Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,342
Erlang
31
GitHub Actions
22
Go
2,106
Maven
5,000+
npm
3,764
NuGet
679
pip
3,451
Pub
12
RubyGems
892
Rust
886
Swift
37
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

881 advisories

Loading
In some cases, the ktrace facility will log the contents of kernel structures to userspace. In... Unknown Unreviewed
CVE-2025-0662 was published Jan 30, 2025
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a... High Unreviewed
CVE-2024-12179 was published Dec 17, 2024
A maliciously crafted DWF file, when parsed through Autodesk Navisworks, can be used to cause a... High Unreviewed
CVE-2024-12670 was published Dec 17, 2024
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a... High Unreviewed
CVE-2024-12669 was published Dec 17, 2024
In Eclipse Mosquitto, from version 1.3.2 through 2.0.18, if a malicious broker sends a crafted... High Unreviewed
CVE-2024-10525 was published Oct 30, 2024
A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force... High Unreviewed
CVE-2024-7673 was published Sep 30, 2024
A maliciously crafted DWF file, when parsed in dwfcore.dll through Autodesk Navisworks, can force... High Unreviewed
CVE-2024-7674 was published Sep 30, 2024
Windows Cryptographic Services Remote Code Execution Vulnerability High Unreviewed
CVE-2024-30020 was published May 14, 2024
LibVNCServer 0.9.12 release and earlier contains heap buffer overflow vulnerability within the... High Unreviewed
CVE-2019-15690 was published Jan 24, 2025
A vulnerability in the Object Linking and Embedding 2 (OLE2) decryption routine of ClamAV could... Moderate Unreviewed
CVE-2025-20128 was published Jan 22, 2025
A heap-based buffer overflow vulnerability in the processing of Link Control Protocol messages in... Moderate Unreviewed
CVE-2020-12819 was published Dec 19, 2024
A heap-based buffer overflow vulnerability exists in the .egi parsing functionality of The Biosig... Critical Unreviewed
CVE-2024-21795 was published Feb 20, 2024
Substance3D - Designer versions 14.0 and earlier are affected by a Heap-based Buffer Overflow... High Unreviewed
CVE-2025-21137 was published Jan 14, 2025
Substance3D - Designer versions 14.0 and earlier are affected by a Heap-based Buffer Overflow... High Unreviewed
CVE-2025-21139 was published Jan 14, 2025
A buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in... High Unreviewed
CVE-2023-50739 was published Jan 18, 2025
Substance3D - Stager versions 3.0.4 and earlier are affected by a Heap-based Buffer Overflow... High Unreviewed
CVE-2025-21129 was published Jan 14, 2025
A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper... Critical Unreviewed
CVE-2024-12084 was published Jan 15, 2025
A potential buffer overflow vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo... Moderate Unreviewed
CVE-2024-10254 was published Jan 15, 2025
A potential TOCTOU vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store... Moderate Unreviewed
CVE-2024-10253 was published Jan 15, 2025
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected... High Unreviewed
CVE-2021-31439 was published May 24, 2022
Windows Telephony Service Remote Code Execution Vulnerability High Unreviewed
CVE-2025-21411 was published Jan 14, 2025
Microsoft Access Remote Code Execution Vulnerability High Unreviewed
CVE-2025-21395 was published Jan 14, 2025
Windows Telephony Service Remote Code Execution Vulnerability High Unreviewed
CVE-2025-21417 was published Jan 14, 2025
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability High Unreviewed
CVE-2025-21333 was published Jan 14, 2025
Windows Graphics Component Elevation of Privilege Vulnerability High Unreviewed
CVE-2025-21382 was published Jan 14, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database