Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,133
Erlang
29
GitHub Actions
19
Go
1,940
Maven
5,000+
npm
3,677
NuGet
645
pip
3,295
Pub
11
RubyGems
877
Rust
830
Swift
35
Unreviewed advisories
All unreviewed
5,000+

9,286 advisories

Loading
cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_block() function at... High Unreviewed
CVE-2024-46267 was published Oct 1, 2024
cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_find() function at... High Unreviewed
CVE-2024-46264 was published Oct 1, 2024
cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_unfilter() function at... High Unreviewed
CVE-2024-46259 was published Oct 1, 2024
cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_load_png_mem()... High Unreviewed
CVE-2024-46258 was published Oct 1, 2024
cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_make32() function at... High Unreviewed
CVE-2024-46261 was published Oct 1, 2024
A maliciously crafted DWF file, when parsed in dwfcore.dll through Autodesk Navisworks, can force... High Unreviewed
CVE-2024-7672 was published Sep 30, 2024
A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force... High Unreviewed
CVE-2024-7673 was published Sep 30, 2024
A maliciously crafted DWF file, when parsed in dwfcore.dll through Autodesk Navisworks, can force... High Unreviewed
CVE-2024-7674 was published Sep 30, 2024
A maliciously crafted DWFX file, when parsed in dwfcore.dll through Autodesk Navisworks, can... High Unreviewed
CVE-2024-7671 was published Sep 30, 2024
Alpine Halo9 DecodeUTF7 Stack-based Buffer Overflow Remote Code Execution Vulnerability. This... High Unreviewed
CVE-2024-23935 was published Sep 28, 2024
Autel MaxiCharger AC Elite Business C50 BLE AppChargingControl Stack-based Buffer Overflow Remote... High Unreviewed
CVE-2024-23959 was published Sep 28, 2024
Autel MaxiCharger AC Elite Business C50 WebSocket Base64 Decoding Stack-based Buffer Overflow... High Unreviewed
CVE-2024-23967 was published Sep 28, 2024
Silicon Labs Gecko OS Debug Interface Stack-based Buffer Overflow Remote Code Execution... High Unreviewed
CVE-2024-23938 was published Sep 28, 2024
Autel MaxiCharger AC Elite Business C50 DLB_HostHeartBeat Stack-based Buffer Overflow Remote Code... High Unreviewed
CVE-2024-23957 was published Sep 28, 2024
In the Linux kernel, the following vulnerability has been resolved: spi: nxp-fspi: fix the KASAN... High Unreviewed
CVE-2024-46853 was published Sep 27, 2024
Out-of-bounds write vulnerability in the HAL-WIFI module Impact: Successful exploitation of this... Moderate Unreviewed
CVE-2024-47293 was published Sep 27, 2024
In drm service, there is a possible out of bounds write due to a missing bounds check. This could... Moderate Unreviewed
CVE-2024-39433 was published Sep 27, 2024
In UMTS RLC driver, there is a possible out of bounds read due to a missing bounds check. This... High Unreviewed
CVE-2024-39432 was published Sep 27, 2024
In UMTS RLC driver, there is a possible out of bounds write due to a missing bounds check. This... High Unreviewed
CVE-2024-39431 was published Sep 27, 2024
Out-of-bounds write vulnerability in backup task management functionality in Synology Drive... Moderate Unreviewed
CVE-2022-49039 was published Sep 26, 2024
Heap-based Buffer Overflow in sqlite-vec High
CVE-2024-46488 was published for sqlite-vec (RubyGems) Sep 25, 2024
Library MDF (mdflib) v2.1 is vulnerable to a heap-based buffer overread via a crafted mdf4 file... Moderate Unreviewed
CVE-2024-41445 was published Sep 25, 2024
A vulnerability in Cisco Unified Threat Defense (UTD) Snort Intrusion Prevention System (IPS)... Moderate Unreviewed
CVE-2024-20508 was published Sep 25, 2024
A vulnerability in the UDP packet validation code of Cisco SD-WAN vEdge Software could allow an... Moderate Unreviewed
CVE-2024-20496 was published Sep 25, 2024
A vulnerability in the Resource Reservation Protocol (RSVP) feature of Cisco IOS Software and... High Unreviewed
CVE-2024-20433 was published Sep 25, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database