GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,737
Maven
5,000+
npm
4,337
NuGet
764
pip
4,112
Pub
12
RubyGems
960
Rust
1,068
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
165 advisories
Filter by severity
Tesla Model 3 bsa_server BIP Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability....
Moderate
Unreviewed
CVE-2023-32157
was published
May 3, 2024
An out-of-bounds write to heap in the pacparser library on Zscaler Client Connector on Mac may...
Moderate
Unreviewed
CVE-2023-28798
was published
May 2, 2024
A heap-buffer-overflow vulnerability in the read_byte function in NanoMQ v.0.21.7 allows...
Moderate
Unreviewed
CVE-2024-31036
was published
Apr 23, 2024
Secure Boot Security Feature Bypass Vulnerability
Moderate
Unreviewed
CVE-2024-26168
was published
Apr 9, 2024
A vulnerability was found in UPX up to 4.2.2. It has been rated as critical. This issue affects...
Moderate
Unreviewed
CVE-2024-3209
was published
Apr 3, 2024
A vulnerability was found in ermig1979 Simd up to 6.0.134. It has been declared as critical. This...
Moderate
Unreviewed
CVE-2024-3207
was published
Apr 3, 2024
An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap overflow in AP4_Dec3Atom...
Moderate
Unreviewed
CVE-2024-30806
was published
Apr 2, 2024
A vulnerability was found in appneta tcpreplay up to 4.4.4. It has been classified as problematic...
Moderate
Unreviewed
CVE-2024-3024
was published
Mar 28, 2024
Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker...
Moderate
Unreviewed
CVE-2024-28572
was published
Mar 20, 2024
Heap Buffer Overflow vulnerability in qpdf 11.9.0 allows attackers to crash the application via...
Moderate
Unreviewed
CVE-2024-24246
was published
Feb 29, 2024
Buffer Overflow vulnerability in XNSoft NConvert 7.163 (for Windows x86) allows attackers to...
Moderate
Unreviewed
CVE-2024-22532
was published
Feb 29, 2024
An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c...
Moderate
Unreviewed
CVE-2024-26327
was published
Feb 19, 2024
Windows Kernel Remote Code Execution Vulnerability
Moderate
Unreviewed
CVE-2024-21341
was published
Feb 13, 2024
A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when...
Moderate
Unreviewed
CVE-2024-1062
was published
Feb 12, 2024
A flaw was found in Indent. This issue may allow a local user to use a specially-crafted file to...
Moderate
Unreviewed
CVE-2024-0911
was published
Feb 6, 2024
A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data...
Moderate
Unreviewed
CVE-2024-0684
was published
Feb 6, 2024
A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition...
Moderate
Unreviewed
CVE-2023-40548
was published
Jan 29, 2024
NVIDIA DGX A100 SBIOS contains a vulnerability where a user may cause a heap-based buffer...
Moderate
Unreviewed
CVE-2023-31031
was published
Jan 12, 2024
A Heap-based Buffer Overflow vulnerability in the Routing Protocol Daemon (RPD) of Juniper...
Moderate
Unreviewed
CVE-2024-21596
was published
Jan 12, 2024
A Heap-based Buffer Overflow vulnerability in the Network Services Daemon (NSD) of Juniper...
Moderate
Unreviewed
CVE-2024-21594
was published
Jan 12, 2024
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Moderate
Unreviewed
CVE-2024-21337
was published
Jan 12, 2024
A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue...
Moderate
Unreviewed
CVE-2023-7104
was published
Dec 29, 2023
When reading DesFire keys, the function that reads the card isn't properly checking the...
Moderate
Unreviewed
CVE-2023-33221
was published
Dec 15, 2023
IBM Informix Dynamic Server 12.10 and 14.10 cdr is vulnerable to a heap buffer overflow, caused...
Moderate
Unreviewed
CVE-2023-28527
was published
Dec 9, 2023
IBM Informix Dynamic Server 12.10 and 14.10 archecker is vulnerable to a heap buffer overflow,...
Moderate
Unreviewed
CVE-2023-28526
was published
Dec 9, 2023
ProTip!
Advisories are also available from the
GraphQL API