GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,237
Erlang
31
GitHub Actions
20
Go
2,000
Maven
5,000+
npm
3,711
NuGet
661
pip
3,383
Pub
11
RubyGems
885
Rust
849
Swift
36
Unreviewed advisories
All unreviewed
5,000+
238 advisories
Filter by severity
Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel through 5.3.11 allow...
High
Unreviewed
CVE-2019-19073
was published
May 24, 2022
A memory leak in the ath9k_wmi_cmd() function in drivers/net/wireless/ath/ath9k/wmi.c in the...
High
Unreviewed
CVE-2019-19074
was published
May 24, 2022
A memory leak in the ca8210_probe() function in drivers/net/ieee802154/ca8210.c in the Linux...
High
Unreviewed
CVE-2019-19075
was published
May 24, 2022
A memory leak in the qrtr_tun_write_iter() function in net/qrtr/tun.c in the Linux kernel before...
High
Unreviewed
CVE-2019-19079
was published
May 24, 2022
A memory leak in the ath10k_usb_hif_tx_sg() function in drivers/net/wireless/ath/ath10k/usb.c in...
High
Unreviewed
CVE-2019-19078
was published
May 24, 2022
Specific IPv6 packets sent by clients processed by the Routing Engine (RE) are improperly handled...
High
Unreviewed
CVE-2020-1603
was published
May 24, 2022
xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.
High
Unreviewed
CVE-2019-20388
was published
May 24, 2022
A vulnerability in the locally significant certificate (LSC) provisioning feature of Cisco...
High
Unreviewed
CVE-2020-3203
was published
May 24, 2022
An issue was discovered in Xen through 4.14.x. There are missing memory barriers when accessing...
High
Unreviewed
CVE-2020-25603
was published
May 24, 2022
Wildfly-OpenSSL memory leak flaw
High
CVE-2020-25644
was published
for
org.wildfly.openssl:wildfly-openssl-natives-parent
(Maven)
May 24, 2022
A memory leak in the TFTP service in B&R Automation Runtime versions <N4.26, <N4.34, <F4.45, <E4...
High
Unreviewed
CVE-2020-11637
was published
May 24, 2022
On Juniper Networks Junos OS devices, a specific SNMP OID poll causes a memory leak which over...
High
Unreviewed
CVE-2020-1683
was published
May 24, 2022
A denial of service vulnerability exists in Microsoft Outlook software when the software fails to...
High
Unreviewed
CVE-2020-16949
was published
May 24, 2022
A vulnerability in the IP fragment-handling implementation of Cisco Adaptive Security Appliance ...
High
Unreviewed
CVE-2020-3373
was published
May 24, 2022
A vulnerability in the SSL/TLS session handler of Cisco Adaptive Security Appliance (ASA)...
High
Unreviewed
CVE-2020-3572
was published
May 24, 2022
Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially...
High
Unreviewed
CVE-2019-14559
was published
May 24, 2022
Missing permission checks in Jenkins Chaos Monkey Plugin
High
CVE-2020-2322
was published
for
io.jenkins.plugins:chaos-monkey
(Maven)
May 24, 2022
In certain configurations on version 13.1.3.4, when a BIG-IP AFM HTTP security profile is applied...
High
Unreviewed
CVE-2020-27713
was published
May 24, 2022
smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to...
High
Unreviewed
CVE-2020-35679
was published
May 24, 2022
K7TSMngr.exe in K7Computing K7AntiVirus Premium 15.1.0.53 has a Memory Leak.
High
Unreviewed
CVE-2018-11246
was published
May 24, 2022
A vulnerability in the IPv4 protocol handling of Cisco StarOS could allow an unauthenticated,...
High
Unreviewed
CVE-2021-1353
was published
May 24, 2022
Some ZTE products have a DoS vulnerability. Due to the improper handling of memory release in...
High
Unreviewed
CVE-2021-21723
was published
May 24, 2022
Multiple vulnerabilities in the ingress packet processing function of Cisco IOS XR Software could...
High
Unreviewed
CVE-2021-1313
was published
May 24, 2022
Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet...
High
Unreviewed
CVE-2021-22173
was published
May 24, 2022
A vulnerability in the network stack of Cisco NX-OS Software could allow an unauthenticated,...
High
Unreviewed
CVE-2021-1387
was published
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API