Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,231
Erlang
31
GitHub Actions
20
Go
1,991
Maven
5,000+
npm
3,709
NuGet
661
pip
3,341
Pub
11
RubyGems
884
Rust
846
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

1,825 advisories

Loading
A heap buffer overflow could be triggered by sending a specific packet to TCP port 7700. Critical Unreviewed
CVE-2023-29125 was published Nov 5, 2024
Out of bounds write in Dawn in Google Chrome prior to 130.0.6723.92 allowed a remote attacker to... Critical Unreviewed
CVE-2024-10487 was published Oct 30, 2024
Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of... Critical Unreviewed
CVE-2024-10467 was published Oct 29, 2024
Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque... Critical Unreviewed
CVE-2024-49195 was published Oct 15, 2024
HDF5 library through 1.14.3 has memory corruption in H5A__close resulting in the corruption of... Critical Unreviewed
CVE-2024-32608 was published Oct 9, 2024
In wlan driver, there is a possible out of bounds write due to improper input validation. This... Critical Unreviewed
CVE-2024-20101 was published Oct 7, 2024
In wlan firmware, there is a possible out of bounds write due to improper input validation. This... Critical Unreviewed
CVE-2024-20103 was published Oct 7, 2024
In wlan driver, there is a possible out of bounds write due to improper input validation. This... Critical Unreviewed
CVE-2024-20100 was published Oct 7, 2024
DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via... Critical Unreviewed
CVE-2024-41593 was published Oct 3, 2024
Secure Email Gateway from Cellopoint has Buffer Overflow Vulnerability in authentication process.... Critical Unreviewed
CVE-2024-9043 was published Sep 20, 2024
libfreeimage in FreeImage 3.4.0 through 3.18.0 has a stack-based buffer overflow in the PluginXPM... Critical Unreviewed
CVE-2024-31570 was published Sep 19, 2024
A stack-based buffer overflow vulnerability exists in the OpenPLC Runtime EtherNet/IP parser... Critical Unreviewed
CVE-2024-34026 was published Sep 18, 2024
The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC... Critical Unreviewed
CVE-2024-38812 was published Sep 17, 2024
The web service of certain models of D-Link wireless routers contains a Stack-based Buffer... Critical Unreviewed
CVE-2024-45695 was published Sep 16, 2024
Micron Crucial MX500 Series Solid State Drives M3CR046 is vulnerable to Buffer Overflow, which... Critical Unreviewed
CVE-2024-42642 was published Sep 4, 2024
Memory safety bugs present in Firefox 129. Some of these bugs showed evidence of memory... Critical Unreviewed
CVE-2024-8389 was published Sep 3, 2024
Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of... Critical Unreviewed
CVE-2024-8387 was published Sep 3, 2024
The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were... Critical Unreviewed
CVE-2024-8384 was published Sep 3, 2024
HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an... Critical Unreviewed
CVE-2024-45508 was published Sep 2, 2024
Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function... Critical Unreviewed
CVE-2024-44551 was published Aug 26, 2024
Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function... Critical Unreviewed
CVE-2024-44555 was published Aug 26, 2024
A stack overflow in FAST FW300R v1.3.13 Build 141023 Rel.61347n allows attackers to execute... Critical Unreviewed
CVE-2024-41285 was published Aug 26, 2024
An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling... Critical Unreviewed
CVE-2024-30949 was published Aug 20, 2024
In the TP-Link RE365 V1_180213, there is a buffer overflow vulnerability due to the lack of... Critical Unreviewed
CVE-2024-42815 was published Aug 19, 2024
Out-of-bounds write in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers... Critical Unreviewed
CVE-2024-23497 was published Aug 14, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database