Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,778
Erlang
35
GitHub Actions
29
Go
2,332
Maven
5,000+
npm
3,966
NuGet
713
pip
3,759
Pub
12
RubyGems
921
Rust
975
Swift
38
Unreviewed advisories
All unreviewed
5,000+

708 advisories

Loading
A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi... Critical Unreviewed
CVE-2022-24014 was published Aug 6, 2022
A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi... Critical Unreviewed
CVE-2022-24011 was published Aug 6, 2022
A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi... Critical Unreviewed
CVE-2022-24015 was published Aug 6, 2022
A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi... Critical Unreviewed
CVE-2022-24019 was published Aug 6, 2022
A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi... Critical Unreviewed
CVE-2022-24016 was published Aug 6, 2022
Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto... Critical Unreviewed
CVE-2022-25688 was published Sep 17, 2022
Memory corruption in video module due to buffer overflow while processing WAV file in Snapdragon... Critical Unreviewed
CVE-2022-25686 was published Sep 17, 2022
Memory corruption in WLAN due to buffer copy without checking size of input while parsing keys in... Critical Unreviewed
CVE-2022-25708 was published Sep 17, 2022
The implementation of realpath in libuv < 10.22.1, < 12.18.4, and < 14.9.0 used within Node.js... Critical Unreviewed
CVE-2020-8252 was published May 24, 2022
D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Buffer Overflow via /goform/form2Wan.cgi. When... Critical Unreviewed
CVE-2022-37134 was published Aug 23, 2022
Buffer overflow in WinSCP 5.17.8 allows a malicious FTP server to cause a denial of service or... Critical Unreviewed
CVE-2020-28864 was published May 24, 2022
Buffer overflow vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series ... Critical Unreviewed
CVE-2020-5653 was published May 24, 2022
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS... Critical Unreviewed
CVE-2020-9866 was published May 24, 2022
U.S. Air Force Sensor Data Management System extract75 has a buffer overflow that leads to code... Critical Unreviewed
CVE-2020-13995 was published May 24, 2022
An issue was discovered in Contiki through 3.0 and Contiki-NG through 4.5. The code for parsing... Critical Unreviewed
CVE-2020-24336 was published May 24, 2022
Garmin Forerunner 235 before 8.20 is affected by: Buffer Overflow. The component is: ConnectIQ... Critical Unreviewed
CVE-2020-27486 was published May 24, 2022
Slurm before 19.05.8 and 20.x before 20.02.6 has an RPC Buffer Overflow in the PMIx MPI plugin. Critical Unreviewed
CVE-2020-27745 was published May 24, 2022
HCL Domino is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of... Critical Unreviewed
CVE-2020-14260 was published May 24, 2022
There are multiple buffer overflow vulnerabilities that could lead to unauthenticated remote code... Critical Unreviewed
CVE-2020-24633 was published May 24, 2022
An issue was discovered in illumos before 2020-10-22, as used in OmniOS before r151030by,... Critical Unreviewed
CVE-2020-27678 was published May 24, 2022
Sagemcom F@ST 3686 v2 3.495 devices have a buffer overflow via a long sessionKey to the goform... Critical Unreviewed
CVE-2021-3304 was published May 24, 2022
struct2json before 2020-11-18 is affected by a Buffer Overflow because strcpy is used for... Critical Unreviewed
CVE-2020-29203 was published May 24, 2022
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This... Critical Unreviewed
CVE-2020-35796 was published May 24, 2022
u'Remote code execution can happen by sending a carefully crafted POST query when Device... Critical Unreviewed
CVE-2020-3657 was published May 24, 2022
u'Possible buffer overflow while updating output buffer for IMEI and Gateway Address due to lack... Critical Unreviewed
CVE-2020-3692 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database