GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,359
Erlang
33
GitHub Actions
22
Go
2,126
Maven
5,000+
npm
3,787
NuGet
683
pip
3,467
Pub
12
RubyGems
894
Rust
892
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
243 advisories
Filter by severity
hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop.
Moderate
Unreviewed
CVE-2020-25625
was published
May 24, 2022
In Threshold::getHistogram of ImageProcessHelper.java, there is a possible crash loop due to an...
Moderate
Unreviewed
CVE-2020-0247
was published
May 24, 2022
When in an endless loop, a website specifying a custom cursor using CSS could make it look like...
Moderate
Unreviewed
CVE-2020-15654
was published
May 24, 2022
In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...
Moderate
Unreviewed
CVE-2019-20907
was published
May 24, 2022
In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was...
Moderate
Unreviewed
CVE-2020-15466
was published
May 24, 2022
An issue was discovered in LibVNCServer before 0.9.13. An improperly closed TCP connection causes...
Moderate
Unreviewed
CVE-2020-14398
was published
May 24, 2022
ati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via...
Moderate
Unreviewed
CVE-2020-13800
was published
May 24, 2022
Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.
Moderate
Unreviewed
CVE-2020-12663
was published
May 24, 2022
The ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a...
Moderate
Unreviewed
CVE-2015-5278
was published
May 24, 2022
Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a...
Moderate
Unreviewed
CVE-2015-5239
was published
May 24, 2022
In a Point-to-Multipoint (P2MP) Label Switched Path (LSP) scenario, an uncontrolled resource...
Moderate
Unreviewed
CVE-2020-1600
was published
May 24, 2022
An exploitable denial-of-service vulnerability exists in the Dicom-packet parsing functionality...
Moderate
Unreviewed
CVE-2019-5091
was published
May 24, 2022
Improper Check for filenames with overly long extensions in PostMaster (sending in email) or...
Moderate
Unreviewed
CVE-2019-18180
was published
May 24, 2022
When GNOME Dia before 2019-11-27 is launched with a filename argument that is not a valid...
Moderate
Unreviewed
CVE-2019-19451
was published
May 24, 2022
An issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of...
Moderate
Unreviewed
CVE-2019-17349
was published
May 24, 2022
An issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of...
Moderate
Unreviewed
CVE-2019-17350
was published
May 24, 2022
In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service...
Moderate
Unreviewed
CVE-2019-15143
was published
May 24, 2022
In Libav 12.3, there is an infinite loop in the function wv_read_block_header() in the file wvdec.c.
Moderate
Unreviewed
CVE-2019-14372
was published
May 24, 2022
mgetty prior to version 1.2.1 is affected by: Infinite Loop. The impact is: DoS, the program does...
Moderate
Unreviewed
CVE-2019-1010189
was published
May 24, 2022
Zipios before 0.1.7 does not properly handle certain malformed zip archives and can go into an...
Moderate
Unreviewed
CVE-2019-13453
was published
May 24, 2022
On BIG-IP 14.1.0-14.1.0.5 and 14.0.0-14.0.0.4, Malformed http requests made to an undisclosed...
Moderate
Unreviewed
CVE-2019-6638
was published
May 24, 2022
An improperly performed length calculation on a buffer in PlaintextRecordLayer could lead to an...
Moderate
Unreviewed
CVE-2019-3560
was published
May 24, 2022
A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization...
Moderate
Unreviewed
CVE-2022-29028
was published
May 21, 2022
imagemagick 6.8.9.6 has remote DOS via infinite loop
Moderate
Unreviewed
CVE-2014-8561
was published
May 17, 2022
avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a...
Moderate
Unreviewed
CVE-2011-1002
was published
May 17, 2022
ProTip!
Advisories are also available from the
GraphQL API