Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,189
Erlang
31
GitHub Actions
19
Go
1,985
Maven
5,000+
npm
3,701
NuGet
657
pip
3,326
Pub
11
RubyGems
882
Rust
836
Swift
35
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

1,825 advisories

Loading
A heap buffer overflow could be triggered by sending a specific packet to TCP port 7700. Critical Unreviewed
CVE-2023-29125 was published Nov 5, 2024
Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of... Critical Unreviewed
CVE-2024-10467 was published Oct 29, 2024
Out of bounds write in Dawn in Google Chrome prior to 130.0.6723.92 allowed a remote attacker to... Critical Unreviewed
CVE-2024-10487 was published Oct 30, 2024
HDF5 Library through 1.14.3 contains a heap-based buffer overflow in... Critical Unreviewed
CVE-2024-32615 was published May 14, 2024
Tenda AX1806 V1.0.0.1 contains a stack overflow vulnerability in function sub_455D4, called by... Critical Unreviewed
CVE-2023-47456 was published Nov 14, 2023
Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute... Critical Unreviewed
CVE-2024-31002 was published Apr 2, 2024
TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack... Critical Unreviewed
CVE-2023-46522 was published Oct 25, 2023
In the TP-Link RE365 V1_180213, there is a buffer overflow vulnerability due to the lack of... Critical Unreviewed
CVE-2024-42815 was published Aug 19, 2024
An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives.... Critical Unreviewed
CVE-2017-5443 was published May 14, 2022
Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque... Critical Unreviewed
CVE-2024-49195 was published Oct 15, 2024
HDF5 library through 1.14.3 has memory corruption in H5A__close resulting in the corruption of... Critical Unreviewed
CVE-2024-32608 was published Oct 9, 2024
Out of bounds memory access in WebHID in Google Chrome prior to 111.0.5563.110 allowed a remote... Critical Unreviewed
CVE-2023-1529 was published Mar 21, 2023
DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via... Critical Unreviewed
CVE-2024-41593 was published Oct 3, 2024
In wlan firmware, there is a possible out of bounds write due to improper input validation. This... Critical Unreviewed
CVE-2024-20103 was published Oct 7, 2024
In wlan driver, there is a possible out of bounds write due to improper input validation. This... Critical Unreviewed
CVE-2024-20101 was published Oct 7, 2024
In wlan driver, there is a possible out of bounds write due to improper input validation. This... Critical Unreviewed
CVE-2024-20100 was published Oct 7, 2024
Heap buffer overflow in Blink in Google Chrome prior to 101.0.4951.41 allowed a remote attacker... Critical Unreviewed
CVE-2022-4920 was published Jul 29, 2023
The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC... Critical Unreviewed
CVE-2024-38812 was published Sep 17, 2024
A stack-based buffer overflow vulnerability exists in the OpenPLC Runtime EtherNet/IP parser... Critical Unreviewed
CVE-2024-34026 was published Sep 18, 2024
Secure Email Gateway from Cellopoint has Buffer Overflow Vulnerability in authentication process.... Critical Unreviewed
CVE-2024-9043 was published Sep 20, 2024
libfreeimage in FreeImage 3.4.0 through 3.18.0 has a stack-based buffer overflow in the PluginXPM... Critical Unreviewed
CVE-2024-31570 was published Sep 19, 2024
In wlan service, there is a possible out of bounds write due to improper input validation. This... Critical Unreviewed
CVE-2024-20017 was published Mar 4, 2024
D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter... Critical Unreviewed
CVE-2023-43242 was published Sep 21, 2023
D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter flag_5G in... Critical Unreviewed
CVE-2023-43239 was published Sep 21, 2023
D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a stack overflow vulnerability in the... Critical Unreviewed
CVE-2023-43203 was published Sep 20, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database