GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,362
Erlang
33
GitHub Actions
22
Go
2,134
Maven
5,000+
npm
3,797
NuGet
687
pip
3,473
Pub
12
RubyGems
896
Rust
897
Swift
38
Unreviewed advisories
All unreviewed
5,000+
124 advisories
Filter by severity
Heap-based Buffer Overflow vulnerability in iniparser_dumpsection_ini() in iniparser allows...
Moderate
Unreviewed
CVE-2025-0633
was published
Feb 19, 2025
A heap buffer overflow vulnerability in FFmpeg before commit 4bf784c allows attackers to trigger...
Moderate
Unreviewed
CVE-2025-22920
was published
Feb 19, 2025
An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6. A possible heap...
Moderate
Unreviewed
CVE-2024-37601
was published
Feb 14, 2025
NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause a heap-based...
Moderate
Unreviewed
CVE-2024-0145
was published
Feb 12, 2025
In some cases, the ktrace facility will log the contents of kernel structures to userspace. In...
Moderate
Unreviewed
CVE-2025-0662
was published
Jan 30, 2025
A vulnerability in the Object Linking and Embedding 2 (OLE2) decryption routine of ClamAV could...
Moderate
Unreviewed
CVE-2025-20128
was published
Jan 22, 2025
A potential TOCTOU vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store...
Moderate
Unreviewed
CVE-2024-10253
was published
Jan 15, 2025
A potential buffer overflow vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo...
Moderate
Unreviewed
CVE-2024-10254
was published
Jan 15, 2025
Windows Digital Media Elevation of Privilege Vulnerability
Moderate
Unreviewed
CVE-2025-21256
was published
Jan 14, 2025
A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when...
Moderate
Unreviewed
CVE-2024-56826
was published
Jan 9, 2025
A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when...
Moderate
Unreviewed
CVE-2024-56827
was published
Jan 9, 2025
A heap-based buffer overflow vulnerability in the processing of Link Control Protocol messages in...
Moderate
Unreviewed
CVE-2020-12819
was published
Dec 19, 2024
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
Moderate
Unreviewed
CVE-2024-49094
was published
Dec 12, 2024
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
Moderate
Unreviewed
CVE-2024-49081
was published
Dec 12, 2024
A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is...
Moderate
Unreviewed
CVE-2024-3447
was published
Nov 14, 2024
A heap-based buffer overflow in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through...
Moderate
Unreviewed
CVE-2024-33505
was published
Nov 12, 2024
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Moderate
Unreviewed
CVE-2024-43587
was published
Oct 18, 2024
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
Moderate
Unreviewed
CVE-2024-43525
was published
Oct 8, 2024
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
Moderate
Unreviewed
CVE-2024-43523
was published
Oct 8, 2024
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
Moderate
Unreviewed
CVE-2024-43526
was published
Oct 8, 2024
Azure Service Fabric for Linux Remote Code Execution Vulnerability
Moderate
Unreviewed
CVE-2024-43480
was published
Oct 8, 2024
Bandisoft BandiView 7.05 is vulnerable to Buffer Overflow via sub_0x410d1d. The vulnerability...
Moderate
Unreviewed
CVE-2024-45872
was published
Oct 3, 2024
A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G,...
Moderate
Unreviewed
CVE-2024-20516
was published
Oct 2, 2024
A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G,...
Moderate
Unreviewed
CVE-2024-20517
was published
Oct 2, 2024
A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G,...
Moderate
Unreviewed
CVE-2024-20522
was published
Oct 2, 2024
ProTip!
Advisories are also available from the
GraphQL API