Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,077
Erlang
29
GitHub Actions
19
Go
1,903
Maven
5,000+
npm
3,632
NuGet
638
pip
3,249
Pub
10
RubyGems
864
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+

65 advisories

Loading
The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC... Critical Unreviewed
CVE-2024-38812 was published Sep 17, 2024
A vulnerability has been identified in SIMATIC Information Server 2022 (All versions), SIMATIC... Critical Unreviewed
CVE-2024-33698 was published Sep 10, 2024
Windows Network Virtualization Remote Code Execution Vulnerability Critical Unreviewed
CVE-2024-38160 was published Aug 13, 2024
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability Critical Unreviewed
CVE-2024-38076 was published Jul 9, 2024
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability Critical Unreviewed
CVE-2024-38077 was published Jul 9, 2024
A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the... Critical Unreviewed
CVE-2024-4323 was published May 20, 2024
HDF5 Library through 1.14.3 contains a heap-based buffer overflow in... Critical Unreviewed
CVE-2024-32615 was published May 14, 2024
HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5HG_read in H5HG.c (called... Critical Unreviewed
CVE-2024-32621 was published May 14, 2024
HDF5 through 1.14.3 contains a heap buffer overflow in H5HG_read, resulting in the corruption of... Critical Unreviewed
CVE-2024-29157 was published May 14, 2024
wasm3 v0.5.0 was discovered to contain a heap buffer overflow which leads to segmentation fault... Critical Unreviewed
CVE-2024-34249 was published May 6, 2024
libmodbus v3.1.10 has a heap-based buffer overflow vulnerability in read_io_status function in... Critical Unreviewed
CVE-2023-26793 was published May 1, 2024
A Heap Overflow vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3... Critical Unreviewed
CVE-2024-29204 was published Apr 19, 2024
zlog 1.2.16 has a heap-based buffer overflow in struct zlog_rule_s while creating a new rule that... Critical Unreviewed
CVE-2024-22857 was published Mar 7, 2024
A heap-based buffer overflow vulnerability exists in the .egi parsing functionality of The Biosig... Critical Unreviewed
CVE-2024-21795 was published Feb 20, 2024
A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston... Critical Unreviewed
CVE-2023-45318 was published Feb 20, 2024
Handlers for *_CFG_PAGE read / write ioctls in the mpr, mps, and mpt drivers allocated a buffer... Critical Unreviewed
CVE-2022-23086 was published Feb 15, 2024
Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep... Critical Unreviewed
CVE-2023-5841 was published Feb 1, 2024
KEPServerEX is vulnerable to a buffer overflow which may allow an attacker to crash the... Critical Unreviewed
CVE-2023-5908 was published Dec 1, 2023
A maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be used... Critical Unreviewed
CVE-2023-29073 was published Nov 23, 2023
Tenda AX1806 V1.0.0.1 contains a heap overflow vulnerability in setSchedWifi function, in which... Critical Unreviewed
CVE-2023-47455 was published Nov 14, 2023
A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston... Critical Unreviewed
CVE-2023-25181 was published Nov 14, 2023
A heap-based buffer overflow vulnerability exists in the HTTP Server form boundary functionality... Critical Unreviewed
CVE-2023-27882 was published Nov 14, 2023
Heap-based buffer overflow in ZBar Critical
CVE-2023-40889 was published for zbar (pip) Aug 29, 2023
All versions of GE Digital CIMPLICITY that are not adhering to SDG guidance and accepting... Critical Unreviewed
CVE-2023-3463 was published Jul 19, 2023
Use After Free (UAF) vulnerability in the Vdecoderservice service. Successful exploitation of... Critical Unreviewed
CVE-2022-48512 was published Jul 6, 2023
ProTip! Advisories are also available from the GraphQL API