GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,077
Erlang
29
GitHub Actions
19
Go
1,903
Maven
5,000+
npm
3,632
NuGet
638
pip
3,249
Pub
10
RubyGems
864
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
88 advisories
Filter by severity
A Use of Uninitialized Resource vulnerability in the Border Gateway Protocol (BGP) software of...
High
Unreviewed
CVE-2023-28967
was published
Apr 18, 2023
Information disclosure in modem due to missing NULL check while reading packets received from...
High
Unreviewed
CVE-2022-25737
was published
Apr 13, 2023
HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0...
High
Unreviewed
CVE-2021-32845
was published
Feb 18, 2023
HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0...
High
Unreviewed
CVE-2021-32846
was published
Feb 18, 2023
On versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before...
High
Unreviewed
CVE-2023-22281
was published
Feb 1, 2023
Use of uninitialized variable in function gen_eth_recv in GNS3 dynamips 0.2.21.
High
Unreviewed
CVE-2022-47012
was published
Jan 20, 2023
Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to the use of uninitialized...
High
Unreviewed
CVE-2022-2949
was published
Dec 13, 2022
Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to the use of uninitialized...
High
Unreviewed
CVE-2022-2950
was published
Dec 13, 2022
Dell BIOS contains a use of uninitialized variable vulnerability. A local authenticated malicious...
High
Unreviewed
CVE-2022-34390
was published
Oct 13, 2022
A flaw was found in vDPA with VDUSE backend. There are currently no checks in VDUSE kernel driver...
High
Unreviewed
CVE-2022-2308
was published
Sep 2, 2022
A segmentation fault was discovered in radare2 with adf command. In libr/core/cmd_anal.c, when...
High
Unreviewed
CVE-2020-27795
was published
Aug 20, 2022
In BIG-IP Versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when...
High
Unreviewed
CVE-2022-34655
was published
Aug 5, 2022
softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail...
High
Unreviewed
CVE-2022-35414
was published
Jul 12, 2022
vim is vulnerable to Stack-based Buffer Overflow
High
Unreviewed
CVE-2021-3928
was published
May 24, 2022
In display driver, there is a possible memory corruption due to uninitialized data. This could...
High
Unreviewed
CVE-2021-0634
was published
May 24, 2022
An issue was discovered in function scanallsubs in src/sbbs3/scansubs.cpp in Synchronet BBS,...
High
Unreviewed
CVE-2021-36512
was published
May 24, 2022
In FreeBSD 13.0-STABLE before n246941-20f96f215562, 12.2-STABLE before r370400, 11.4-STABLE...
High
Unreviewed
CVE-2021-29631
was published
May 24, 2022
Uninitialized use in Media in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to...
High
Unreviewed
CVE-2021-30578
was published
May 24, 2022
An improper free of uninitialized memory can occur in DIAG services in Snapdragon Compute,...
High
Unreviewed
CVE-2020-11260
was published
May 24, 2022
Uninitialized data in PDFium in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to...
High
Unreviewed
CVE-2021-21190
was published
May 24, 2022
A remote code execution vulnerability exists in Microsoft Excel software when the software fails...
High
Unreviewed
CVE-2020-16932
was published
May 24, 2022
A remote code execution vulnerability exists in Microsoft Excel software when the software fails...
High
Unreviewed
CVE-2020-16931
was published
May 24, 2022
In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying...
High
Unreviewed
CVE-2020-1934
was published
May 24, 2022
OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to an information disclosure vulnerability...
High
Unreviewed
CVE-2019-18602
was published
May 24, 2022
An uninitialized memory access vulnerability exists in the way Aspose.PDF 19.2 for C++ handles...
High
Unreviewed
CVE-2019-5067
was published
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API