Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,237
Erlang
31
GitHub Actions
20
Go
2,000
Maven
5,000+
npm
3,711
NuGet
661
pip
3,383
Pub
11
RubyGems
885
Rust
849
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

2,641 advisories

Loading
In analyzeAxes of FontUtils.cpp, there is a possible out of bounds read due to a missing bounds... Moderate Unreviewed
CVE-2018-9410 was published Nov 19, 2024
Substance3D - Stager versions 3.0.2 and earlier are affected by an out-of-bounds read... Moderate Unreviewed
CVE-2024-52998 was published Nov 22, 2024
A validation issue was addressed with improved input sanitization. This issue is fixed in macOS... Moderate Unreviewed
CVE-2024-23264 was published Mar 8, 2024
In bta_hd_get_report_act of bta_hd_act.cc, there is a possible out-of-bounds read due to improper... Moderate Unreviewed
CVE-2018-9480 was published Nov 20, 2024
In bta_dm_remove_sec_dev_entry of bta_dm_act.cc, there is a possible out of bounds read due to a... Moderate Unreviewed
CVE-2018-9483 was published Nov 20, 2024
In hidh_l2cif_data_ind of hidh_conn.cc, there is a possible out of bounds read due to a missing... Moderate Unreviewed
CVE-2018-9486 was published Nov 20, 2024
In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing... Moderate Unreviewed
CVE-2018-9485 was published Nov 20, 2024
In intr_data_copy_cb of btif_hd.cc, there is a possible out of bounds read due to an integer... Moderate Unreviewed
CVE-2018-9482 was published Nov 20, 2024
In bta_hd_set_report_act of bta_hd_act.cc, there is a possible out-of-bounds read due to an... Moderate Unreviewed
CVE-2018-9481 was published Nov 20, 2024
A heap-based buffer under-read in tsMuxer version nightly-2024-05-12-02-01-18 allows attackers to... Moderate Unreviewed
CVE-2024-52613 was published Nov 15, 2024
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix a bug... Moderate Unreviewed
CVE-2024-50208 was published Nov 8, 2024
A flaw was found within the handling of SMB2_READ commands in the kernel ksmbd module. The issue... Moderate Unreviewed
CVE-2023-39180 was published Nov 18, 2024
A flaw was found within the parsing of SMB2 requests that have a transform header in the kernel... Moderate Unreviewed
CVE-2023-39176 was published Nov 18, 2024
Audition versions 23.6.9, 24.4.6 and earlier are affected by an out-of-bounds read vulnerability... Moderate Unreviewed
CVE-2024-49536 was published Nov 15, 2024
A vulnerability in Cisco TelePresence CE and RoomOS could allow an unauthenticated, adjacent... Moderate Unreviewed
CVE-2023-20094 was published Nov 15, 2024
A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series... Moderate Unreviewed
CVE-2022-20766 was published Nov 15, 2024
In ProtocolPsKeepAliveStatusAdapter::getCode() of protocolpsadapter.cpp, there is a possible out... Moderate Unreviewed
CVE-2024-27230 was published Mar 11, 2024
Storage Spaces Controller Information Disclosure Vulnerability. Moderate Unreviewed
CVE-2022-21877 was published Jan 12, 2022
Win32k Information Disclosure Vulnerability. Moderate Unreviewed
CVE-2022-21876 was published Jan 12, 2022
In onActivityResult of EditUserPhotoController.java, there is a possible cross-user media read... Moderate Unreviewed
CVE-2024-43082 was published Nov 13, 2024
In the Linux kernel, the following vulnerability has been resolved: netdevsim: Add trailing zero... Moderate Unreviewed
CVE-2024-50259 was published Nov 9, 2024
A flaw was found within the parsing of extended attributes in the kernel ksmbd module. The issue... Moderate Unreviewed
CVE-2023-4458 was published Nov 14, 2024
Improper bounds checking in Ivanti Secure Access Client before version 22.7R3 allows a local... Moderate Unreviewed
CVE-2024-38654 was published Nov 13, 2024
An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of... Moderate Unreviewed
CVE-2024-46955 was published Nov 11, 2024
In certain cases the JIT incorrectly optimized MSubstr operations, which led to out-of-bounds... Moderate Unreviewed
CVE-2024-3855 was published Apr 16, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database