphones with software of LON-AL00BC00B139D, LON-AL00BC00B229, LON... High Unreviewed
CVE-2017-17320 was published May 14, 2022
The Mali Driver of Huawei Berkeley-AL20 and Berkeley-BD smart phones with software Berkeley-AL20... High Unreviewed
CVE-2018-7899 was published May 14, 2022
openvpnserv.exe (aka the interactive service helper) in OpenVPN 2.4.x before 2.4.6 allows a local... High Unreviewed
CVE-2018-9336 was published May 14, 2022
jpegoptim.c in jpegoptim 1.4.5 (fixed in 1.4.6) has an invalid use of realloc() and free(), which... High Unreviewed
CVE-2018-11416 was published May 14, 2022
The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11... High Unreviewed
CVE-2017-6074 was published May 14, 2022
The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel through 4... High Unreviewed
CVE-2017-8890 was published May 14, 2022
Dave Gamble cJSON version 1.7.2 and earlier contains a CWE-415: Double Free vulnerability in... High Unreviewed
CVE-2018-1000216 was published May 14, 2022
Double free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10... High Unreviewed
CVE-2016-8693 was published May 14, 2022
The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to... High Unreviewed
CVE-2018-17097 was published May 14, 2022
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the... High Unreviewed
CVE-2018-11273 was published May 14, 2022
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the... High Unreviewed
CVE-2018-11270 was published May 14, 2022
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the... High Unreviewed
CVE-2018-11276 was published May 14, 2022
In copy_process of fork.c, there is possible memory corruption due to a double free. This could... High Unreviewed
CVE-2018-9513 was published May 14, 2022
In Snapdragon (Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9655,... High Unreviewed
CVE-2018-11982 was published May 14, 2022
An issue was discovered in gThumb through 3.6.2. There is a double-free vulnerability in the... High Unreviewed
CVE-2018-18718 was published May 14, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database