GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,340
Erlang
31
GitHub Actions
22
Go
2,101
Maven
5,000+
npm
3,764
NuGet
679
pip
3,451
Pub
12
RubyGems
892
Rust
885
Swift
37
Unreviewed advisories
All unreviewed
5,000+
1,898 advisories
Filter by severity
In wlan STA FW, there is a possible out of bounds write due to improper input validation. This...
Critical
Unreviewed
CVE-2024-20148
was published
Jan 6, 2025
GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because...
Critical
Unreviewed
CVE-2023-45878
was published
Nov 14, 2023
ReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow. The...
Critical
Unreviewed
CVE-2023-33476
was published
Jun 2, 2023
Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake.
Critical
Unreviewed
CVE-2023-28582
was published
Mar 4, 2024
Memory corruption in Core Services while executing the command for removing a single event listener.
Critical
Unreviewed
CVE-2023-28578
was published
Mar 4, 2024
Memory corruption while redirecting log file to any file location with any file name.
Critical
Unreviewed
CVE-2024-21473
was published
Apr 1, 2024
Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an...
Critical
Unreviewed
CVE-2024-48856
was published
Jan 14, 2025
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of...
Critical
Unreviewed
CVE-2017-14491
was published
Apr 30, 2022
Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to...
Critical
Unreviewed
CVE-2018-1160
was published
May 13, 2022
A heap-based buffer overflow vulnerability exists in the .egi parsing functionality of The Biosig...
Critical
Unreviewed
CVE-2024-21795
was published
Feb 20, 2024
An out-of-bounds write vulnerability exists in the sopen_FAMOS_read functionality of The Biosig...
Critical
Unreviewed
CVE-2024-23606
was published
Feb 20, 2024
In gatts_process_read_by_type_req of gatt_sr.cc, there is a possible out of bounds write due to a...
Critical
Unreviewed
CVE-2024-49747
was published
Jan 22, 2025
In gatts_process_primary_service_req of gatt_sr.cc, there is a possible out of bounds write due...
Critical
Unreviewed
CVE-2024-49748
was published
Jan 22, 2025
Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the ssid parameter in the...
Critical
Unreviewed
CVE-2024-57575
was published
Jan 16, 2025
A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software...
Critical
Unreviewed
CVE-2018-0171
was published
May 13, 2022
Buffer overflow in XPS data font processing of Small Office Multifunction Printers and Laser...
Critical
Unreviewed
CVE-2024-12649
was published
Jan 28, 2025
Buffer overflow in TIFF data EXIF tag processing of Small Office Multifunction Printers and Laser...
Critical
Unreviewed
CVE-2024-12648
was published
Jan 28, 2025
Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser...
Critical
Unreviewed
CVE-2024-12647
was published
Jan 28, 2025
The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.4,...
Critical
Unreviewed
CVE-2025-24118
was published
Jan 28, 2025
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy...
Critical
Unreviewed
CVE-2025-0282
was published
Jan 9, 2025
An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS...
Critical
Unreviewed
CVE-2025-24154
was published
Jan 28, 2025
OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component /OpenImageIO...
Critical
Unreviewed
CVE-2024-55194
was published
Jan 24, 2025
OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component...
Critical
Unreviewed
CVE-2024-55192
was published
Jan 24, 2025
ProTip!
Advisories are also available from the
GraphQL API