GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
                  
                    
                      
                      All reviewed
                    
                    
                      5,000+
                    
                  
                  
                    
                      
                      Composer
                    
                    
                      4,968
                    
                  
                  
                    
                      
                      Erlang
                    
                    
                      39
                    
                  
                  
                    
                      
                      GitHub Actions
                    
                    
                      38
                    
                  
                  
                    
                      
                      Go
                    
                    
                      2,616
                    
                  
                  
                    
                      
                      Maven
                    
                    
                      5,000+
                    
                  
                  
                    
                      
                      npm
                    
                    
                      4,255
                    
                  
                  
                    
                      
                      NuGet
                    
                    
                      760
                    
                  
                  
                    
                      
                      pip
                    
                    
                      4,040
                    
                  
                  
                    
                      
                      Pub
                    
                    
                      12
                    
                  
                  
                    
                      
                      RubyGems
                    
                    
                      953
                    
                  
                  
                    
                      
                      Rust
                    
                    
                      1,050
                    
                  
                  
                    
                      
                      Swift
                    
                    
                      45
                    
                  
                  Unreviewed advisories
                  
                    
                      
                      All unreviewed
                    
                    
                      5,000+
                    
                  
            142 advisories
        Filter by severity
        
      
      
    
                    
                      Overflow/denial of service in `tf.raw_ops.ReverseSequence`
                    
                      
  Low
                    
                
                      
                        CVE-2021-29575
                      
                      was published
                        for
                        
                          tensorflow
                        
                        (pip)
                      May 21, 2021 
                    
                  
                    
                      Heap buffer overflow in `MaxPool3DGradGrad`
                    
                      
  Low
                    
                
                      
                        CVE-2021-29576
                      
                      was published
                        for
                        
                          tensorflow
                        
                        (pip)
                      May 21, 2021 
                    
                  
                    
                      Heap buffer overflow in `AvgPool3DGrad`
                    
                      
  Low
                    
                
                      
                        CVE-2021-29577
                      
                      was published
                        for
                        
                          tensorflow
                        
                        (pip)
                      May 21, 2021 
                    
                  
                    
                      Heap buffer overflow in `FractionalAvgPoolGrad`
                    
                      
  Low
                    
                
                      
                        CVE-2021-29578
                      
                      was published
                        for
                        
                          tensorflow
                        
                        (pip)
                      May 21, 2021 
                    
                  
                    
                      Heap buffer overflow in `MaxPoolGrad`
                    
                      
  Low
                    
                
                      
                        CVE-2021-29579
                      
                      was published
                        for
                        
                          tensorflow
                        
                        (pip)
                      May 21, 2021 
                    
                  
                    
                      Buffer overflow in the FTP server of Hummingbird Connectivity 7.1 and 9.0 allows remote,...
                    
                      
  Low
                      
                        Unreviewed
                    
                
                      
                        CVE-2004-2728
                      
                      was published
                      Apr 29, 2022 
                    
                  
                    
                      NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allows remote authenticated...
                    
                      
  Low
                      
                        Unreviewed
                    
                
                      
                        CVE-2000-1246
                      
                      was published
                      Apr 30, 2022 
                    
                  
                    
                      Buffer overflow in UnZip 5.50 and earlier allows user-assisted attackers to execute arbitrary...
                    
                      
  Low
                      
                        Unreviewed
                    
                
                      
                        CVE-2005-4667
                      
                      was published
                      May 1, 2022 
                    
                  
                    
                      NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local...
                    
                      
  Low
                      
                        Unreviewed
                    
                
                      
                        CVE-2006-0966
                      
                      was published
                      May 1, 2022 
                    
                  
                    
                      fold_binary in fold-const.c in GNU Compiler Collection (gcc) 4.1 improperly handles pointer...
                    
                      
  Low
                      
                        Unreviewed
                    
                
                      
                        CVE-2006-1902
                      
                      was published
                      May 1, 2022 
                    
                  
                    
                      Stack-based buffer overflow in the SFX module in WinRAR before 3.60 beta 8 has unspecified...
                    
                      
  Low
                      
                        Unreviewed
                    
                
                      
                        CVE-2006-3912
                      
                      was published
                      May 1, 2022 
                    
                  
                    
                      Stack-based buffer overflow in the glibtop_get_proc_map_s function in libgtop before 2.14.6 ...
                    
                      
  Low
                      
                        Unreviewed
                    
                
                      
                        CVE-2007-0235
                      
                      was published
                      May 1, 2022 
                    
                  
                    
                      Stack-based buffer overflow in the msx_readnode function in libmosix.c in openmosix-tools (aka...
                    
                      
  Low
                      
                        Unreviewed
                    
                
                      
                        CVE-2008-1865
                      
                      was published
                      May 1, 2022 
                    
                  
                    
                      Buffer overflow in the backend of XenSource Xen Para Virtualized Frame Buffer (PVFB) 3.0 through...
                    
                      
  Low
                      
                        Unreviewed
                    
                
                      
                        CVE-2008-1943
                      
                      was published
                      May 1, 2022 
                    
                  
                    
                      The backend for XenSource Xen Para Virtualized Frame Buffer (PVFB) in Xen ioemu does not properly...
                    
                      
  Low
                      
                        Unreviewed
                    
                
                      
                        CVE-2008-1952
                      
                      was published
                      May 1, 2022 
                    
                  
                    
                      Cisco IOS XR 3.8.1 and earlier allows remote attackers to cause a denial of service (process...
                    
                      
  Low
                      
                        Unreviewed
                    
                
                      
                        CVE-2009-1154
                      
                      was published
                      May 2, 2022 
                    
                  
                    
                      Buffer overflow in the util_path_encode function in udev/lib/libudev-util.c in udev before 1.4.1...
                    
                      
  Low
                      
                        Unreviewed
                    
                
                      
                        CVE-2009-1186
                      
                      was published
                      May 2, 2022 
                    
                  
                    
                      The MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD)...
                    
                      
  Low
                      
                        Unreviewed
                    
                
                      
                        CVE-2009-4901
                      
                      was published
                      May 2, 2022 
                    
                  
                    
                      Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local...
                    
                      
  Low
                      
                        Unreviewed
                    
                
                      
                        CVE-2005-4268
                      
                      was published
                      May 3, 2022 
                    
                  
                    
                      Buffer overflow in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote...
                    
                      
  Low
                      
                        Unreviewed
                    
                
                      
                        CVE-2012-0250
                      
                      was published
                      May 4, 2022 
                    
                  
                    
                      Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2...
                    
                      
  Low
                      
                        Unreviewed
                    
                
                      
                        CVE-2012-0249
                      
                      was published
                      May 4, 2022 
                    
                  
                    
                      The process_bin_delete function in memcached.c in memcached 1.4.4 and other versions before 1.4...
                    
                      
  Low
                      
                        Unreviewed
                    
                
                      
                        CVE-2013-0179
                      
                      was published
                      May 5, 2022 
                    
                  
                    
                      The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a...
                    
                      
  Low
                      
                        Unreviewed
                    
                
                      
                        CVE-2013-0223
                      
                      was published
                      May 5, 2022 
                    
                  
                    
                      The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a...
                    
                      
  Low
                      
                        Unreviewed
                    
                
                      
                        CVE-2013-0222
                      
                      was published
                      May 5, 2022 
                    
                  
                    
                      Buffer overflow in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0...
                    
                      
  Low
                      
                        Unreviewed
                    
                
                      
                        CVE-2013-0541
                      
                      was published
                      May 5, 2022 
                    
                  
        
        ProTip!
        Advisories are also available from the 
        GraphQL API