Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,324
Erlang
31
GitHub Actions
21
Go
2,087
Maven
5,000+
npm
3,751
NuGet
674
pip
3,437
Pub
12
RubyGems
892
Rust
881
Swift
37
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

12,643 advisories

Loading
A vulnerability classified as critical has been found in Tenda AC15 15.13.07.13. This affects the... High Unreviewed
CVE-2025-0566 was published Jan 19, 2025
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential... High Unreviewed
CVE-2023-52434 was published Feb 20, 2024
Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows... High Unreviewed
CVE-2015-2426 was published May 14, 2022
Heap-based buffer overflow in an API in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server... High Unreviewed
CVE-2008-3465 was published May 2, 2022
A vulnerability, which was classified as critical, was found in code-projects Train Ticket... Moderate Unreviewed
CVE-2025-0529 was published Jan 17, 2025
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability... Moderate Unreviewed
CVE-2024-10498 was published Jan 17, 2025
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability... Moderate Unreviewed
CVE-2024-11139 was published Jan 17, 2025
The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows... High Unreviewed
CVE-2012-2897 was published May 13, 2022
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003... High Unreviewed
CVE-2013-1342 was published May 14, 2022
The parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which... Critical Unreviewed
CVE-2016-4303 was published May 13, 2022
Memory corruption when the payload received from firmware is not as per the expected protocol size. High Unreviewed
CVE-2024-21475 was published May 6, 2024
A flaw was found in the rsync daemon which could be triggered when rsync compares file checksums.... High Unreviewed
CVE-2024-12085 was published Jan 14, 2025
Stack-based buffer overflow vulnerability in synoagentregisterd in Synology DiskStation Manager ... High Unreviewed
CVE-2021-26561 was published May 24, 2022
A vulnerability has been found in Netgear R6900P and R7000P 1.3.3.154 and classified as critical.... Moderate Unreviewed
CVE-2024-12988 was published Dec 27, 2024
A vulnerability was found in Netgear R6900 1.0.1.26_1.0.20. It has been declared as critical.... High Unreviewed
CVE-2024-12147 was published Dec 4, 2024
An improper array index validation vulnerability exists in the nowindow functionality of OFFIS... High Unreviewed
CVE-2024-47796 was published Jan 13, 2025
An improper array index validation vulnerability exists in the determineMinMax functionality of... High Unreviewed
CVE-2024-52333 was published Jan 13, 2025
Luxion KeyShot Viewer KSP File Parsing Memory Corruption Remote Code Execution Vulnerability.... High Unreviewed
CVE-2025-0412 was published Jan 13, 2025
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Harden... High Unreviewed
CVE-2022-48655 was published Apr 28, 2024
Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18... High Unreviewed
CVE-2018-5996 was published May 13, 2022
On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not... Critical Unreviewed
CVE-2017-11076 was published Nov 26, 2024
A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the... High Unreviewed
CVE-2025-0349 was published Jan 9, 2025
Microsoft Edge (HTML-based) Memory Corruption Vulnerability High Unreviewed
CVE-2024-38218 was published Aug 12, 2024
Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote... Critical Unreviewed
CVE-2024-7024 was published Sep 24, 2024
Foxit PDF Reader AcroForm Memory Corruption Remote Code Execution Vulnerability. This... High Unreviewed
CVE-2024-12752 was published Dec 30, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database